"-Synchronized-Data."

2018/16xxx/CVE-2018-16737.json

@@ -61,6 +61,11 @@
                 "name": "http://tinc-vpn.org/security/",
                 "refsource": "CONFIRM",
                 "url": "http://tinc-vpn.org/security/"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20190227-0001/",
+                "url": "https://www.starwindsoftware.com/security/sw-20190227-0001/"
             }
         ]
     }

2018/16xxx/CVE-2018-16758.json

@@ -66,6 +66,11 @@
                 "name": "DSA-4312",
                 "refsource": "DEBIAN",
                 "url": "https://www.debian.org/security/2018/dsa-4312"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20190227-0003/",
+                "url": "https://www.starwindsoftware.com/security/sw-20190227-0003/"
             }
         ]
     }

2018/18xxx/CVE-2018-18584.json

@@ -101,6 +101,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2049",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2049"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20181213-0001/",
+                "url": "https://www.starwindsoftware.com/security/sw-20181213-0001/"
             }
         ]
     }

2018/18xxx/CVE-2018-18585.json

@@ -96,6 +96,11 @@
                 "refsource": "REDHAT",
                 "name": "RHSA-2019:2049",
                 "url": "https://access.redhat.com/errata/RHSA-2019:2049"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20181213-0002/",
+                "url": "https://www.starwindsoftware.com/security/sw-20181213-0002/"
             }
         ]
     }

2018/3xxx/CVE-2018-3837.json

@@ -72,6 +72,11 @@
                 "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0519",
                 "refsource": "MISC",
                 "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0519"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20191008-0001/",
+                "url": "https://www.starwindsoftware.com/security/sw-20191008-0001/"
             }
         ]
     },

2018/3xxx/CVE-2018-3839.json

@@ -72,6 +72,11 @@
                 "name": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0521",
                 "refsource": "MISC",
                 "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0521"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20191008-0002/",
+                "url": "https://www.starwindsoftware.com/security/sw-20191008-0002/"
             }
         ]
     },

2020/14xxx/CVE-2020-14314.json

@@ -88,6 +88,11 @@
                 "refsource": "MLIST",
                 "name": "[debian-lts-announce] 20201031 [SECURITY] [DLA 2420-2] linux regression update",
                 "url": "https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20210325-0003/",
+                "url": "https://www.starwindsoftware.com/security/sw-20210325-0003/"
             }
         ]
     },

2020/14xxx/CVE-2020-14409.json

@@ -76,6 +76,11 @@
                 "refsource": "GENTOO",
                 "name": "GLSA-202107-55",
                 "url": "https://security.gentoo.org/glsa/202107-55"
+            },
+            {
+                "refsource": "MISC",
+                "name": "https://www.starwindsoftware.com/security/sw-20210325-0001/",
+                "url": "https://www.starwindsoftware.com/security/sw-20210325-0001/"
             }
         ]
     }

2021/36xxx/CVE-2021-36201.json

@@ -1,18 +1,105 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "productsecurity@jci.com",
+        "DATE_PUBLIC": "2022-10-11T16:45:00.000Z",
         "ID": "CVE-2021-36201",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC",
-        "STATE": "RESERVED"
+        "TITLE": "CCURE Observable Response Discrepancy"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "C\u2022CURE 9000 ",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "2.90 and ealier",
+                                            "version_value": "2.90"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Johnson Controls"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "Kim Syversen and Mathias Kj\u00f8lleberg F\u00f8rland reported this vulnerability to Johnson Controls"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Under certain circumstances a C\u2022CURE Portal user could enumerate user accounts in C\u2022CURE 9000 version 2.90 and prior versions. This issue affects: C\u2022CURE 9000 2.90 and earlier version 2.90 and prior versions."
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "impact": {
+        "cvss": {
+            "attackComplexity": "LOW",
+            "attackVector": "ADJACENT_NETWORK",
+            "availabilityImpact": "NONE",
+            "baseScore": 4.3,
+            "baseSeverity": "MEDIUM",
+            "confidentialityImpact": "LOW",
+            "integrityImpact": "NONE",
+            "privilegesRequired": "NONE",
+            "scope": "UNCHANGED",
+            "userInteraction": "NONE",
+            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+            "version": "3.1"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-204: Observable Response Discrepancy"
                     }
                 ]
             }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "name": "https://www.johnsoncontrols.com/cyber-solutions/security-advisories",
+                "refsource": "CONFIRM",
+                "url": "https://www.johnsoncontrols.com/cyber-solutions/security-advisories"
+            },
+            {
+                "name": "ICS-CERT Advisory",
+                "refsource": "CERT",
+                "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-03"
+            }
+        ]
+    },
+    "solution": [
+        {
+            "lang": "eng",
+            "value": "Update C\u2022CURE 9000 2.90 with patch 2.90 SP5 or upgrade C\u2022CURE 9000 to version 3.0. The software can be downloaded here: https://www.swhouse.com/Support/SoftwareDownloads.aspx"
+        }
+    ],
+    "source": {
+        "discovery": "EXTERNAL"
+    }
 }

