admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-07-02 18:01:28 +00:00
parent 9c03e3ba7c
commit 703acee832
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
22 changed files with 103 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
2020/15xxx/CVE-2020-15091.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it (**without changing chainID**). A malicious block proposer (even with a minimal amount of stake) can use this vulnerability to completely halt the network.\n\nThis issue is fixed in Tendermint 0.33.6 which checks all the signatures are for the block with 2/3+ majority before creating a commit."
"value": "TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it (**without changing chainID**). A malicious block proposer (even with a minimal amount of stake) can use this vulnerability to completely halt the network. This issue is fixed in Tendermint 0.33.6 which checks all the signatures are for the block with 2/3+ majority before creating a commit."
}
]
},

5
2020/2xxx/CVE-2020-2201.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1775",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1775",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2202.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1690",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1690",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2203.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2204.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1691",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2205.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(1)",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(1)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2206.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(2)",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1728%20(2)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2207.json
View File

@ -57,6 +57,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1776",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1776",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2208.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1627",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1627",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2209.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1686",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1686",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2210.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2211.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1738",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1738",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2212.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1632",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1632",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2213.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1630",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1630",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2214.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1811",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1811",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2215.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2216.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1762",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2217.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1771",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1771",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2218.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1576",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1576",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

5
2020/2xxx/CVE-2020-2219.json
View File

@ -61,6 +61,11 @@
"name": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1803",
"url": "https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1803",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20200702 Multiple vulnerabilities in Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2020/07/02/7"
}
]
}

2
2020/4xxx/CVE-2020-4074.json
View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop from version 1.5.0.0 and before version 1.7.7.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands.\n\nThe problem is fixed in 1.7.7.6."
"value": "In PrestaShop from version 1.5.0.0 and before version 1.7.7.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.7.6."
}
]
},

7
2020/8xxx/CVE-2020-8165.json
View File

@ -58,6 +58,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20200619 [SECURITY] [DLA 2251-1] rails security update",
"url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00022.html"
},
{
"refsource": "CONFIRM",
"name": "https://weblog.rubyonrails.org/2020/5/18/Rails-5-2-4-3-and-6-0-3-1-have-been-released/",
"url": "https://weblog.rubyonrails.org/2020/5/18/Rails-5-2-4-3-and-6-0-3-1-have-been-released/"
}
]
},
@ -65,7 +70,7 @@
"description_data": [
{
"lang": "eng",
"value": "A deserialization of untrusted data vulnernerability exists in rails < 5.2.5, rails < 6.0.4 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE."
"value": "A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE."
}
]
}