"-Synchronized-Data."

This commit is contained in:
CVE Team 2024-05-16 15:00:34 +00:00
parent 718301654d
commit 51930e28f6
No known key found for this signature in database
GPG Key ID: BC5FD8F2443B23B7
9 changed files with 888 additions and 38 deletions

View File

@ -1,17 +1,506 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-20326",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "psirt@cisco.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.\n\n\nThis vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
"cweId": "CWE-78"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Cisco",
"product": {
"product_data": [
{
"product_name": "Cisco ConfD",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "7.3.5"
},
{
"version_affected": "=",
"version_value": "7.3.5.2"
},
{
"version_affected": "=",
"version_value": "7.3.5.1"
},
{
"version_affected": "=",
"version_value": "7.3.6"
},
{
"version_affected": "=",
"version_value": "7.4.5.3"
},
{
"version_affected": "=",
"version_value": "7.4.5.2"
},
{
"version_affected": "=",
"version_value": "7.4.6"
},
{
"version_affected": "=",
"version_value": "7.4.5.1"
},
{
"version_affected": "=",
"version_value": "7.4.8"
},
{
"version_affected": "=",
"version_value": "7.4.5"
},
{
"version_affected": "=",
"version_value": "7.4.7"
},
{
"version_affected": "=",
"version_value": "7.5.10"
},
{
"version_affected": "=",
"version_value": "7.5.4"
},
{
"version_affected": "=",
"version_value": "7.5.3.2"
},
{
"version_affected": "=",
"version_value": "7.5.3.1"
},
{
"version_affected": "=",
"version_value": "7.5.4.2"
},
{
"version_affected": "=",
"version_value": "7.5.4.1"
},
{
"version_affected": "=",
"version_value": "7.5.6.2"
},
{
"version_affected": "=",
"version_value": "7.5.5"
},
{
"version_affected": "=",
"version_value": "7.5.8"
},
{
"version_affected": "=",
"version_value": "7.5.9"
},
{
"version_affected": "=",
"version_value": "7.5.6"
},
{
"version_affected": "=",
"version_value": "7.5.4.3"
},
{
"version_affected": "=",
"version_value": "7.5.6.1"
},
{
"version_affected": "=",
"version_value": "7.5.7"
},
{
"version_affected": "=",
"version_value": "7.5.5.1"
},
{
"version_affected": "=",
"version_value": "7.5.3"
},
{
"version_affected": "=",
"version_value": "7.7"
},
{
"version_affected": "=",
"version_value": "7.6"
},
{
"version_affected": "=",
"version_value": "7.8"
},
{
"version_affected": "=",
"version_value": "7.6.12"
},
{
"version_affected": "=",
"version_value": "7.6.11"
},
{
"version_affected": "=",
"version_value": "7.6.9"
},
{
"version_affected": "=",
"version_value": "7.6.5"
},
{
"version_affected": "=",
"version_value": "7.6.1"
},
{
"version_affected": "=",
"version_value": "7.6.14.1"
},
{
"version_affected": "=",
"version_value": "7.6.8.1"
},
{
"version_affected": "=",
"version_value": "7.6.2"
},
{
"version_affected": "=",
"version_value": "7.6.4"
},
{
"version_affected": "=",
"version_value": "7.6.8"
},
{
"version_affected": "=",
"version_value": "7.6.7"
},
{
"version_affected": "=",
"version_value": "7.6.10"
},
{
"version_affected": "=",
"version_value": "7.6.3"
},
{
"version_affected": "=",
"version_value": "7.6.13"
},
{
"version_affected": "=",
"version_value": "7.6.14"
},
{
"version_affected": "=",
"version_value": "7.6.6"
},
{
"version_affected": "=",
"version_value": "7.7.7"
},
{
"version_affected": "=",
"version_value": "7.7.13"
},
{
"version_affected": "=",
"version_value": "7.7.4"
},
{
"version_affected": "=",
"version_value": "7.7.8"
},
{
"version_affected": "=",
"version_value": "7.7.9"
},
{
"version_affected": "=",
"version_value": "7.7.12"
},
{
"version_affected": "=",
"version_value": "7.7.2"
},
{
"version_affected": "=",
"version_value": "7.7.5"
},
{
"version_affected": "=",
"version_value": "7.7.5.1"
},
{
"version_affected": "=",
"version_value": "7.7.6"
},
{
"version_affected": "=",
"version_value": "7.7.10"
},
{
"version_affected": "=",
"version_value": "7.7.1"
},
{
"version_affected": "=",
"version_value": "7.7.3"
},
{
"version_affected": "=",
"version_value": "7.7.11"
},
{
"version_affected": "=",
"version_value": "7.8.8"
},
{
"version_affected": "=",
"version_value": "7.8.4"
},
{
"version_affected": "=",
"version_value": "7.8.2"
},
{
"version_affected": "=",
"version_value": "7.8.7"
},
{
"version_affected": "=",
"version_value": "7.8.9"
},
{
"version_affected": "=",
"version_value": "7.8.11"
},
{
"version_affected": "=",
"version_value": "7.8.5"
},
{
"version_affected": "=",
"version_value": "7.8.1"
},
{
"version_affected": "=",
"version_value": "7.8.3"
},
{
"version_affected": "=",
"version_value": "7.8.6"
},
{
"version_affected": "=",
"version_value": "7.8.10"
},
{
"version_affected": "=",
"version_value": "8.0.4"
},
{
"version_affected": "=",
"version_value": "8.0.8"
},
{
"version_affected": "=",
"version_value": "8.0.5"
},
{
"version_affected": "=",
"version_value": "8.0.7"
},
{
"version_affected": "=",
"version_value": "8.0.2"
},
{
"version_affected": "=",
"version_value": "8.0.1"
},
{
"version_affected": "=",
"version_value": "8.0.3"
},
{
"version_affected": "=",
"version_value": "8.0.6"
},
{
"version_affected": "=",
"version_value": "8.1"
},
{
"version_affected": "=",
"version_value": "8.0"
},
{
"version_affected": "=",
"version_value": "8.1.2"
},
{
"version_affected": "=",
"version_value": "8.1.4"
},
{
"version_affected": "=",
"version_value": "8.1.1"
},
{
"version_affected": "=",
"version_value": "8.1.3"
}
]
}
},
{
"product_name": "Cisco ConfD Basic",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.1"
},
{
"version_affected": "=",
"version_value": "8.0.6"
},
{
"version_affected": "=",
"version_value": "8.0.4"
},
{
"version_affected": "=",
"version_value": "8.0.2"
},
{
"version_affected": "=",
"version_value": "8.0.3"
},
{
"version_affected": "=",
"version_value": "8.0.5"
},
{
"version_affected": "=",
"version_value": "8.0.10"
},
{
"version_affected": "=",
"version_value": "8.0.11"
},
{
"version_affected": "=",
"version_value": "8.0.7"
},
{
"version_affected": "=",
"version_value": "8.0.8"
},
{
"version_affected": "=",
"version_value": "8.0.9"
},
{
"version_affected": "=",
"version_value": "7.8.3"
},
{
"version_affected": "=",
"version_value": "8.0"
}
]
}
},
{
"product_name": "Cisco Network Services Orchestrator",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "N/A"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f",
"refsource": "MISC",
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8",
"refsource": "MISC",
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8"
}
]
},
"source": {
"advisory": "cisco-sa-nso-rwpesc-qrQGnh3f",
"discovery": "EXTERNAL",
"defects": [
"CSCwj67262",
"CSCwi31715"
]
},
"exploit": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
]
}

