From 6fb4ee485653dd71253a364cd0af0dd590e9b47f Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 26 Aug 2020 14:01:22 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2017/8xxx/CVE-2017-8804.json | 32 +++++++++++- 2019/18xxx/CVE-2019-18847.json | 67 ++++++++++++++++++++++++ 2020/14xxx/CVE-2020-14498.json | 93 +++++++++++++++++++++++++++++++--- 2020/19xxx/CVE-2020-19007.json | 56 +++++++++++++++++--- 2020/24xxx/CVE-2020-24007.json | 61 +++++++++++++++++++--- 2020/24xxx/CVE-2020-24008.json | 61 +++++++++++++++++++--- 2020/24xxx/CVE-2020-24315.json | 61 +++++++++++++++++++--- 2020/24xxx/CVE-2020-24316.json | 61 +++++++++++++++++++--- 2020/24xxx/CVE-2020-24658.json | 18 +++++++ 9 files changed, 473 insertions(+), 37 deletions(-) create mode 100644 2019/18xxx/CVE-2019-18847.json create mode 100644 2020/24xxx/CVE-2020-24658.json diff --git a/2017/8xxx/CVE-2017-8804.json b/2017/8xxx/CVE-2017-8804.json index db7fbb41aac..f109441b44e 100644 --- a/2017/8xxx/CVE-2017-8804.json +++ b/2017/8xxx/CVE-2017-8804.json @@ -34,7 +34,7 @@ "description_data": [ { "lang": "eng", - "value": "The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779." + "value": "** DISPUTED ** The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references]" } ] }, @@ -76,6 +76,36 @@ "name": "http://www.openwall.com/lists/oss-security/2017/05/05/2", "refsource": "CONFIRM", "url": "http://www.openwall.com/lists/oss-security/2017/05/05/2" + }, + { + "refsource": "SUSE", + "name": "SUSE-SU-2018:0565", + "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html" + }, + { + "refsource": "SUSE", + "name": "openSUSE-SU-2018:0494", + "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html" + }, + { + "refsource": "SUSE", + "name": "SUSE-SU-2018:0451", + "url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html" + }, + { + "refsource": "MISC", + "name": "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html", + "url": "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html" + }, + { + "refsource": "MISC", + "name": "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html", + "url": "https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html" + }, + { + "refsource": "MISC", + "name": "https://seclists.org/oss-sec/2017/q2/228", + "url": "https://seclists.org/oss-sec/2017/q2/228" } ] } diff --git a/2019/18xxx/CVE-2019-18847.json b/2019/18xxx/CVE-2019-18847.json new file mode 100644 index 00000000000..4520135063e --- /dev/null +++ b/2019/18xxx/CVE-2019-18847.json @@ -0,0 +1,67 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2019-18847", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "Akamai Enterprise Application Access Client 1.3.0-080a29f and 1.3.1-556459e has Missing SSL Certificate Validation." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://blogs.akamai.com/sitr/", + "refsource": "MISC", + "name": "https://blogs.akamai.com/sitr/" + }, + { + "refsource": "MISC", + "name": "https://blogs.akamai.com/2020/08/enterprise-application-access-client-eaa-vulnerability-cve-2019-18847.html", + "url": "https://blogs.akamai.com/2020/08/enterprise-application-access-client-eaa-vulnerability-cve-2019-18847.html" + } + ] + } +} \ No newline at end of file diff --git a/2020/14xxx/CVE-2020-14498.json b/2020/14xxx/CVE-2020-14498.json index 7d8922e0de4..1e74fa1a7c3 100644 --- a/2020/14xxx/CVE-2020-14498.json +++ b/2020/14xxx/CVE-2020-14498.json @@ -1,18 +1,99 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { + "ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2020-14498", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "HMS Industrial Networks AB eCatcher Vulnerability" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "eCatcher", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "6.5.5" + } + ] + } + } + ] + }, + "vendor_name": "HMS Industrial Networks AB" + } + ] + } + }, + "credit": [ + { + "lang": "eng", + "value": "Sharon Brizinov of Claroty reported this vulnerability to CISA." + } + ], + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "HMS Industrial Networks AB eCatcher all versions prior to 6.5.5. The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code." } ] + }, + "generator": { + "engine": "Vulnogram 0.0.9" + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 