admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-12-14 03:01:54 +00:00
parent a889d25b11
commit 66e7c4f02d
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
16 changed files with 238 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2020/25xxx/CVE-2020-25812.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25813.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25814.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25815.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25827.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25828.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/25xxx/CVE-2020-25869.json
View File

@ -66,6 +66,11 @@
"refsource": "MISC",
"name": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html",
"url": "https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/26xxx/CVE-2020-26120.json
View File

@ -61,6 +61,11 @@
"url": "https://gerrit.wikimedia.org/r/q/I42e079bc875d17b336ab015f3678eaedc26e10ea",
"refsource": "MISC",
"name": "https://gerrit.wikimedia.org/r/q/I42e079bc875d17b336ab015f3678eaedc26e10ea"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

5
2020/26xxx/CVE-2020-26121.json
View File

@ -66,6 +66,11 @@
"url": "https://gerrit.wikimedia.org/r/q/Ib852a96afc4dca10516d0510e69c10f9892b351b",
"refsource": "MISC",
"name": "https://gerrit.wikimedia.org/r/q/Ib852a96afc4dca10516d0510e69c10f9892b351b"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2020-a4802c53d9",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/"
}
]
}

67
2020/35xxx/CVE-2020-35234.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-35234",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/",
"refsource": "MISC",
"name": "https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/"
},
{
"url": "https://wordpress.org/plugins/easy-wp-smtp/#developers",
"refsource": "MISC",
"name": "https://wordpress.org/plugins/easy-wp-smtp/#developers"
}
]
}
}

67
2020/35xxx/CVE-2020-35235.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-35235",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** UNSUPPORTED WHEN ASSIGNED ** vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/",
"refsource": "MISC",
"name": "https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/"
},
{
"url": "https://wordpress.org/plugins/secure-file-manager/#developers",
"refsource": "MISC",
"name": "https://wordpress.org/plugins/secure-file-manager/#developers"
}
]
}
}

15
2020/5xxx/CVE-2020-5635.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5635",
"ASSIGNER": "vultures@jpcert.or.jp"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,13 +45,19 @@
"references": {
"reference_data": [
{
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html",
"refsource": "MISC",
"name": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
},
{
"url": "https://jvn.jp/en/jp/JVN55917325/index.html"
"url": "https://jvn.jp/en/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN55917325/index.html"
},
{
"url": "https://jvn.jp/jp/JVN55917325/index.html"
"url": "https://jvn.jp/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/jp/JVN55917325/index.html"
}
]
},

15
2020/5xxx/CVE-2020-5636.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5636",
"ASSIGNER": "vultures@jpcert.or.jp"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,13 +45,19 @@
"references": {
"reference_data": [
{
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html",
"refsource": "MISC",
"name": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
},
{
"url": "https://jvn.jp/en/jp/JVN55917325/index.html"
"url": "https://jvn.jp/en/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN55917325/index.html"
},
{
"url": "https://jvn.jp/jp/JVN55917325/index.html"
"url": "https://jvn.jp/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/jp/JVN55917325/index.html"
}
]
},

15
2020/5xxx/CVE-2020-5637.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5637",
"ASSIGNER": "vultures@jpcert.or.jp"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,13 +45,19 @@
"references": {
"reference_data": [
{
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
"url": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html",
"refsource": "MISC",
"name": "https://www.necplatforms.co.jp/product/security_ap/info_20201211.html"
},
{
"url": "https://jvn.jp/en/jp/JVN55917325/index.html"
"url": "https://jvn.jp/en/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN55917325/index.html"
},
{
"url": "https://jvn.jp/jp/JVN55917325/index.html"
"url": "https://jvn.jp/jp/JVN55917325/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/jp/JVN55917325/index.html"
}
]
},

17
2020/5xxx/CVE-2020-5639.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5639",
"ASSIGNER": "vultures@jpcert.or.jp"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,13 +45,19 @@
"references": {
"reference_data": [
{
"url": "https://www.soliton.co.jp/support/2020/004278.html"
"url": "https://www.soliton.co.jp/support/2020/004278.html",
"refsource": "MISC",
"name": "https://www.soliton.co.jp/support/2020/004278.html"
},
{
"url": "https://jvn.jp/en/jp/JVN12884935/index.html"
"url": "https://jvn.jp/en/jp/JVN12884935/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/en/jp/JVN12884935/index.html"
},
{
"url": "https://jvn.jp/jp/JVN12884935/index.html"
"url": "https://jvn.jp/jp/JVN12884935/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/jp/JVN12884935/index.html"
}
]
},
@ -58,7 +65,7 @@
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed."
"value": "Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed."
}
]
}

19
2020/5xxx/CVE-2020-5665.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5665",
"ASSIGNER": "vultures@jpcert.or.jp"
"ASSIGNER": "vultures@jpcert.or.jp",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,16 +45,24 @@
"references": {
"reference_data": [
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01"
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01",
"refsource": "MISC",
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-20-345-01"
},
{
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf"
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf",
"refsource": "MISC",
"name": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-018_en.pdf"
},
{
"url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf"
"url": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf",
"refsource": "MISC",
"name": "https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-018.pdf"
},
{
"url": "https://jvn.jp/vu/JVNVU95638588/index.html"
"url": "https://jvn.jp/vu/JVNVU95638588/index.html",
"refsource": "MISC",
"name": "https://jvn.jp/vu/JVNVU95638588/index.html"
}
]
},