"-Synchronized-Data."

2007/3xxx/CVE-2007-3378.json

@@ -266,6 +266,11 @@
                 "name": "38682",
                 "refsource": "OSVDB",
                 "url": "http://www.osvdb.org/38682"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[oss-security] 20200917 Apache + PHP <= 7.4.10 open_basedir bypass",
+                "url": "http://www.openwall.com/lists/oss-security/2020/09/17/3"
             }
         ]
     }

2020/14xxx/CVE-2020-14338.json

@@ -4,14 +4,58 @@
     "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2020-14338",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "secalert@redhat.com",
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "n/a",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Wildfly",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "All xerces jboss versions before 2.12.0.SP3"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-20"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1860054",
+                "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1860054"
+            }
+        ]
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the \"use-grammar-pool-only\" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This issue is the same flaw as CVE-2020-14621, which affected OpenJDK, and uses a similar code. All xerces jboss versions before 2.12.0.SP3."
             }
         ]
     }

2020/1xxx/CVE-2020-1472.json

@@ -186,6 +186,11 @@
                 "refsource": "CERT-VN",
                 "name": "VU#490028",
                 "url": "https://www.kb.cert.org/vuls/id/490028"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[oss-security] 20200917 Samba and CVE-2020-1472 (\"Zerologon\")",
+                "url": "http://www.openwall.com/lists/oss-security/2020/09/17/2"
             }
         ]
     }

2020/7xxx/CVE-2020-7663.json

@@ -68,6 +68,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20200819 [SECURITY] [DLA 2334-1] ruby-websocket-extensions security update",
                 "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00031.html"
+            },
+            {
+                "refsource": "UBUNTU",
+                "name": "USN-4502-1",
+                "url": "https://usn.ubuntu.com/4502-1/"
             }
         ]
     },