diff --git a/2018/4xxx/CVE-2018-4842.json b/2018/4xxx/CVE-2018-4842.json
index 30d2bbad2fa..84dfe4fea45 100644
--- a/2018/4xxx/CVE-2018-4842.json
+++ b/2018/4xxx/CVE-2018-4842.json
@@ -66,21 +66,21 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). A remote, authenticated attacker with access to the configuration web\nserver could be able to store script code on the web site, if the HRP redundancy \noption is set. This code could be executed in the web browser of victims visiting \nthis web site (XSS), affecting its confidentiality, integrity and availability. \n\nUser interaction is required for successful exploitation, as the user needs\nto visit the manipulated web site. At the stage of publishing this security\nadvisory no public exploitation is known. The vendor has confirmed the\nvulnerability and provides mitigations to resolve it."
+                "value": "A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). A remote, authenticated attacker with access to the configuration web server could be able to store script code on the web site, if the HRP redundancy option is set. This code could be executed in the web browser of victims visiting this web site (XSS), affecting its confidentiality, integrity and availability. User interaction is required for successful exploitation, as the user needs to visit the manipulated web site. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it."
             }
         ]
     },
     "references": {
         "reference_data": [
-            {
-                "refsource": "MISC",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf",
-                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf"
-            },
             {
                 "refsource": "BID",
                 "name": "104494",
                 "url": "https://www.securityfocus.com/bid/104494"
+            },
+            {
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-480829.pdf"
             }
         ]
     }
diff --git a/2018/4xxx/CVE-2018-4848.json b/2018/4xxx/CVE-2018-4848.json
index 2524bbc951d..ef99baf3467 100644
--- a/2018/4xxx/CVE-2018-4848.json
+++ b/2018/4xxx/CVE-2018-4848.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow\nCross-Site Scripting (XSS) attacks if unsuspecting users are tricked into\naccessing a malicious link.\n\nUser interaction is required for a successful  exploitation. The user must \nbe logged into the web interface in order for the exploitation to succeed.\nAt the stage of publishing this security advisory no public exploitation is known.\nThe vendor has confirmed the vulnerability and provides mitigations to resolve it."
+                "value": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it."
             }
         ]
     },
diff --git a/2019/10xxx/CVE-2019-10936.json b/2019/10xxx/CVE-2019-10936.json
index 61d23613417..c33c963b89c 100644
--- a/2019/10xxx/CVE-2019-10936.json
+++ b/2019/10xxx/CVE-2019-10936.json
@@ -906,7 +906,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET200AL, SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants), SIMATIC ET200S (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN BA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200pro, SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels, SIMATIC PN/PN Coupler, SIMATIC PROFINET Driver, SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 PN Control Unit, SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS NET PN/PN Coupler, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP. Affected devices improperly handle large amounts of specially crafted UDP packets.\n\nThis could allow an unauthenticated remote attacker to trigger a denial-of-service condition."
+                "value": "A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET200AL, SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants), SIMATIC ET200S (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN BA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 4AO U/I 4xM12, SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12, SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12, SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12, SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12, SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12, SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12, SIMATIC ET200ecoPN: IO-Link Master, SIMATIC ET200pro, SIMATIC HMI Comfort Outdoor Panels 7\" & 15\" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4\" - 22\" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels, SIMATIC PN/PN Coupler, SIMATIC PROFINET Driver, SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU 314C-2 PN/DP, SIMATIC S7-300 CPU 315-2 PN/DP, SIMATIC S7-300 CPU 315F-2 PN/DP, SIMATIC S7-300 CPU 315T-3 PN/DP, SIMATIC S7-300 CPU 317-2 PN/DP, SIMATIC S7-300 CPU 317F-2 PN/DP, SIMATIC S7-300 CPU 317T-3 PN/DP, SIMATIC S7-300 CPU 317TF-3 PN/DP, SIMATIC S7-300 CPU 319-3 PN/DP, SIMATIC S7-300 CPU 319F-3 PN/DP, SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC TDC CP51M1, SIMATIC TDC CPU555, SIMATIC WinAC RTX 2010, SIMATIC WinAC RTX F 2010, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 PN Control Unit, SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl, SIPLUS ET 200S IM151-8 PN/DP CPU, SIPLUS ET 200S IM151-8F PN/DP CPU, SIPLUS NET PN/PN Coupler, SIPLUS S7-300 CPU 314C-2 PN/DP, SIPLUS S7-300 CPU 315-2 PN/DP, SIPLUS S7-300 CPU 315F-2 PN/DP, SIPLUS S7-300 CPU 317-2 PN/DP, SIPLUS S7-300 CPU 317F-2 PN/DP. Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial-of-service condition."