9.6, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "CHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", + "version": "3.1" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "STACK-BASED BUFFER OVERFLOW CWE-121" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03", + "name": "https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03" + } + ] + }, + "solution": [ + { + "lang": "eng", + "value": "HMS recommends users update eCatcher to Version 6.5.5 or later." + } + ], + "source": { + "advisory": "ICSA-20-210-03", + "discovery": "EXTERNAL" } } \ No newline at end of file diff --git a/2020/19xxx/CVE-2020-19007.json b/2020/19xxx/CVE-2020-19007.json index 16e563cbd87..2fdf6540b77 100644 --- a/2020/19xxx/CVE-2020-19007.json +++ b/2020/19xxx/CVE-2020-19007.json @@ -1,17 +1,61 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-19007", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-19007", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/halo-dev/halo/issues/547", + "refsource": "MISC", + "name": "https://github.com/halo-dev/halo/issues/547" } ] } diff --git a/2020/24xxx/CVE-2020-24007.json b/2020/24xxx/CVE-2020-24007.json index 4c18399406c..c2d42e5a9a3 100644 --- a/2020/24xxx/CVE-2020-24007.json +++ b/2020/24xxx/CVE-2020-24007.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-24007", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-24007", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Umanni RH 1.0 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Login page." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/inflixim4be/Brute-Force-on-Umanni-RH", + "refsource": "MISC", + "name": "https://github.com/inflixim4be/Brute-Force-on-Umanni-RH" + }, + { + "url": "https://www.umanni.com.br/", + "refsource": "MISC", + "name": "https://www.umanni.com.br/" } ] } diff --git a/2020/24xxx/CVE-2020-24008.json b/2020/24xxx/CVE-2020-24008.json index 70f815afd32..d9fac9b4e8a 100644 --- a/2020/24xxx/CVE-2020-24008.json +++ b/2020/24xxx/CVE-2020-24008.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-24008", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-24008", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Umanni RH 1.0 has a user enumeration vulnerability. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://www.umanni.com.br/", + "refsource": "MISC", + "name": "https://www.umanni.com.br/" + }, + { + "url": "https://github.com/inflixim4be/User-Enumeration-on-Umanni-RH", + "refsource": "MISC", + "name": "https://github.com/inflixim4be/User-Enumeration-on-Umanni-RH" } ] } diff --git a/2020/24xxx/CVE-2020-24315.json b/2020/24xxx/CVE-2020-24315.json index 6586ebf33b0..ede2659faa9 100644 --- a/2020/24xxx/CVE-2020-24315.json +++ b/2020/24xxx/CVE-2020-24315.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-24315", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-24315", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/", + "refsource": "MISC", + "name": "https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/" + }, + { + "refsource": "MISC", + "name": "https://wordpress.org/plugins/cardoza-wordpress-poll/", + "url": "https://wordpress.org/plugins/cardoza-wordpress-poll/" } ] } diff --git a/2020/24xxx/CVE-2020-24316.json b/2020/24xxx/CVE-2020-24316.json index 6a111383a71..cc9a160f955 100644 --- a/2020/24xxx/CVE-2020-24316.json +++ b/2020/24xxx/CVE-2020-24316.json @@ -1,17 +1,66 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-24316", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-24316", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the \"role\" GET parameter before echoing it back out to the user. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/", + "refsource": "MISC", + "name": "https://zeroaptitude.com/zerodetail/wordpress-plugin-bug-hunting-part-1/" + }, + { + "refsource": "MISC", + "name": "https://wordpress.org/plugins/admin-menu/", + "url": "https://wordpress.org/plugins/admin-menu/" } ] } diff --git a/2020/24xxx/CVE-2020-24658.json b/2020/24xxx/CVE-2020-24658.json new file mode 100644 index 00000000000..20d5e143a86 --- /dev/null +++ b/2020/24xxx/CVE-2020-24658.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2020-24658", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file