"-Synchronized-Data."

2016/7xxx/CVE-2016-7420.json

@@ -76,6 +76,11 @@
                 "name": "[oss-security] 20160915 Re: Does a documentation bug elevate to CVE status? - Crypto++",
                 "refsource": "MLIST",
                 "url": "http://www.openwall.com/lists/oss-security/2016/09/15/12"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[oss-security] 20230928 Re: CVE-2023-4863: libwebp: Heap buffer overflow in WebP Codec",
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/2"
             }
         ]
     }

2023/35xxx/CVE-2023-35074.json

@@ -126,6 +126,11 @@
                 "url": "https://support.apple.com/en-us/HT213937",
                 "refsource": "MISC",
                 "name": "https://support.apple.com/en-us/HT213937"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
             }
         ]
     }

2023/39xxx/CVE-2023-39434.json

@@ -92,6 +92,11 @@
                 "url": "https://support.apple.com/en-us/HT213937",
                 "refsource": "MISC",
                 "name": "https://support.apple.com/en-us/HT213937"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
             }
         ]
     }

2023/40xxx/CVE-2023-40451.json

@@ -58,6 +58,11 @@
                 "url": "https://support.apple.com/en-us/HT213941",
                 "refsource": "MISC",
                 "name": "https://support.apple.com/en-us/HT213941"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
             }
         ]
     }

2023/41xxx/CVE-2023-41074.json

@@ -126,6 +126,11 @@
                 "url": "https://support.apple.com/en-us/HT213937",
                 "refsource": "MISC",
                 "name": "https://support.apple.com/en-us/HT213937"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
             }
         ]
     }

2023/41xxx/CVE-2023-41993.json

@@ -92,6 +92,11 @@
                 "url": "https://support.apple.com/en-us/HT213940",
                 "refsource": "MISC",
                 "name": "https://support.apple.com/en-us/HT213940"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/3",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/3"
             }
         ]
     }

2023/43xxx/CVE-2023-43876.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2023-43876",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2023-43876",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "A Cross-Site Scripting (XSS) vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/sromanhu/October-CMS-Reflected-XSS---Installation/blob/main/README.md",
+                "refsource": "MISC",
+                "name": "https://github.com/sromanhu/October-CMS-Reflected-XSS---Installation/blob/main/README.md"
             }
         ]
     }

2023/43xxx/CVE-2023-43878.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2023-43878",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2023-43878",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/sromanhu/RiteCMS-Stored-XSS---MainMenu/blob/main/README.md",
+                "refsource": "MISC",
+                "name": "https://github.com/sromanhu/RiteCMS-Stored-XSS---MainMenu/blob/main/README.md"
             }
         ]
     }

2023/43xxx/CVE-2023-43879.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2023-43879",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2023-43879",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/sromanhu/RiteCMS-Stored-XSS---GlobalContent/tree/main",
+                "refsource": "MISC",
+                "name": "https://github.com/sromanhu/RiteCMS-Stored-XSS---GlobalContent/tree/main"
             }
         ]
     }

2023/43xxx/CVE-2023-43884.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2023-43884",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2023-43884",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Reference ID' parameter."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/dpuenteramirez/XSS-ReferenceID-Subrion_4.2.1",
+                "refsource": "MISC",
+                "name": "https://github.com/dpuenteramirez/XSS-ReferenceID-Subrion_4.2.1"
             }
         ]
     }

2023/44xxx/CVE-2023-44316.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2023-44316",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2023/4xxx/CVE-2023-4863.json

@@ -243,6 +243,11 @@
                 "url": "http://www.openwall.com/lists/oss-security/2023/09/28/1",
                 "refsource": "MISC",
                 "name": "http://www.openwall.com/lists/oss-security/2023/09/28/1"
+            },
+            {
+                "url": "http://www.openwall.com/lists/oss-security/2023/09/28/2",
+                "refsource": "MISC",
+                "name": "http://www.openwall.com/lists/oss-security/2023/09/28/2"
             }
         ]
     }