admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-30 18:04:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Synchronized data.

Browse Source
This commit is contained in:
CVE Team 2018-04-26 15:05:08 -04:00
parent a2c91dae53
commit 8cd654cef8
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
4 changed files with 165 additions and 76 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

94
2016/9xxx/CVE-2016-9602.json
View File

@ -1,4 +1,43 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "lpardo@redhat.com",
"ID" : "CVE-2016-9602",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Qemu",
"version" : {
"version_data" : [
{
"version_value" : "qemu 2.9"
}
]
}
}
]
},
"vendor_name" : ""
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
}
]
},
"impact" : {
"cvss" : [
[
@ -15,39 +54,6 @@
]
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
}
]
},
"data_type": "CVE",
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"version": {
"version_data": [
{
"version_value": "qemu 2.9"
}
]
},
"product_name": "Qemu"
}
]
},
"vendor_name": ""
}
]
}
},
"data_format": "MITRE",
"problemtype" : {
"problemtype_data" : [
{
@ -60,16 +66,28 @@
}
]
},
"data_version": "4.0",
"references" : {
"reference_data" : [
{
"name" : "[oss-security] 20170117 CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem",
"refsource" : "MLIST",
"url" : "http://www.openwall.com/lists/oss-security/2017/01/17/12"
},
{
"name" : "[qemu-devel] 20170130 [PATCH RFC 00/36] 9pfs: local: fix vulnerability to symlink attacks",
"refsource" : "MLIST",
"url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html"
},
{
"name" : "[qemu-devel] 20170220 [PATCH 00/29] 9pfs: local: fix vulnerability to symlink attacks",
"refsource" : "MLIST",
"url" : "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html"
},
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602",
"refsource" : "CONFIRM",
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602"
}
]
},
"CVE_data_meta": {
"ID": "CVE-2016-9602",
"ASSIGNER": "lpardo@redhat.com"
}
}

8
2017/14xxx/CVE-2017-14010.json
View File

@ -54,10 +54,14 @@
"references" : {
"reference_data" : [
{
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01"
"name" : "http://spidercontrol.net/download/downloadarea/?lang=en",
"refsource" : "MISC",
"url" : "http://spidercontrol.net/download/downloadarea/?lang=en"
},
{
"url" : "http://spidercontrol.net/download/downloadarea/?lang=en"
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01",
"refsource" : "MISC",
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01"
}
]
}

18
2018/10xxx/CVE-2018-10432.json Normal file
View File

@ -0,0 +1,18 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-10432",
"STATE" : "RESERVED"
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}

53
2018/7xxx/CVE-2018-7465.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-7465",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +34,33 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by simply adding </textarea> to the value and saving the product/config. By editing back the product/config, the editor's browser will execute everything after the </textarea>, leading to a possible XSS."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "http://virtuemart.net/news/489-virtuemart-3-2-14-security-release-and-enhanced-invoice-handling",
"refsource" : "MISC",
"url" : "http://virtuemart.net/news/489-virtuemart-3-2-14-security-release-and-enhanced-invoice-handling"
},
{
"name" : "https://imgur.com/a/Hf6JD",
"refsource" : "MISC",
"url" : "https://imgur.com/a/Hf6JD"
}
]
}