diff --git a/2020/14xxx/CVE-2020-14144.json b/2020/14xxx/CVE-2020-14144.json index 45e745dadce..fbe3576a7dc 100644 --- a/2020/14xxx/CVE-2020-14144.json +++ b/2020/14xxx/CVE-2020-14144.json @@ -81,6 +81,11 @@ "refsource": "MISC", "name": "http://packetstormsecurity.com/files/162122/Gitea-Git-Hooks-Remote-Code-Execution.html", "url": "http://packetstormsecurity.com/files/162122/Gitea-Git-Hooks-Remote-Code-Execution.html" + }, + { + "refsource": "MISC", + "name": "https://github.com/PandatiX/CVE-2021-28378", + "url": "https://github.com/PandatiX/CVE-2021-28378" } ] } diff --git a/2020/20xxx/CVE-2020-20508.json b/2020/20xxx/CVE-2020-20508.json index 6f333063d15..3927af91a17 100644 --- a/2020/20xxx/CVE-2020-20508.json +++ b/2020/20xxx/CVE-2020-20508.json @@ -1,17 +1,61 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-20508", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-20508", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Shopkit v2.7 contains a reflective cross-site scripting (XSS) vulnerability in the /account/register component, which allows attackers to hijack user credentials via a crafted payload in the E-Mail text field." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/samnabi/shopkit/issues/223", + "refsource": "MISC", + "name": "https://github.com/samnabi/shopkit/issues/223" } ] } diff --git a/2020/20xxx/CVE-2020-20514.json b/2020/20xxx/CVE-2020-20514.json index 6051fbdb541..67cab24f49b 100644 --- a/2020/20xxx/CVE-2020-20514.json +++ b/2020/20xxx/CVE-2020-20514.json @@ -1,17 +1,61 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { - "ID": "CVE-2020-20514", "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "ID": "CVE-2020-20514", + "STATE": "PUBLIC" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A Cross-Site Request Forgery (CSRF) in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/magicblack/maccms10/issues/76", + "refsource": "MISC", + "name": "https://github.com/magicblack/maccms10/issues/76" } ] } diff --git a/2020/25xxx/CVE-2020-25658.json b/2020/25xxx/CVE-2020-25658.json index b3f96770c87..cc4b3ebc8dd 100644 --- a/2020/25xxx/CVE-2020-25658.json +++ b/2020/25xxx/CVE-2020-25658.json @@ -53,6 +53,11 @@ "url": "https://github.com/sybrenstuvel/python-rsa/issues/165", "refsource": "MISC", "name": "https://github.com/sybrenstuvel/python-rsa/issues/165" + }, + { + "refsource": "FEDORA", + "name": "FEDORA-2021-783a157adc", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA/" } ] }, diff --git a/2021/28xxx/CVE-2021-28378.json b/2021/28xxx/CVE-2021-28378.json index c5c41d55d57..05b00277504 100644 --- a/2021/28xxx/CVE-2021-28378.json +++ b/2021/28xxx/CVE-2021-28378.json @@ -61,6 +61,11 @@ "url": "https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/", "refsource": "MISC", "name": "https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/" + }, + { + "refsource": "MISC", + "name": "https://github.com/PandatiX/CVE-2021-28378", + "url": "https://github.com/PandatiX/CVE-2021-28378" } ] }, diff --git a/2021/39xxx/CVE-2021-39272.json b/2021/39xxx/CVE-2021-39272.json index 7f9a14be949..77250b64ead 100644 --- a/2021/39xxx/CVE-2021-39272.json +++ b/2021/39xxx/CVE-2021-39272.json @@ -66,6 +66,11 @@ "refsource": "MISC", "name": "http://www.openwall.com/lists/oss-security/2021/08/27/3", "url": "http://www.openwall.com/lists/oss-security/2021/08/27/3" + }, + { + "refsource": "FEDORA", + "name": "FEDORA-2021-ddefbdbb46", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3XJ6XLEJCEZCAM5LGGD6XBCC522QLG4/" } ] } diff --git a/2021/41xxx/CVE-2021-41610.json b/2021/41xxx/CVE-2021-41610.json new file mode 100644 index 00000000000..a687004f995 --- /dev/null +++ b/2021/41xxx/CVE-2021-41610.json @@ -0,0 +1,18 @@ +{ + "data_type": "CVE", + "data_format": "MITRE", + "data_version": "4.0", + "CVE_data_meta": { + "ID": "CVE-2021-41610", + "ASSIGNER": "cve@mitre.org", + "STATE": "RESERVED" + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +} \ No newline at end of file