View File

@ -1,17 +1,122 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-20389",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "psirt@cisco.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.\n\n\nThis vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Incorrect Privilege Assignment",
"cweId": "CWE-266"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Cisco",
"product": {
"product_data": [
{
"product_name": "Cisco ConfD",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "N/A"
}
]
}
},
{
"product_name": "Cisco ConfD Basic",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "8.0.11"
}
]
}
},
{
"product_name": "Cisco Network Services Orchestrator",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "6.0.11"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f",
"refsource": "MISC",
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8",
"refsource": "MISC",
"name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8"
}
]
},
"source": {
"advisory": "cisco-sa-nso-rwpesc-qrQGnh3f",
"discovery": "INTERNAL",
"defects": [
"CSCwj72783",
"CSCwi84310"
]
},
"exploit": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"impact": {
"cvss": [
{
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
}
]
}

View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-34582",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2024-34582",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/silent6trinity/CVE-2024-34582",
"url": "https://github.com/silent6trinity/CVE-2024-34582"
}
]
}

View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-34905",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2024-34905",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/CloudWise-OpenSource/FlyFish/issues/191",
"url": "https://github.com/CloudWise-OpenSource/FlyFish/issues/191"
}
]
}

View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-34957",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2024-34957",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/Gr-1m/cms/blob/main/1.md",
"refsource": "MISC",
"name": "https://github.com/Gr-1m/cms/blob/main/1.md"
}
]
}

View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-34958",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2024-34958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/Gr-1m/cms/blob/main/2.md",
"refsource": "MISC",
"name": "https://github.com/Gr-1m/cms/blob/main/2.md"
}
]
}

View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-35039",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2024-35039",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/ywf7678/cms/blob/main/1.md",
"refsource": "MISC",
"name": "https://github.com/ywf7678/cms/blob/main/1.md"
}
]
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-5005",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

View File

@ -0,0 +1,18 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2024-5006",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}