diff --git a/2019/19xxx/CVE-2019-19612.json b/2019/19xxx/CVE-2019-19612.json index 195b1103aea..4425674ea2a 100644 --- a/2019/19xxx/CVE-2019-19612.json +++ b/2019/19xxx/CVE-2019-19612.json @@ -34,7 +34,7 @@ "description_data": [ { "lang": "eng", - "value": "** DISPUTED ** An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting (XSS). NOTE: the vendor does not recognize this issue and will not patch it." + "value": "An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting (XSS). Fixed in Release 24.2020.20608.0." } ] }, diff --git a/2019/19xxx/CVE-2019-19613.json b/2019/19xxx/CVE-2019-19613.json index 1b9d5a590aa..bef955a0d4c 100644 --- a/2019/19xxx/CVE-2019-19613.json +++ b/2019/19xxx/CVE-2019-19613.json @@ -34,7 +34,7 @@ "description_data": [ { "lang": "eng", - "value": "** DISPUTED ** An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request on the wire. NOTE: the vendor does not recognize this issue and will not patch it." + "value": "An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user to a malicious site after authentication. The attacker needs to be on the same network to modify the victim's request on the wire. Fixed in Release 24.2020.20608.0" } ] }, diff --git a/2019/20xxx/CVE-2019-20892.json b/2019/20xxx/CVE-2019-20892.json index 9550f496a2d..9b9dba6ae53 100644 --- a/2019/20xxx/CVE-2019-20892.json +++ b/2019/20xxx/CVE-2019-20892.json @@ -71,6 +71,11 @@ "url": "https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9", "refsource": "MISC", "name": "https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9" + }, + { + "refsource": "MLIST", + "name": "[oss-security] 20200625 [cve-request@...re.org: Re: [scr916814] net-snmp - Perhaps only unreleased development versions; fix appears to be in v5.8.1.pre1]", + "url": "http://www.openwall.com/lists/oss-security/2020/06/25/4" } ] } diff --git a/2020/4xxx/CVE-2020-4072.json b/2020/4xxx/CVE-2020-4072.json index 17a0aaa52ae..b18ad2f5dd7 100644 --- a/2020/4xxx/CVE-2020-4072.json +++ b/2020/4xxx/CVE-2020-4072.json @@ -35,7 +35,7 @@ "description_data": [ { "lang": "eng", - "value": "In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. \nAs the email is provided by a user and the api is public this can be used by an attacker to forge log entries.\nThis is vulnerable to https://cwe.mitre.org/data/definitions/117.html\n\nThis problem affects only application generated with jwt or session authentication. Applications using oauth are not vulnerable.\n\nThis issue has been fixed in version 1.7.0." + "value": "In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem affects only application generated with jwt or session authentication. Applications using oauth are not vulnerable. This issue has been fixed in version 1.7.0." } ] }, diff --git a/2020/9xxx/CVE-2020-9666.json b/2020/9xxx/CVE-2020-9666.json index 82a289dede0..3f209614b6c 100644 --- a/2020/9xxx/CVE-2020-9666.json +++ b/2020/9xxx/CVE-2020-9666.json @@ -3,15 +3,59 @@ "data_format": "MITRE", "data_version": "4.0", "CVE_data_meta": { + "ASSIGNER": "psirt@adobe.com", "ID": "CVE-2020-9666", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "STATE": "PUBLIC" + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Out-of-bounds read" + } + ] + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Adobe", + "product": { + "product_data": [ + { + "product_name": "Adobe Campaign Classic", + "version": { + "version_data": [ + { + "version_value": "Adobe Campaign Classic versions 20.2" + } + ] + } + } + ] + } + } + ] + } + }, + "references": { + "reference_data": [ + { + "name": "https://helpx.adobe.com/security/products/campaign/apsb20-34.html", + "refsource": "CONFIRM", + "url": "https://helpx.adobe.com/security/products/campaign/apsb20-34.html" + } + ] }, "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Adobe Campaign Classic before 20.2 have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure." } ] }