             }
         ]
     },
diff --git a/2019/13xxx/CVE-2019-13924.json b/2019/13xxx/CVE-2019-13924.json
index 8b97738ffbd..8e5834530c2 100644
--- a/2019/13xxx/CVE-2019-13924.json
+++ b/2019/13xxx/CVE-2019-13924.json
@@ -116,7 +116,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web\ninterface, which makes it vulnerable to Clickjacking attacks. \n\nThe security vulnerability could be exploited by an attacker that is able\nto trick an administrative user with a valid session on the target device into\nclicking on a website controlled by the attacker. The vulnerability could\nallow an attacker to perform administrative actions via the web interface."
+                "value": "A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface."
             }
         ]
     },
diff --git a/2019/13xxx/CVE-2019-13933.json b/2019/13xxx/CVE-2019-13933.json
index 1d6cf609399..895f8d7f416 100644
--- a/2019/13xxx/CVE-2019-13933.json
+++ b/2019/13xxx/CVE-2019-13933.json
@@ -836,7 +836,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices contain a vulnerability that allows an unauthenticated attacker\nto violate access-control rules. The vulnerability can be triggered\nby sending GET request to specific uniform resource locator on the\nweb configuration interface of the device.\n\nThe security vulnerability could be exploited by an attacker with network\naccess to the affected systems. An attacker could use the vulnerability\nto obtain sensitive information or change the device configuration.\n\nAt the time of advisory publication no public exploitation of this security\nvulnerability was known."
+                "value": "A vulnerability has been identified in SCALANCE X204RNA (HSR), SCALANCE X204RNA (PRP), SCALANCE X204RNA EEC (HSR), SCALANCE X204RNA EEC (PRP), SCALANCE X204RNA EEC (PRP/HSR), SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCALANCE X302-7 EEC (2x 24V), SCALANCE X302-7 EEC (2x 24V, coated), SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2 EEC (230V), SCALANCE X307-2 EEC (230V, coated), SCALANCE X307-2 EEC (24V), SCALANCE X307-2 EEC (24V, coated), SCALANCE X307-2 EEC (2x 230V), SCALANCE X307-2 EEC (2x 230V, coated), SCALANCE X307-2 EEC (2x 24V), SCALANCE X307-2 EEC (2x 24V, coated), SCALANCE X307-3, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X308-2, SCALANCE X308-2LD, SCALANCE X308-2LD, SCALANCE X308-2LH, SCALANCE X308-2LH, SCALANCE X308-2LH+, SCALANCE X308-2LH+, SCALANCE X308-2M, SCALANCE X308-2M, SCALANCE X308-2M PoE, SCALANCE X308-2M PoE, SCALANCE X308-2M TS, SCALANCE X308-2M TS, SCALANCE X310, SCALANCE X310, SCALANCE X310FE, SCALANCE X310FE, SCALANCE X320-1 FE, SCALANCE X320-1-2LD FE, SCALANCE X408-2, SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on front), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (230V, ports on rear), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on front), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M (24V, ports on rear), SCALANCE XR324-12M TS (24V), SCALANCE XR324-12M TS (24V), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on front), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (24V, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on front), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M EEC (2x 24V, ports on rear), SCALANCE XR324-4M PoE (230V, ports on front), SCALANCE XR324-4M PoE (230V, ports on rear), SCALANCE XR324-4M PoE (24V, ports on front), SCALANCE XR324-4M PoE (24V, ports on rear), SCALANCE XR324-4M PoE TS (24V, ports on front), SIPLUS NET SCALANCE X308-2. Affected devices contain a vulnerability that allows an unauthenticated attacker to violate access-control rules. The vulnerability can be triggered by sending GET request to specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration. At the time of advisory publication no public exploitation of this security vulnerability was known."
