From 328e990350002eaf3bbf0d93e40d004e2a29a755 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Tue, 6 Feb 2024 19:00:33 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2019/14xxx/CVE-2019-14865.json | 13 +++-- 2023/36xxx/CVE-2023-36498.json | 5 -- 2023/42xxx/CVE-2023-42664.json | 5 -- 2023/43xxx/CVE-2023-43482.json | 5 -- 2023/47xxx/CVE-2023-47167.json | 5 -- 2023/47xxx/CVE-2023-47209.json | 5 -- 2023/47xxx/CVE-2023-47618.json | 5 -- 2024/1xxx/CVE-2024-1048.json | 16 ++++-- 2024/1xxx/CVE-2024-1254.json | 95 ++++++++++++++++++++++++++++++++-- 2024/1xxx/CVE-2024-1285.json | 18 +++++++ 10 files changed, 129 insertions(+), 43 deletions(-) create mode 100644 2024/1xxx/CVE-2024-1285.json diff --git a/2019/14xxx/CVE-2019-14865.json b/2019/14xxx/CVE-2019-14865.json index 4f7941a4a1b..fe811cec55e 100644 --- a/2019/14xxx/CVE-2019-14865.json +++ b/2019/14xxx/CVE-2019-14865.json @@ -55,9 +55,9 @@ "references": { "reference_data": [ { - "url": "https://access.redhat.com/errata/RHSA-2020:0335", + "url": "https://seclists.org/oss-sec/2019/q4/101", "refsource": "MISC", - "name": "https://access.redhat.com/errata/RHSA-2020:0335" + "name": "https://seclists.org/oss-sec/2019/q4/101" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865", @@ -65,9 +65,14 @@ "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14865" }, { - "url": "https://seclists.org/oss-sec/2019/q4/101", + "url": "https://access.redhat.com/errata/RHSA-2020:0335", "refsource": "MISC", - "name": "https://seclists.org/oss-sec/2019/q4/101" + "name": "https://access.redhat.com/errata/RHSA-2020:0335" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2024/02/06/3", + "refsource": "MISC", + "name": "http://www.openwall.com/lists/oss-security/2024/02/06/3" } ] }, diff --git a/2023/36xxx/CVE-2023-36498.json b/2023/36xxx/CVE-2023-36498.json index 89dd64f5f6f..a5cc720c811 100644 --- a/2023/36xxx/CVE-2023-36498.json +++ b/2023/36xxx/CVE-2023-36498.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1853" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1853", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1853" } ] }, diff --git a/2023/42xxx/CVE-2023-42664.json b/2023/42xxx/CVE-2023-42664.json index c5eb32820d3..3a9f9e01c3d 100644 --- a/2023/42xxx/CVE-2023-42664.json +++ b/2023/42xxx/CVE-2023-42664.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1856", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1856" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1856", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1856" } ] }, diff --git a/2023/43xxx/CVE-2023-43482.json b/2023/43xxx/CVE-2023-43482.json index f5fec9f0386..41d9dec766f 100644 --- a/2023/43xxx/CVE-2023-43482.json +++ b/2023/43xxx/CVE-2023-43482.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1850", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1850" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1850", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1850" } ] }, diff --git a/2023/47xxx/CVE-2023-47167.json b/2023/47xxx/CVE-2023-47167.json index b22279a949c..978b98a92fb 100644 --- a/2023/47xxx/CVE-2023-47167.json +++ b/2023/47xxx/CVE-2023-47167.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1855", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1855" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1855", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1855" } ] }, diff --git a/2023/47xxx/CVE-2023-47209.json b/2023/47xxx/CVE-2023-47209.json index 29f03388c47..4e90b3cf079 100644 --- a/2023/47xxx/CVE-2023-47209.json +++ b/2023/47xxx/CVE-2023-47209.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1854" } ] }, diff --git a/2023/47xxx/CVE-2023-47618.json b/2023/47xxx/CVE-2023-47618.json index 9307f32de88..d8f0e8b8d52 100644 --- a/2023/47xxx/CVE-2023-47618.json +++ b/2023/47xxx/CVE-2023-47618.json @@ -58,11 +58,6 @@ "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1859", "refsource": "MISC", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1859" - }, - { - "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1859", - "refsource": "MISC", - "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1859" } ] }, diff --git a/2024/1xxx/CVE-2024-1048.json b/2024/1xxx/CVE-2024-1048.json index 8bbd014029f..b27227e87cd 100644 --- a/2024/1xxx/CVE-2024-1048.json +++ b/2024/1xxx/CVE-2024-1048.json @@ -21,7 +21,8 @@ "description": [ { "lang": "eng", - "value": "n/a" + "value": "Incomplete Cleanup", + "cweId": "CWE-459" } ] } @@ -134,6 +135,11 @@ }, "references": { "reference_data": [ + { + "url": "http://www.openwall.com/lists/oss-security/2024/02/06/3", + "refsource": "MISC", + "name": "http://www.openwall.com/lists/oss-security/2024/02/06/3" + }, { "url": "https://access.redhat.com/security/cve/CVE-2024-1048", "refsource": "MISC", @@ -163,14 +169,14 @@ "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", - "baseScore": 3.2, + "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", - "scope": "CHANGED", - "userInteraction": "REQUIRED", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" } ] diff --git a/2024/1xxx/CVE-2024-1254.json b/2024/1xxx/CVE-2024-1254.json index 5241aff49b2..714fb48c3bc 100644 --- a/2024/1xxx/CVE-2024-1254.json +++ b/2024/1xxx/CVE-2024-1254.json @@ -1,17 +1,104 @@ { + "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { "ID": "CVE-2024-1254", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ASSIGNER": "cna@vuldb.com", + "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S20 Management Platform up to 20231120. This affects an unknown part of the file /sysmanage/sysmanageajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252993 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way." + }, + { + "lang": "deu", + "value": "Es wurde eine kritische Schwachstelle in Beijing Baichuo Smart S20 Management Platform bis 20231120 gefunden. Dabei betrifft es einen unbekannter Codeteil der Datei /sysmanage/sysmanageajax.php. Durch Manipulation des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-89 SQL Injection", + "cweId": "CWE-89" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Beijing Baichuo", + "product": { + "product_data": [ + { + "product_name": "Smart S20 Management Platform", + "version": { + "version_data": [ + { + "version_affected": "=", + "version_value": "20231120" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "url": "https://vuldb.com/?id.252993", + "refsource": "MISC", + "name": "https://vuldb.com/?id.252993" + }, + { + "url": "https://vuldb.com/?ctiid.252993", + "refsource": "MISC", + "name": "https://vuldb.com/?ctiid.252993" + }, + { + "url": "https://github.com/rockersiyuan/CVE/blob/main/Smart%20S20.md", + "refsource": "MISC", + "name": "https://github.com/rockersiyuan/CVE/blob/main/Smart%20S20.md" + } + ] + }, + "credits": [ + { + "lang": "en", + "value": "rocker (VulDB User)" + } + ], + "impact": { + "cvss": [ + { + "version": "3.1", + "baseScore": 4.7, + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "3.0", + "baseScore": 4.7, + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseSeverity": "MEDIUM" + }, + { + "version": "2.0", + "baseScore": 5.8, + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P" } ] } diff --git a/2024/1xxx/CVE-2024-1285.json b/2024/1xxx/CVE-2024-1285.json new file mode 100644 index 00000000000..c4709071ac5 --- /dev/null +++ b/2024/1xxx/CVE-2024-1285.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2024-1285", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file