admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2024-02-06 19:00:33 +00:00
parent e8023b50db
commit 328e990350
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
10 changed files with 129 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
2019/14xxx/CVE-2019-14865.json
View File

@ -55,9 +55,9 @@
"references": {
"reference_data": [
{
"url": "https://access.redhat.com/errata/RHSA-2020:0335",
"url": "https://seclists.org/oss-sec/2019/q4/101",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0335"
"name": "https://seclists.org/oss-sec/2019/q4/101"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865",
@ -65,9 +65,14 @@
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865"
},
{
"url": "https://seclists.org/oss-sec/2019/q4/101",
"url": "https://access.redhat.com/errata/RHSA-2020:0335",
"refsource": "MISC",
"name": "https://seclists.org/oss-sec/2019/q4/101"
"name": "https://access.redhat.com/errata/RHSA-2020:0335"
},
{
"url": "http://www.openwall.com/lists/oss-security/2024/02/06/3",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2024/02/06/3"
}
]
},

5
2023/36xxx/CVE-2023-36498.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1853",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1853"
}
]
},

5
2023/42xxx/CVE-2023-42664.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1856",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1856"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1856",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1856"
}
]
},

5
2023/43xxx/CVE-2023-43482.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1850",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1850"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1850",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1850"
}
]
},

5
2023/47xxx/CVE-2023-47167.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1855",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1855"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1855",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1855"
}
]
},

5
2023/47xxx/CVE-2023-47209.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854"
}
]
},

5
2023/47xxx/CVE-2023-47618.json
View File

@ -58,11 +58,6 @@
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1859",
"refsource": "MISC",
"name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1859"
},
{
"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1859",
"refsource": "MISC",
"name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1859"
}
]
},

16
2024/1xxx/CVE-2024-1048.json
View File

@ -21,7 +21,8 @@
"description": [
{
"lang": "eng",
"value": "n/a"
"value": "Incomplete Cleanup",
"cweId": "CWE-459"
}
]
}
@ -134,6 +135,11 @@
},
"references": {
"reference_data": [
{
"url": "http://www.openwall.com/lists/oss-security/2024/02/06/3",
"refsource": "MISC",
"name": "http://www.openwall.com/lists/oss-security/2024/02/06/3"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-1048",
"refsource": "MISC",
@ -163,14 +169,14 @@
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 3.2,
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
}
]

95
2024/1xxx/CVE-2024-1254.json
View File

@ -1,17 +1,104 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-1254",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "cna@vuldb.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S20 Management Platform up to 20231120. This affects an unknown part of the file /sysmanage/sysmanageajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252993 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "deu",
"value": "Es wurde eine kritische Schwachstelle in Beijing Baichuo Smart S20 Management Platform bis 20231120 gefunden. Dabei betrifft es einen unbekannter Codeteil der Datei /sysmanage/sysmanageajax.php. Durch Manipulation des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-89 SQL Injection",
"cweId": "CWE-89"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Beijing Baichuo",
"product": {
"product_data": [
{
"product_name": "Smart S20 Management Platform",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "20231120"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://vuldb.com/?id.252993",
"refsource": "MISC",
"name": "https://vuldb.com/?id.252993"
},
{
"url": "https://vuldb.com/?ctiid.252993",
"refsource": "MISC",
"name": "https://vuldb.com/?ctiid.252993"
},
{
"url": "https://github.com/rockersiyuan/CVE/blob/main/Smart%20S20.md",
"refsource": "MISC",
"name": "https://github.com/rockersiyuan/CVE/blob/main/Smart%20S20.md"
}
]
},
"credits": [
{
"lang": "en",
"value": "rocker (VulDB User)"
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"baseScore": 4.7,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "3.0",
"baseScore": 4.7,
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseSeverity": "MEDIUM"
},
{
"version": "2.0",
"baseScore": 5.8,
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P"
}
]
}

18
2024/1xxx/CVE-2024-1285.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-1285",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}