2022/31xxx/CVE-2022-31682.json

@@ -4,14 +4,58 @@
     "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2022-31682",
-        "ASSIGNER": "cve@mitre.org",
+        "ASSIGNER": "security@vmware.com",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "n/a",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "VMware Aria Operations",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "VMware Aria Operations 8.x"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "VMware Aria Operations patches address an arbitrary file read vulnerability."
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "name": "https://www.vmware.com/security/advisories/VMSA-2022-0026.html",
+                "url": "https://www.vmware.com/security/advisories/VMSA-2022-0026.html"
+            }
+        ]
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data."
             }
         ]
     }

2022/38xxx/CVE-2022-38138.json

@@ -1,18 +1,100 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
         "ID": "CVE-2022-38138",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC"
-        "STATE": "RESERVED"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Library: IEC 61850",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "=",
+                                            "version_value": "Any client or server using the C language library with a version number of 11.2.0 or earlier"
+                                        },
+                                        {
+                                            "version_affected": "=",
+                                            "version_value": "Any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier"
+                                        }
+                                    ]
+                                }
+                            },
+                            {
+                                "product_name": "Library: IEC 60870-6 (ICCP/Tase.2)",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "=",
+                                            "version_value": "Any client or server using a C++ language library with a version number of 4.4.3 or earlier"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "Triangle Microworks"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6 (ICCP/TASE.2) Library (Any client or server using a C++ language library with a version number of 4.4.3 or earlier) are vulnerable to access given to a small number of uninitialized pointers within their code. This could allow an attacker to target any client or server using the affected libraries to cause a denial-of-service condition."
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "impact": {
+        "cvss": {
+            "attackComplexity": "LOW",
+            "attackVector": "NETWORK",
+            "availabilityImpact": "HIGH",
+            "baseScore": 7.5,
+            "baseSeverity": "HIGH",
+            "confidentialityImpact": "NONE",
+            "integrityImpact": "NONE",
+            "privilegesRequired": "NONE",
+            "scope": "UNCHANGED",
+            "userInteraction": "NONE",
+            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+            "version": "3.1"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-824 Access of Uninitialized Pointer"
                     }
                 ]
             }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-01",
+                "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-01"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "UNKNOWN"
+    }
 }

2022/39xxx/CVE-2022-39261.json

@@ -114,6 +114,11 @@
                 "refsource": "FEDORA",
                 "name": "FEDORA-2022-9d8ee4a6de",
                 "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWRFPZSR74SYVJKBTKTMYUK36IJ3SQJP/"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20221011 [SECURITY] [DLA 3147-1] twig security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00016.html"
             }
         ]
     },

2022/3xxx/CVE-2022-3140.json

@@ -1,18 +1,82 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "security@documentfoundation.org",
         "ID": "CVE-2022-3140",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC",
-        "STATE": "RESERVED"
+        "TITLE": "Macro URL arbitrary script execution"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "LibreOffice",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<",
+                                            "version_name": "7.4",
+                                            "version_value": "7.4.1"
+                                        },
+                                        {
+                                            "version_affected": "<",
+                                            "version_name": "7.3",
+                                            "version_value": "7.3.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "The Document Foundation"
+                }
+            ]
+        }
+    },
+    "credit": [
+        {
+            "lang": "eng",
+            "value": "TheSecurityDev working with Trend Micro Zero Day Initiative"
+        }
+    ],
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6."
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-20 Improper Input Validation"
                     }
                 ]
             }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "MISC",
+                "url": "https://www.libreoffice.org/about-us/security/advisories/CVE-2022-3140",
+                "name": "https://www.libreoffice.org/about-us/security/advisories/CVE-2022-3140"
+            }
+        ]
+    },
+    "source": {
+        "discovery": "EXTERNAL"
+    }
 }

2022/3xxx/CVE-2022-3459.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-3459",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/41xxx/CVE-2022-41195.json

@@ -4,14 +4,71 @@
     "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2022-41195",
-        "ASSIGNER": "cve@mitre.org",
+        "ASSIGNER": "cna@sap.com",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "SAP SE",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "SAP 3D Visual Enterprise Viewer",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_name": "<",
+                                            "version_value": "9"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory."
+            }
+        ]
+    },
+    "impact": {
+        "cvss": {
+            "baseScore": "null",
+            "vectorString": "null",
+            "version": "3.0"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-119"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
+                "refsource": "MISC",
+                "name": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"
+            },
+            {
+                "url": "https://launchpad.support.sap.com/#/notes/3245928",
+                "refsource": "MISC",
+                "name": "https://launchpad.support.sap.com/#/notes/3245928"
             }
         ]
     }

2022/42xxx/CVE-2022-42868.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42868",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42869.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42869",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42870.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42870",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42871.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42871",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42872.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42872",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42873.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42873",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42874.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42874",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42875.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42875",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42876.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42876",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}

2022/42xxx/CVE-2022-42877.json

@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-42877",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}