- Synchronized data.

2018/17xxx/CVE-2018-17928.json

@@ -54,6 +54,8 @@
    "references" : {
       "reference_data" : [
          {
+            "name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06",
+            "refsource" : "MISC",
             "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06"
          }
       ]

2018/19xxx/CVE-2018-19027.json

@@ -35,7 +35,7 @@
       "description_data" : [
          {
             "lang" : "eng",
-            "value" : "Three type confusion vulnerabilities exist when processing project files in CX-One Versions 4.50 and prior, including the following applications: CX-Protocol Versions 2.0 and prior. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application."
+            "value" : "Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application."
          }
       ]
    },
@@ -54,7 +54,14 @@
    "references" : {
       "reference_data" : [
          {
+            "name" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02",
+            "refsource" : "MISC",
             "url" : "https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02"
+         },
+         {
+            "name" : "106524",
+            "refsource" : "BID",
+            "url" : "http://www.securityfocus.com/bid/106524"
          }
       ]
    }

2018/5xxx/CVE-2018-5560.json

@@ -52,7 +52,7 @@
          "attackComplexity" : "LOW",
          "attackVector" : "NETWORK",
          "availabilityImpact" : "NONE",
-         "baseScore": 10.0,
+         "baseScore" : 10,
          "baseSeverity" : "HIGH",
          "confidentialityImpact" : "HIGH",
          "integrityImpact" : "HIGH",
@@ -82,19 +82,23 @@
    "references" : {
       "reference_data" : [
          {
+            "name" : "https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/",
             "refsource" : "MISC",
-            "url": "https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/",
+            "url" : "https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/"
-            "title": "R7-2018-52: Guardzilla IoT Video Camera Hard-Coded Credential (CVE-2018-5560)",
-            "name": "https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/"
          },
          {
+            "name" : "https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/",
             "refsource" : "MISC",
-            "url": "https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/",
+            "url" : "https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/"
-            "title": "Guardzilla IoT Video Camera Hard-Coded Credentials (CVE-2018-5560)",
-            "name": "https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/"
          }
       ]
    },
+   "solution" : [
+      {
+         "lang" : "eng",
+         "value" : "There is no vendor-provided fix available, see work_around."
+      }
+   ],
    "source" : {
       "advisory" : "R7-2018-52",
       "discovery" : "EXTERNAL"
@@ -104,11 +108,5 @@
          "lang" : "eng",
          "value" : "Users concerned with video privacy should disable the cloud storage functionality provided by the vendor."
       }
-   ],
-   "solution": [
-      {
-         "lang": "eng",
-         "value": "There is no vendor-provided fix available, see work_around."
-      }
    ]
 }

2019/7xxx/CVE-2019-7294.json

@@ -0,0 +1,18 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-7294",
+      "STATE" : "RESERVED"
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided."
+         }
+      ]
+   }
+}

2019/7xxx/CVE-2019-7295.json

@@ -0,0 +1,62 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-7295",
+      "STATE" : "PUBLIC"
+   },
+   "affects" : {
+      "vendor" : {
+         "vendor_data" : [
+            {
+               "product" : {
+                  "product_data" : [
+                     {
+                        "product_name" : "n/a",
+                        "version" : {
+                           "version_data" : [
+                              {
+                                 "version_value" : "n/a"
+                              }
+                           ]
+                        }
+                     }
+                  ]
+               },
+               "vendor_name" : "n/a"
+            }
+         ]
+      }
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula."
+         }
+      ]
+   },
+   "problemtype" : {
+      "problemtype_data" : [
+         {
+            "description" : [
+               {
+                  "lang" : "eng",
+                  "value" : "n/a"
+               }
+            ]
+         }
+      ]
+   },
+   "references" : {
+      "reference_data" : [
+         {
+            "name" : "https://github.com/typora/typora-issues/issues/2129",
+            "refsource" : "MISC",
+            "url" : "https://github.com/typora/typora-issues/issues/2129"
+         }
+      ]
+   }
+}

2019/7xxx/CVE-2019-7296.json

@@ -0,0 +1,62 @@
+{
+   "CVE_data_meta" : {
+      "ASSIGNER" : "cve@mitre.org",
+      "ID" : "CVE-2019-7296",
+      "STATE" : "PUBLIC"
+   },
+   "affects" : {
+      "vendor" : {
+         "vendor_data" : [
+            {
+               "product" : {
+                  "product_data" : [
+                     {
+                        "product_name" : "n/a",
+                        "version" : {
+                           "version_data" : [
+                              {
+                                 "version_value" : "n/a"
+                              }
+                           ]
+                        }
+                     }
+                  ]
+               },
+               "vendor_name" : "n/a"
+            }
+         ]
+      }
+   },
+   "data_format" : "MITRE",
+   "data_type" : "CVE",
+   "data_version" : "4.0",
+   "description" : {
+      "description_data" : [
+         {
+            "lang" : "eng",
+            "value" : "typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula."
+         }
+      ]
+   },
+   "problemtype" : {
+      "problemtype_data" : [
+         {
+            "description" : [
+               {
+                  "lang" : "eng",
+                  "value" : "n/a"
+               }
+            ]
+         }
+      ]
+   },
+   "references" : {
+      "reference_data" : [
+         {
+            "name" : "https://github.com/typora/typora-issues/issues/2131",
+            "refsource" : "MISC",
+            "url" : "https://github.com/typora/typora-issues/issues/2131"
+         }
+      ]
+   }
+}