"-Synchronized-Data."

2017/18xxx/CVE-2017-18509.json

@@ -96,6 +96,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2018/20xxx/CVE-2018-20856.json

@@ -91,6 +91,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2019/10xxx/CVE-2019-10081.json

@@ -4,14 +4,58 @@
     "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2019-10081",
-        "ASSIGNER": "cve@mitre.org",
+        "ASSIGNER": "security@apache.org",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "n/a",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Apache HTTP Server",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "2.4.20 to 2.4.39"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "mod_http2, memory corruption on early pushes"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "name": "https://httpd.apache.org/security/vulnerabilities_24.html",
+                "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
+            }
+        ]
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with \"H2PushResource\", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client."
             }
         ]
     }

2019/10xxx/CVE-2019-10162.json

@@ -66,6 +66,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1904",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html"
+            },
+            {
+                "refsource": "SUSE",
+                "name": "openSUSE-SU-2019:1921",
+                "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html"
             }
         ]
     },

2019/10xxx/CVE-2019-10163.json

@@ -66,6 +66,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1904",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html"
+            },
+            {
+                "refsource": "SUSE",
+                "name": "openSUSE-SU-2019:1921",
+                "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html"
             }
         ]
     },

2019/12xxx/CVE-2019-12594.json

@@ -91,6 +91,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1905",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00047.html"
+            },
+            {
+                "refsource": "SUSE",
+                "name": "openSUSE-SU-2019:1920",
+                "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00053.html"
             }
         ]
     }

2019/13xxx/CVE-2019-13631.json

@@ -111,6 +111,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2019/13xxx/CVE-2019-13648.json

@@ -106,6 +106,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2019/14xxx/CVE-2019-14283.json

@@ -101,6 +101,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2019/14xxx/CVE-2019-14284.json

@@ -101,6 +101,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
+                "url": "http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
             }
         ]
     }

2019/2xxx/CVE-2019-2420.json

@@ -81,6 +81,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2434.json

@@ -81,6 +81,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2436.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2481.json

@@ -85,6 +85,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2482.json

@@ -85,6 +85,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2486.json

@@ -81,6 +81,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2494.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2495.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2502.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2503.json

@@ -95,6 +95,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2507.json

@@ -85,6 +85,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2510.json

@@ -86,6 +86,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2528.json

@@ -81,6 +81,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2530.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2531.json

@@ -85,6 +85,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2532.json

@@ -81,6 +81,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2533.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2534.json

@@ -85,6 +85,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2535.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2536.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2537.json

@@ -95,6 +95,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2539.json

@@ -72,6 +72,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2581.json

@@ -76,6 +76,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2584.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2585.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2587.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2589.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2593.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2596.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2606.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2607.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2614.json

@@ -110,6 +110,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1915",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2617.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2620.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2623.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2624.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2625.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2626.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2627.json

@@ -110,6 +110,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1915",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2628.json

@@ -91,6 +91,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1915",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00032.html"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2630.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2631.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2634.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2635.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2636.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2644.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2681.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2686.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2687.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2688.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2689.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2693.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2694.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2695.json

@@ -67,6 +67,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2737.json

@@ -95,6 +95,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2738.json

@@ -75,6 +75,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2739.json

@@ -95,6 +95,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2740.json

@@ -95,6 +95,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2752.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2755.json

@@ -66,6 +66,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2758.json

@@ -76,6 +76,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2778.json

@@ -71,6 +71,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2780.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2789.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2795.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2796.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2797.json

@@ -71,6 +71,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2798.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2800.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2801.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2802.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2803.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2808.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2810.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2811.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2812.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2814.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2815.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2819.json

@@ -75,6 +75,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2826.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2834.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/2xxx/CVE-2019-2879.json

@@ -62,6 +62,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2484",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2484"
+            },
+            {
+                "refsource": "REDHAT",
+                "name": "RHSA-2019:2511",
+                "url": "https://access.redhat.com/errata/RHSA-2019:2511"
             }
         ]
     }

2019/7xxx/CVE-2019-7165.json

@@ -86,6 +86,11 @@
                 "refsource": "SUSE",
                 "name": "openSUSE-SU-2019:1905",
                 "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00047.html"
+            },
+            {
+                "refsource": "SUSE",
+                "name": "openSUSE-SU-2019:1920",
+                "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00053.html"
             }
         ]
     }

2019/9xxx/CVE-2019-9850.json

@@ -1,18 +1,77 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "security@documentfoundation.org",
+        "DATE_PUBLIC": "2019-08-15T00:00:00.000Z",
         "ID": "CVE-2019-9850",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC",
-        "STATE": "RESERVED"
+        "TITLE": "Insufficient url validation allowing LibreLogo script execution"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "LibreOffice",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<",
+                                            "version_value": "6.2.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Document Foundation"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "Thanks to alex (@insertscript) for reporting this issue"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6."
             }
         ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.7"
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "Insufficient url validation"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "CONFIRM",
+                "name": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850",
+                "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "EXTERNAL"
     }
 }

2019/9xxx/CVE-2019-9851.json

@@ -1,18 +1,77 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "security@documentfoundation.org",
+        "DATE_PUBLIC": "2019-08-15T00:00:00.000Z",
         "ID": "CVE-2019-9851",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC",
-        "STATE": "RESERVED"
+        "TITLE": "LibreLogo global-event script execution"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "LibreOffice",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<",
+                                            "version_value": "6.2.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Document Foundation"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "Thanks to Gabriel Masei of 1&1 for discovering and reporting this issue"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from document event script handers, e.g. mouse over. However LibreOffice also has a separate feature where documents can specify that pre-installed scripts can be executed on various global script events such as document-open, etc. In the fixed versions, global script event handlers are validated equivalently to document script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6."
             }
         ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.7"
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "arbitrary script execution"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "CONFIRM",
+                "name": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9851",
+                "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9851"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "EXTERNAL"
     }
 }

2019/9xxx/CVE-2019-9852.json

@@ -1,18 +1,77 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "security@documentfoundation.org",
+        "DATE_PUBLIC": "2019-08-15T00:00:00.000Z",
         "ID": "CVE-2019-9852",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC",
-        "STATE": "RESERVED"
+        "TITLE": "Insufficient URL encoding flaw in allowed script location check"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "LibreOffice",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<",
+                                            "version_value": "6.2.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Document Foundation"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "Thanks to Nils Emmerich of ERNW Research GmbH for discovering and reporting this issue"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2018-16858, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed. However this new protection could be bypassed by a URL encoding attack. In the fixed versions, the parsed url describing the script location is correctly encoded before further processing. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6."
             }
         ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.7"
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-116 Improper Encoding or Escaping of Output"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852",
+                "name": "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9852"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "EXTERNAL"
     }
 }