"-Synchronized-Data."

2019/0xxx/CVE-2019-0221.json

@@ -54,6 +54,11 @@
                 "refsource": "CONFIRM",
                 "name": "https://lists.apache.org/thread.html/6e6e9eacf7b28fd63d249711e9d3ccd4e0a83f556e324aee37be5a8c@%3Cannounce.tomcat.apache.org%3E",
                 "url": "https://lists.apache.org/thread.html/6e6e9eacf7b28fd63d249711e9d3ccd4e0a83f556e324aee37be5a8c@%3Cannounce.tomcat.apache.org%3E"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 XSS in SSI printenv command - Apache Tomcat - CVE-2019-0221",
+                "url": "http://seclists.org/fulldisclosure/2019/May/50"
             }
         ]
     },

2019/10xxx/CVE-2019-10919.json

@@ -63,6 +63,11 @@
                 "refsource": "MISC",
                 "name": "http://packetstormsecurity.com/files/153123/Siemens-LOGO-8-Missing-Authentication.html",
                 "url": "http://packetstormsecurity.com/files/153123/Siemens-LOGO-8-Missing-Authentication.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 [SYSS-2019-013]: Siemens LOGO! 8 - Missing Authentication for Critical Function (CWE-306)",
+                "url": "http://seclists.org/fulldisclosure/2019/May/45"
             }
         ]
     },

2019/10xxx/CVE-2019-10920.json

@@ -63,6 +63,11 @@
                 "refsource": "MISC",
                 "name": "http://packetstormsecurity.com/files/153122/Siemens-LOGO-8-Hard-Coded-Cryptographic-Key.html",
                 "url": "http://packetstormsecurity.com/files/153122/Siemens-LOGO-8-Hard-Coded-Cryptographic-Key.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 [SYSS-2019-012]: Siemens LOGO! 8 - Use of Hard-coded Cryptographic Key (CWE-321)",
+                "url": "http://seclists.org/fulldisclosure/2019/May/44"
             }
         ]
     },

2019/10xxx/CVE-2019-10921.json

@@ -63,6 +63,11 @@
                 "refsource": "MISC",
                 "name": "http://packetstormsecurity.com/files/153124/Siemens-LOGO-8-Recoverable-Password-Format.html",
                 "url": "http://packetstormsecurity.com/files/153124/Siemens-LOGO-8-Recoverable-Password-Format.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 [SYSS-2019-014]: Siemens LOGO! 8 - Storing Passwords in a Recoverable Format (CWE-257)",
+                "url": "http://seclists.org/fulldisclosure/2019/May/49"
             }
         ]
     },

2019/12xxx/CVE-2019-12454.json

@@ -1,17 +1,66 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2019-12454",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2019-12454",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://lkml.org/lkml/2019/5/29/705",
+                "refsource": "MISC",
+                "name": "https://lkml.org/lkml/2019/5/29/705"
+            },
+            {
+                "url": "https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git/commit/?h=for-5.3&id=a54988113985ca22e414e132054f234fc8a92604",
+                "refsource": "MISC",
+                "name": "https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git/commit/?h=for-5.3&id=a54988113985ca22e414e132054f234fc8a92604"
             }
         ]
     }

2019/12xxx/CVE-2019-12455.json

@@ -1,17 +1,66 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2019-12455",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2019-12455",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derived_name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash)."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2010240.html",
+                "refsource": "MISC",
+                "name": "https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2010240.html"
+            },
+            {
+                "url": "https://git.kernel.org/pub/scm/linux/kernel/git/sunxi/linux.git/commit/?h=sunxi/clk-for-5.3&id=fcdf445ff42f036d22178b49cf64e92d527c1330",
+                "refsource": "MISC",
+                "name": "https://git.kernel.org/pub/scm/linux/kernel/git/sunxi/linux.git/commit/?h=sunxi/clk-for-5.3&id=fcdf445ff42f036d22178b49cf64e92d527c1330"
             }
         ]
     }

2019/7xxx/CVE-2019-7324.json

@@ -66,6 +66,11 @@
                 "refsource": "MISC",
                 "name": "http://packetstormsecurity.com/files/153093/Kanboard-1.2.7-Cross-Site-Scripting.html",
                 "url": "http://packetstormsecurity.com/files/153093/Kanboard-1.2.7-Cross-Site-Scripting.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 Reflected Cross-site Scripting Vulnerability in Kanboard 1.2.7",
+                "url": "http://seclists.org/fulldisclosure/2019/May/41"
             }
         ]
     }

2019/7xxx/CVE-2019-7393.json

@@ -127,6 +127,11 @@
                 "refsource": "CONFIRM",
                 "name": "https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html",
                 "url": "https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authentication",
+                "url": "http://seclists.org/fulldisclosure/2019/May/43"
             }
         ]
     },

2019/7xxx/CVE-2019-7394.json

@@ -127,6 +127,11 @@
                 "refsource": "CONFIRM",
                 "name": "https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html",
                 "url": "https://support.ca.com/us/product-content/recommended-reading/security-notices/CA20190523-01--security-notice-for-ca-risk-authentication-and-ca-strong-authentication.html"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20190529 CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authentication",
+                "url": "http://seclists.org/fulldisclosure/2019/May/43"
             }
         ]
     },