admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-07-02 17:01:29 +00:00
parent 84a6aed3ab
commit 4e9c269211
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
9 changed files with 30 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2019/3xxx/CVE-2019-3689.json
View File

@ -113,6 +113,11 @@
"refsource": "MISC",
"name": "https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=fee2cc29e888f2ced6a76990923aef19d326dc0e",
"url": "https://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commitdiff;h=fee2cc29e888f2ced6a76990923aef19d326dc0e"
},
{
"refsource": "UBUNTU",
"name": "USN-4400-1",
"url": "https://usn.ubuntu.com/4400-1/"
}
]
},

2
2020/11xxx/CVE-2020-11074.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.5.3.0 and before version 1.7.7.6, there is a stored XSS when using the name of a quick access item.\n\nThe problem is fixed in 1.7.7.6."
"value": "In PrestaShop from version 1.5.3.0 and before version 1.7.7.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.7.6."
}
]
},

2
2020/15xxx/CVE-2020-15079.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions.\n\nThe problem is fixed in version 1.7.6.6"
"value": "In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6"
}
]
},

2
2020/15xxx/CVE-2020-15080.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible.\n\nThe problem is fixed in version 1.7.6.6\n\nA possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server. "
"value": "In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server."
}
]
},

2
2020/15xxx/CVE-2020-15081.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory.\n\nThe problem is fixed in version 1.7.6.6.\n\nA possible workaround is to add an empty index.php file in the upload directory."
"value": "In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory."
}
]
},

2
2020/15xxx/CVE-2020-15082.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables.\n\nThe problem is fixed in 1.7.6.6"
"value": "In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6"
}
]
},

2
2020/15xxx/CVE-2020-15083.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflected XSS.\n\nThe problem is fixed in 1.7.6.6"
"value": "In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflected XSS. The problem is fixed in 1.7.6.6"
}
]
},

18
2020/15xxx/CVE-2020-15508.json Normal file
View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-15508",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

2
2020/4xxx/CVE-2020-4061.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack.\n\nThis has been fixed in 1.0.467."
"value": "In October from version 1.0.319 and before version 1.0.467, pasting content copied from malicious websites into the Froala richeditor could result in a successful self-XSS attack. This has been fixed in 1.0.467."
}
]
},