             }
         ]
     },
diff --git a/2019/19xxx/CVE-2019-19300.json b/2019/19xxx/CVE-2019-19300.json
index 1aaa0a7b085..d34c2d08455 100644
--- a/2019/19xxx/CVE-2019-19300.json
+++ b/2019/19xxx/CVE-2019-19300.json
@@ -396,7 +396,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions), KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions  >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC MICRO-DRIVE PDC (All versions), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) (All versions >= V4.2), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0), SIMATIC S7-1500 Software Controller (All versions < V2.0), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V10.1.1), SIMATIC TDC CP51M1 (All versions), SIMATIC TDC CPU555 (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS S/G Control Unit w. PROFINET (All versions). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service."
+                "value": "A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions), KTK ATE530S (All versions), SIDOOR ATD430W (All versions), SIDOOR ATE530S COATED (All versions), SIDOOR ATE531S (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.0), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC MICRO-DRIVE PDC (All versions), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (incl. SIPLUS NET variants) (All versions >= V4.2), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0), SIMATIC S7-1500 Software Controller (All versions < V2.0), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 H V6 CPU family and below (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 CPU family (incl. SIPLUS variants) (All versions < V10.1.1), SIMATIC TDC CP51M1 (All versions), SIMATIC TDC CPU555 (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS S/G Control Unit w. PROFINET (All versions). The Interniche-based TCP Stack can be forced to make very expensive calls for every incoming packet which can lead to a denial of service."
             }
         ]
     },
diff --git a/2019/25xxx/CVE-2019-25078.json b/2019/25xxx/CVE-2019-25078.json
new file mode 100644
index 00000000000..f0c83865ed7
--- /dev/null
+++ b/2019/25xxx/CVE-2019-25078.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2019-25078",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2020/28xxx/CVE-2020-28391.json b/2020/28xxx/CVE-2020-28391.json
index 7811e162e63..d0e48b72d86 100644
--- a/2020/28xxx/CVE-2020-28391.json
+++ b/2020/28xxx/CVE-2020-28391.json
@@ -66,7 +66,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used\nwith C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key\nshipped with the firmware-image. An attacker could leverage this situation to a\nman-in-the-middle situation and decrypt previously captured traffic."
+                "value": "A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic."
             }
         ]
     },
diff --git a/2020/28xxx/CVE-2020-28395.json b/2020/28xxx/CVE-2020-28395.json
index 6f92bce298d..43be68438ef 100644
--- a/2020/28xxx/CVE-2020-28395.json
+++ b/2020/28xxx/CVE-2020-28395.json
@@ -56,7 +56,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset.  An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic."
+                "value": "A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic."
             }
         ]
     },
diff --git a/2020/35xxx/CVE-2020-35511.json b/2020/35xxx/CVE-2020-35511.json
index 5f6850d885c..877ec96d045 100644
--- a/2020/35xxx/CVE-2020-35511.json
+++ b/2020/35xxx/CVE-2020-35511.json
@@ -53,6 +53,11 @@
                 "refsource": "DEBIAN",
                 "name": "DSA-5300",
                 "url": "https://www.debian.org/security/2022/dsa-5300"
+            },
+            {
+                "refsource": "MLIST",
+                "name": "[debian-lts-announce] 20221213 [SECURITY] [DLA 3238-1] pngcheck security update",
+                "url": "https://lists.debian.org/debian-lts-announce/2022/12/msg00024.html"
             }
         ]
     },
diff --git a/2020/7xxx/CVE-2020-7580.json b/2020/7xxx/CVE-2020-7580.json
index efaed3a5040..6fb9a86641f 100644
--- a/2020/7xxx/CVE-2020-7580.json
+++ b/2020/7xxx/CVE-2020-7580.json
@@ -306,7 +306,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted.\n\nThis could allow a local attacker to execute arbitrary code with SYTEM privileges."
+                "value": "A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges."
