From 43100aa5f24a1406069afdf63598d24037f0471c Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 2 May 2022 00:01:22 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2013/3xxx/CVE-2013-3900.json | 5 +++ 2019/25xxx/CVE-2019-25059.json | 5 +++ 2021/31xxx/CVE-2021-31673.json | 61 ++++++++++++++++++++++++++--- 2021/31xxx/CVE-2021-31674.json | 61 ++++++++++++++++++++++++++--- 2021/40xxx/CVE-2021-40822.json | 71 +++++++++++++++++++++++++++++++--- 2022/1xxx/CVE-2022-1545.json | 18 +++++++++ 2022/28xxx/CVE-2022-28451.json | 61 ++++++++++++++++++++++++++--- 2022/29xxx/CVE-2022-29849.json | 71 +++++++++++++++++++++++++++++++--- 8 files changed, 323 insertions(+), 30 deletions(-) create mode 100644 2022/1xxx/CVE-2022-1545.json diff --git a/2013/3xxx/CVE-2013-3900.json b/2013/3xxx/CVE-2013-3900.json index c7141e5fe97..b8e1e983b3d 100644 --- a/2013/3xxx/CVE-2013-3900.json +++ b/2013/3xxx/CVE-2013-3900.json @@ -61,6 +61,11 @@ "name": "http://blogs.technet.com/b/srd/archive/2013/12/10/ms13-098-update-to-enhance-the-security-of-authenticode.aspx", "refsource": "CONFIRM", "url": "http://blogs.technet.com/b/srd/archive/2013/12/10/ms13-098-update-to-enhance-the-security-of-authenticode.aspx" + }, + { + "refsource": "MISC", + "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900", + "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900" } ] } diff --git a/2019/25xxx/CVE-2019-25059.json b/2019/25xxx/CVE-2019-25059.json index b7a8dc31ad8..6e56dd08eca 100644 --- a/2019/25xxx/CVE-2019-25059.json +++ b/2019/25xxx/CVE-2019-25059.json @@ -56,6 +56,11 @@ "url": "http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=430e219ea17a2650577d70021399c4ead05869e0", "refsource": "MISC", "name": "http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=430e219ea17a2650577d70021399c4ead05869e0" + }, + { + "refsource": "MLIST", + "name": "[debian-lts-announce] 20220501 [SECURITY] [DLA 2989-1] ghostscript security update", + "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html" } ] } diff --git a/2021/31xxx/CVE-2021-31673.json b/2021/31xxx/CVE-2021-31673.json index ad82c75af7c..bbd69f85bb1 100644 --- a/2021/31xxx/CVE-2021-31673.json +++ b/2021/31xxx/CVE-2021-31673.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2021-31673", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2021-31673", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "http://cyclos.com", + "refsource": "MISC", + "name": "http://cyclos.com" + }, + { + "refsource": "MISC", + "name": "https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-cve-2021-31673", + "url": "https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-cve-2021-31673" } ] } diff --git a/2021/31xxx/CVE-2021-31674.json b/2021/31xxx/CVE-2021-31674.json index 3d879b8b792..a530d20efff 100644 --- a/2021/31xxx/CVE-2021-31674.json +++ b/2021/31xxx/CVE-2021-31674.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2021-31674", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2021-31674", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "http://cyclos.com", + "refsource": "MISC", + "name": "http://cyclos.com" + }, + { + "refsource": "MISC", + "name": "https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-in-undefined-enum-cve-2021-31674", + "url": "https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-in-undefined-enum-cve-2021-31674" } ] } diff --git a/2021/40xxx/CVE-2021-40822.json b/2021/40xxx/CVE-2021-40822.json index 228af721d0b..47387035d0c 100644 --- a/2021/40xxx/CVE-2021-40822.json +++ b/2021/40xxx/CVE-2021-40822.json @@ -1,17 +1,76 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2021-40822", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2021-40822", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/geoserver/geoserver/releases", + "refsource": "MISC", + "name": "https://github.com/geoserver/geoserver/releases" + }, + { + "refsource": "MISC", + "name": "https://osgeo-org.atlassian.net/browse/GEOS-10229", + "url": "https://osgeo-org.atlassian.net/browse/GEOS-10229" + }, + { + "refsource": "CONFIRM", + "name": "https://github.com/geoserver/geoserver/compare/2.19.2...2.19.3", + "url": "https://github.com/geoserver/geoserver/compare/2.19.2...2.19.3" + }, + { + "refsource": "MISC", + "name": "https://osgeo-org.atlassian.net/browse/GEOS-10229?focusedCommentId=83508", + "url": "https://osgeo-org.atlassian.net/browse/GEOS-10229?focusedCommentId=83508" } ] } diff --git a/2022/1xxx/CVE-2022-1545.json b/2022/1xxx/CVE-2022-1545.json new file mode 100644 index 00000000000..db827595dcc --- /dev/null +++ b/2022/1xxx/CVE-2022-1545.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2022-1545", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file diff --git a/2022/28xxx/CVE-2022-28451.json b/2022/28xxx/CVE-2022-28451.json index ebccce3d4eb..22693961896 100644 --- a/2022/28xxx/CVE-2022-28451.json +++ b/2022/28xxx/CVE-2022-28451.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2022-28451", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2022-28451", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4", + "refsource": "MISC", + "name": "https://github.com/nopSolutions/nopCommerce/commit/47ff9a241243db9359f10216bcf401baaa36d0b4" + }, + { + "refsource": "MISC", + "name": "https://github.com/nopSolutions/nopCommerce/issues/6203", + "url": "https://github.com/nopSolutions/nopCommerce/issues/6203" } ] } diff --git a/2022/29xxx/CVE-2022-29849.json b/2022/29xxx/CVE-2022-29849.json index e968819c583..1f9629b798c 100644 --- a/2022/29xxx/CVE-2022-29849.json +++ b/2022/29xxx/CVE-2022-29849.json @@ -1,17 +1,76 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2022-29849", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2022-29849", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://www.progress.com/openedge", + "refsource": "MISC", + "name": "https://www.progress.com/openedge" + }, + { + "refsource": "MISC", + "name": "https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849", + "url": "https://community.progress.com/s/article/Remediation-of-Privilege-Escalation-Security-Vulnerability-CVE-2022-29849" + }, + { + "refsource": "MISC", + "name": "https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available", + "url": "https://community.progress.com/s/article/OpenEdge-12-2-9-Update-is-available" + }, + { + "refsource": "MISC", + "name": "https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available", + "url": "https://community.progress.com/s/article/OpenEdge-11-7-14-is-Now-Available" } ] }