"-Synchronized-Data."

2022/3xxx/CVE-2022-3792.json

@@ -1,25 +1,32 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
-    "generator": {
-        "engine": "Vulnogram 0.0.9"
-    },
     "CVE_data_meta": {
         "ID": "CVE-2022-3792",
         "ASSIGNER": "cve@usom.gov.tr",
-        "DATE_PUBLIC": "2022-12-19T12:00:00.000Z",
-        "TITLE": "GullsEye terminal operating system SQL \u0130njection",
-        "AKA": "",
         "STATE": "PUBLIC"
     },
-    "source": {
+    "description": {
-        "defect": [
+        "description_data": [
-            "SQL",
+            {
-            "\u0130njection"
+                "lang": "eng",
-        ],
+                "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.This issue affects GullsEye terminal operating system: from unspecified before 5.0.13."
-        "advisory": "GullsEye terminal operating system developed by GullsEye before version 5.0.13 has an unauthenticated Sql \u0130njection vulnerability. This has been fixed in the version 5.0.13",
+            }
-        "discovery": "UNKNOWN"
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
+                        "cweId": "CWE-89"
+                    }
+                ]
+            }
+        ]
     },
     "affects": {
         "vendor": {
@@ -33,10 +40,9 @@
                                 "version": {
                                     "version_data": [
                                         {
-                                            "version_name": "",
                                             "version_affected": "<",
-                                            "version_value": "5.0.13",
+                                            "version_name": "0",
-                                            "platform": ""
+                                            "version_value": "5.0.13"
                                         }
                                     ]
                                 }
@@ -47,64 +53,51 @@
             ]
         }
     },
-    "problemtype": {
-        "problemtype_data": [
-            {
-                "description": [
-                    {
-                        "lang": "eng",
-                        "value": "GullsEye terminal operating system developed by GullsEye before version 5.0.13 has an unauthenticated Sql \u0130njection vulnerability. This has been fixed in the version 5.0.13"
-                    }
-                ]
-            }
-        ]
-    },
-    "description": {
-        "description_data": [
-            {
-                "lang": "eng",
-                "value": "This issue affects: Terminal Operating System versions before 5.0.13"
-            }
-        ]
-    },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
                 "url": "https://www.usom.gov.tr/bildirim/tr-22-0747-2",
+                "refsource": "MISC",
                 "name": "https://www.usom.gov.tr/bildirim/tr-22-0747-2"
             },
             {
-                "refsource": "CONFIRM",
                 "url": "https://omrylmz.com/cve-2022-3792-terminal-operation-system/",
+                "refsource": "MISC",
                 "name": "https://omrylmz.com/cve-2022-3792-terminal-operation-system/"
             },
             {
-                "refsource": "CONFIRM",
                 "url": "https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/",
+                "refsource": "MISC",
                 "name": "https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/"
             }
         ]
     },
-    "configuration": [],
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "source": {
+        "advisory": "TR-22-0748",
+        "defect": [
+            "TR-22-0748"
+        ],
+        "discovery": "UNKNOWN"
+    },
     "impact": {
-        "cvss": {
+        "cvss": [
-            "version": "3.1",
+            {
-            "attackVector": "NETWORK",
                 "attackComplexity": "LOW",
-            "privilegesRequired": "NONE",
+                "attackVector": "NETWORK",
-            "userInteraction": "NONE",
+                "availabilityImpact": "HIGH",
-            "scope": "UNCHANGED",
+                "baseScore": 9.4,
+                "baseSeverity": "CRITICAL",
                 "confidentialityImpact": "HIGH",
                 "integrityImpact": "LOW",
-            "availabilityImpact": "HIGH",
+                "privilegesRequired": "NONE",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
                 "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
-            "baseScore": 9.4,
+                "version": "3.1"
-            "baseSeverity": "CRITICAL"
+            }
+        ]
     }
-    },
-    "exploit": [],
-    "work_around": [],
-    "solution": [],
-    "credit": []
 }

2023/26xxx/CVE-2023-26261.json

@@ -1,17 +1,66 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2023-26261",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2023-26261",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://documentation.ubikasec.com/x/CQDAAw",
+                "refsource": "MISC",
+                "name": "https://documentation.ubikasec.com/x/CQDAAw"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://gist.github.com/Jakick/7d1635b886654ddd0e476b3c79a7ba9f",
+                "url": "https://gist.github.com/Jakick/7d1635b886654ddd0e476b3c79a7ba9f"
             }
         ]
     }