             }
         ]
     },
diff --git a/2021/37xxx/CVE-2021-37209.json b/2021/37xxx/CVE-2021-37209.json
index d20baad8659..da1f2c1661b 100644
--- a/2021/37xxx/CVE-2021-37209.json
+++ b/2021/37xxx/CVE-2021-37209.json
@@ -666,7 +666,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in RUGGEDCOM ROS RMC30 V4.X (All versions), RUGGEDCOM ROS RMC8388 V4.X (All versions), RUGGEDCOM ROS RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RP110 V4.X (All versions), RUGGEDCOM ROS RS1600 V4.X (All versions), RUGGEDCOM ROS RS1600F V4.X (All versions), RUGGEDCOM ROS RS1600T V4.X (All versions), RUGGEDCOM ROS RS400 V4.X (All versions), RUGGEDCOM ROS RS401 V4.X (All versions), RUGGEDCOM ROS RS416Pv2 V4.X (All versions), RUGGEDCOM ROS RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS416v2 V4.X (All versions), RUGGEDCOM ROS RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS8000 V4.X (All versions), RUGGEDCOM ROS RS8000A V4.X (All versions), RUGGEDCOM ROS RS8000H V4.X (All versions), RUGGEDCOM ROS RS8000T V4.X (All versions), RUGGEDCOM ROS RS900 (32M) V4.X (All versions), RUGGEDCOM ROS RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS900 V4.X (All versions), RUGGEDCOM ROS RS900G (32M) V4.X (All versions), RUGGEDCOM ROS RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS900G V4.X (All versions), RUGGEDCOM ROS RS900GP V4.X (All versions), RUGGEDCOM ROS RS900L V4.X (All versions), RUGGEDCOM ROS RS900M V4.X (All versions), RUGGEDCOM ROS RS900W V4.X (All versions), RUGGEDCOM ROS RS910 V4.X (All versions), RUGGEDCOM ROS RS910L V4.X (All versions), RUGGEDCOM ROS RS910W V4.X (All versions), RUGGEDCOM ROS RS920L V4.X (All versions), RUGGEDCOM ROS RS920W V4.X (All versions), RUGGEDCOM ROS RS930L V4.X (All versions), RUGGEDCOM ROS RS930W V4.X (All versions), RUGGEDCOM ROS RS940G V4.X (All versions), RUGGEDCOM ROS RSG2100 (32M) V4.X (All versions), RUGGEDCOM ROS RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2100 V4.X (All versions), RUGGEDCOM ROS RSG2100P V4.X (All versions), RUGGEDCOM ROS RSG2200 V4.X (All versions), RUGGEDCOM ROS RSG2288 V4.X (All versions), RUGGEDCOM ROS RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2300 V4.X (All versions), RUGGEDCOM ROS RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2300P V4.X (All versions), RUGGEDCOM ROS RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2488 V4.X (All versions), RUGGEDCOM ROS RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG907R V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG908C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG909R V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG910C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG920P V4.X (All versions), RUGGEDCOM ROS RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSL910 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST2228 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST2228P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST916C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST916P V5.X (All versions < V5.7.0), RUGGEDCOM ROS i800 V4.X (All versions), RUGGEDCOM ROS i801 V4.X (All versions), RUGGEDCOM ROS i802 V4.X (All versions), RUGGEDCOM ROS i803 V4.X (All versions). The SSH server on affected devices is configured to offer weak ciphers by default.\n\nThis could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device."
+                "value": "A vulnerability has been identified in RUGGEDCOM ROS RMC30 V4.X (All versions), RUGGEDCOM ROS RMC8388 V4.X (All versions), RUGGEDCOM ROS RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RP110 V4.X (All versions), RUGGEDCOM ROS RS1600 V4.X (All versions), RUGGEDCOM ROS RS1600F V4.X (All versions), RUGGEDCOM ROS RS1600T V4.X (All versions), RUGGEDCOM ROS RS400 V4.X (All versions), RUGGEDCOM ROS RS401 V4.X (All versions), RUGGEDCOM ROS RS416Pv2 V4.X (All versions), RUGGEDCOM ROS RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS416v2 V4.X (All versions), RUGGEDCOM ROS RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS8000 V4.X (All versions), RUGGEDCOM ROS RS8000A V4.X (All versions), RUGGEDCOM ROS RS8000H V4.X (All versions), RUGGEDCOM ROS RS8000T V4.X (All versions), RUGGEDCOM ROS RS900 (32M) V4.X (All versions), RUGGEDCOM ROS RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS900 V4.X (All versions), RUGGEDCOM ROS RS900G (32M) V4.X (All versions), RUGGEDCOM ROS RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RS900G V4.X (All versions), RUGGEDCOM ROS RS900GP V4.X (All versions), RUGGEDCOM ROS RS900L V4.X (All versions), RUGGEDCOM ROS RS900M V4.X (All versions), RUGGEDCOM ROS RS900W V4.X (All versions), RUGGEDCOM ROS RS910 V4.X (All versions), RUGGEDCOM ROS RS910L V4.X (All versions), RUGGEDCOM ROS RS910W V4.X (All versions), RUGGEDCOM ROS RS920L V4.X (All versions), RUGGEDCOM ROS RS920W V4.X (All versions), RUGGEDCOM ROS RS930L V4.X (All versions), RUGGEDCOM ROS RS930W V4.X (All versions), RUGGEDCOM ROS RS940G V4.X (All versions), RUGGEDCOM ROS RSG2100 (32M) V4.X (All versions), RUGGEDCOM ROS RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2100 V4.X (All versions), RUGGEDCOM ROS RSG2100P V4.X (All versions), RUGGEDCOM ROS RSG2200 V4.X (All versions), RUGGEDCOM ROS RSG2288 V4.X (All versions), RUGGEDCOM ROS RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2300 V4.X (All versions), RUGGEDCOM ROS RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2300P V4.X (All versions), RUGGEDCOM ROS RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG2488 V4.X (All versions), RUGGEDCOM ROS RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG907R V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG908C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG909R V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG910C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSG920P V4.X (All versions), RUGGEDCOM ROS RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RSL910 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST2228 V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST2228P V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST916C V5.X (All versions < V5.7.0), RUGGEDCOM ROS RST916P V5.X (All versions < V5.7.0), RUGGEDCOM ROS i800 V4.X (All versions), RUGGEDCOM ROS i801 V4.X (All versions), RUGGEDCOM ROS i802 V4.X (All versions), RUGGEDCOM ROS i803 V4.X (All versions). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device."
             }
         ]
     },
diff --git a/2021/40xxx/CVE-2021-40365.json b/2021/40xxx/CVE-2021-40365.json
index 674ecb2c8ac..64ddb91408a 100644
--- a/2021/40xxx/CVE-2021-40365.json
+++ b/2021/40xxx/CVE-2021-40365.json
@@ -123,8 +123,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
             }
         ]
     }
diff --git a/2021/44xxx/CVE-2021-44693.json b/2021/44xxx/CVE-2021-44693.json
index 48c08f6e856..7ebc4eb7442 100644
--- a/2021/44xxx/CVE-2021-44693.json
+++ b/2021/44xxx/CVE-2021-44693.json
@@ -123,8 +123,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
             }
         ]
     }
diff --git a/2021/44xxx/CVE-2021-44694.json b/2021/44xxx/CVE-2021-44694.json
index 6c43eb987c7..fbaff3d8723 100644
--- a/2021/44xxx/CVE-2021-44694.json
+++ b/2021/44xxx/CVE-2021-44694.json
@@ -123,8 +123,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
             }
         ]
     }
diff --git a/2021/44xxx/CVE-2021-44695.json b/2021/44xxx/CVE-2021-44695.json
index 9b8c9675830..8240d79ddb4 100644
--- a/2021/44xxx/CVE-2021-44695.json
+++ b/2021/44xxx/CVE-2021-44695.json
@@ -123,8 +123,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf"
             }
         ]
     }
diff --git a/2022/20xxx/CVE-2022-20144.json b/2022/20xxx/CVE-2022-20144.json
index fcd09ca1b51..884b0c4f392 100644
--- a/2022/20xxx/CVE-2022-20144.json
+++ b/2022/20xxx/CVE-2022-20144.json
@@ -19,7 +19,7 @@
                                 "version": {
                                     "version_data": [
                                         {
-                                            "version_value": "Android-10 Android-11 Android-12 Android-12L Android-13"
+                                            "version_value": "Android-10 Android-11"
                                         }
                                     ]
                                 }
@@ -46,8 +46,8 @@
         "reference_data": [
             {
                 "refsource": "MISC",
-                "name": "https://source.android.com/security/bulletin/2022-12-01",
-                "url": "https://source.android.com/security/bulletin/2022-12-01"
+                "name": "https://source.android.com/security/bulletin/aaos/2022-12-01",
+                "url": "https://source.android.com/security/bulletin/aaos/2022-12-01"
             }
         ]
     },
@@ -55,7 +55,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "In cropPhoto of EditUserPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-187702830"
+                "value": "In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-250637906"
             }
         ]
     }
diff --git a/2022/25xxx/CVE-2022-25622.json b/2022/25xxx/CVE-2022-25622.json
index bf504ed8de3..c927a457693 100644
--- a/2022/25xxx/CVE-2022-25622.json
+++ b/2022/25xxx/CVE-2022-25622.json
@@ -666,7 +666,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All versions), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.19), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (All versions >= 4.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.19), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions < V10.1.1), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions < V8.2.3), SIMATIC TDC CP51M1 (All versions < V1.1.10), SIMATIC TDC CPU555 (All versions < V1.2.1), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS DCM (All versions with Ethernet interface), SINAMICS G110M (All versions with Ethernet interface), SINAMICS G115D (All versions with Ethernet interface), SINAMICS G120 (incl. SIPLUS variants) (All versions with Ethernet interface), SINAMICS G130 (All versions), SINAMICS G150 (All versions), SINAMICS S110 (All versions with Ethernet interface), SINAMICS S120 (incl. SIPLUS variants) (All versions), SINAMICS S150 (All versions), SINAMICS S210 (All versions), SINAMICS V90 (All versions with Ethernet interface), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIPLUS HCS4200 CIM4210 (All versions), SIPLUS HCS4200 CIM4210C (All versions), SIPLUS HCS4300 CIM4310 (All versions), SIPLUS NET PN/PN Coupler (All versions >= 4.2), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19). The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.\n\nThis could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments."
+                "value": "A vulnerability has been identified in SIMATIC CFU DIQ (All versions), SIMATIC CFU PA (All versions), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.19), SIMATIC ET200AL IM157-1 PN (All versions), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 MF HF (All versions), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants) (All versions >= V4.2), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 16x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DI 8x24VDC, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DIQ 16x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/0,5A, M12-L (All versions >= V5.1.1), SIMATIC ET200ecoPN, DQ 8x24VDC/2A, M12-L (All versions >= V5.1.1), SIMATIC PN/MF Coupler (All versions), SIMATIC PN/PN Coupler (All versions >= 4.2), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.0.0), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.19), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants) (All versions < V6.0.10), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants) (All versions < V10.1.1), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants) (All versions < V8.2.3), SIMATIC TDC CP51M1 (All versions < V1.1.10), SIMATIC TDC CPU555 (All versions < V1.2.1), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SINAMICS DCM (All versions with Ethernet interface), SINAMICS G110M (All versions with Ethernet interface), SINAMICS G115D (All versions with Ethernet interface), SINAMICS G120 (incl. SIPLUS variants) (All versions with Ethernet interface), SINAMICS G130 (All versions), SINAMICS G150 (All versions), SINAMICS S110 (All versions with Ethernet interface), SINAMICS S120 (incl. SIPLUS variants) (All versions), SINAMICS S150 (All versions), SINAMICS S210 (All versions), SINAMICS V90 (All versions with Ethernet interface), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIPLUS HCS4200 CIM4210 (All versions), SIPLUS HCS4200 CIM4210C (All versions), SIPLUS HCS4300 CIM4310 (All versions), SIPLUS NET PN/PN Coupler (All versions >= 4.2), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19). The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments."
             }
         ]
     },
diff --git a/2022/25xxx/CVE-2022-25697.json b/2022/25xxx/CVE-2022-25697.json
index 743ba5ee10b..645a66b9976 100644
--- a/2022/25xxx/CVE-2022-25697.json
+++ b/2022/25xxx/CVE-2022-25697.json
@@ -79,7 +79,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "Memory corruption in i2c buses  due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables"
+                "value": "Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables"
             }
         ]
     },
diff --git a/2022/27xxx/CVE-2022-27518.json b/2022/27xxx/CVE-2022-27518.json
index 57f99f4df11..fcaa7e88256 100644
--- a/2022/27xxx/CVE-2022-27518.json
+++ b/2022/27xxx/CVE-2022-27518.json
@@ -1,17 +1,95 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2022-27518",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "secure@citrix.com",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Unauthenticated remote arbitrary code execution"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-664: Improper Control of a Resource Through its Lifetime ",
+                        "cweId": "CWE-664"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Citrix",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Citrix Gateway, Citrix ADC ",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "12.1",
+                                            "version_affected": "="
+                                        },
+                                        {
+                                            "version_value": "13.0",
+                                            "version_affected": "="
+                                        },
+                                        {
+                                            "version_value": "12.1 FIPs, NDcPP",
+                                            "version_affected": "="
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://support.citrix.com/article/CTX474995",
+                "refsource": "MISC",
+                "name": "https://support.citrix.com/article/CTX474995"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "discovery": "UNKNOWN"
+    },
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "NETWORK",
+                "availabilityImpact": "HIGH",
+                "baseScore": 9.8,
+                "baseSeverity": "CRITICAL",
+                "confidentialityImpact": "HIGH",
+                "integrityImpact": "HIGH",
+                "privilegesRequired": "NONE",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2022/30xxx/CVE-2022-30694.json b/2022/30xxx/CVE-2022-30694.json
index 3b13759a726..3fb85c404a3 100644
--- a/2022/30xxx/CVE-2022-30694.json
+++ b/2022/30xxx/CVE-2022-30694.json
@@ -356,7 +356,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.19), SIMATIC PC Station (All versions >= V2.1), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.6.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.0.1), SIMATIC S7-1500 Software Controller (All versions), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.19), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-PLCSIM Advanced (All versions < V5.0), SIMATIC WinCC Runtime Advanced (All versions), SINUMERIK ONE (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19). The login endpoint /FormLogin in affected web services does not apply proper origin checking.\n\nThis could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack."
+                "value": "A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.2.19), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.2.19), SIMATIC PC Station (All versions >= V2.1), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.6.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.0.1), SIMATIC S7-1500 Software Controller (All versions), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.2.19), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.2.19), SIMATIC S7-400 PN/DP V6 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-PLCSIM Advanced (All versions < V5.0), SIMATIC WinCC Runtime Advanced (All versions), SINUMERIK ONE (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.2.19), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.2.19), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.3.19), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.2.19), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.2.19). The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack."
             }
         ]
     },
diff --git a/2022/31xxx/CVE-2022-31765.json b/2022/31xxx/CVE-2022-31765.json
index bb1f3551a84..fefdfbdd526 100644
--- a/2022/31xxx/CVE-2022-31765.json
+++ b/2022/31xxx/CVE-2022-31765.json
@@ -1906,7 +1906,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "Affected devices do not properly authorize the change password function of the web interface.\nThis could allow low privileged users to escalate their privileges."
+                "value": "Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges."
             }
         ]
     },
diff --git a/2022/37xxx/CVE-2022-37011.json b/2022/37xxx/CVE-2022-37011.json
index 7b0efad21a5..61d56c98879 100644
--- a/2022/37xxx/CVE-2022-37011.json
+++ b/2022/37xxx/CVE-2022-37011.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0). Affected versions of the module insufficiently protect from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application.\n\nFor compatibility reasons, fix versions still contain this issue, but only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled."
+                "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0). Affected versions of the module insufficiently protect from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. For compatibility reasons, fix versions still contain this issue, but only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled."
             }
         ]
     },
diff --git a/2022/39xxx/CVE-2022-39136.json b/2022/39xxx/CVE-2022-39136.json
index 6473cf3b2cf..e8dc8886887 100644
--- a/2022/39xxx/CVE-2022-39136.json
+++ b/2022/39xxx/CVE-2022-39136.json
@@ -86,7 +86,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >= V13.3.0.7 < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application is vulnerable to fixed-length heap-based buffer while parsing specially crafted TIF files. An attacker could leverage this vulnerability to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >= V13.3.0.7 < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application is vulnerable to fixed-length heap-based buffer while parsing specially crafted TIF files. An attacker could leverage this vulnerability to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41278.json b/2022/41xxx/CVE-2022-41278.json
index 50d71ee5ee2..39d007aef00 100644
--- a/2022/41xxx/CVE-2022-41278.json
+++ b/2022/41xxx/CVE-2022-41278.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41279.json b/2022/41xxx/CVE-2022-41279.json
index 022ee53061f..eba55a3133f 100644
--- a/2022/41xxx/CVE-2022-41279.json
+++ b/2022/41xxx/CVE-2022-41279.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41280.json b/2022/41xxx/CVE-2022-41280.json
index 8d09e8e05e1..5b2a20b4a51 100644
--- a/2022/41xxx/CVE-2022-41280.json
+++ b/2022/41xxx/CVE-2022-41280.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41281.json b/2022/41xxx/CVE-2022-41281.json
index 706a5cf3ba5..30b29120140 100644
--- a/2022/41xxx/CVE-2022-41281.json
+++ b/2022/41xxx/CVE-2022-41281.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41282.json b/2022/41xxx/CVE-2022-41282.json
index e048e0c24ac..cd9dff0ff28 100644
--- a/2022/41xxx/CVE-2022-41282.json
+++ b/2022/41xxx/CVE-2022-41282.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41283.json b/2022/41xxx/CVE-2022-41283.json
index cda5b7d9c11..4ae72fb4a8b 100644
--- a/2022/41xxx/CVE-2022-41283.json
+++ b/2022/41xxx/CVE-2022-41283.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41284.json b/2022/41xxx/CVE-2022-41284.json
index acddcc78b26..6f24d5defdf 100644
--- a/2022/41xxx/CVE-2022-41284.json
+++ b/2022/41xxx/CVE-2022-41284.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41285.json b/2022/41xxx/CVE-2022-41285.json
index 4c760699f24..c531229cdd9 100644
--- a/2022/41xxx/CVE-2022-41285.json
+++ b/2022/41xxx/CVE-2022-41285.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41286.json b/2022/41xxx/CVE-2022-41286.json
index 6acfef330f3..3fb44c74df2 100644
--- a/2022/41xxx/CVE-2022-41286.json
+++ b/2022/41xxx/CVE-2022-41286.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41287.json b/2022/41xxx/CVE-2022-41287.json
index cbfedbc635f..ec7bee5f459 100644
--- a/2022/41xxx/CVE-2022-41287.json
+++ b/2022/41xxx/CVE-2022-41287.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41288.json b/2022/41xxx/CVE-2022-41288.json
index 4d037e0052d..6d0c0cb8b86 100644
--- a/2022/41xxx/CVE-2022-41288.json
+++ b/2022/41xxx/CVE-2022-41288.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/41xxx/CVE-2022-41660.json b/2022/41xxx/CVE-2022-41660.json
index 346dab0dcc2..f511fd357dc 100644
--- a/2022/41xxx/CVE-2022-41660.json
+++ b/2022/41xxx/CVE-2022-41660.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds write vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds write vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41661.json b/2022/41xxx/CVE-2022-41661.json
index 93826dc8071..41b0ac7c010 100644
--- a/2022/41xxx/CVE-2022-41661.json
+++ b/2022/41xxx/CVE-2022-41661.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41662.json b/2022/41xxx/CVE-2022-41662.json
index 09f3b6ea87c..a00438a2056 100644
--- a/2022/41xxx/CVE-2022-41662.json
+++ b/2022/41xxx/CVE-2022-41662.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected products contain an out of bounds read vulnerability when parsing a CGM file. An attacker can leverage this vulnerability to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41663.json b/2022/41xxx/CVE-2022-41663.json
index 01d46b1b7eb..3d3c9832bb9 100644
--- a/2022/41xxx/CVE-2022-41663.json
+++ b/2022/41xxx/CVE-2022-41663.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/41xxx/CVE-2022-41664.json b/2022/41xxx/CVE-2022-41664.json
index 32364fa376a..a09a4c3ac90 100644
--- a/2022/41xxx/CVE-2022-41664.json
+++ b/2022/41xxx/CVE-2022-41664.json
@@ -76,7 +76,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in JT2Go (All versions <  V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process."
+                "value": "A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process."
             }
         ]
     },
diff --git a/2022/43xxx/CVE-2022-43517.json b/2022/43xxx/CVE-2022-43517.json
index 0f59515eb1c..e9e894e4bb5 100644
--- a/2022/43xxx/CVE-2022-43517.json
+++ b/2022/43xxx/CVE-2022-43517.json
@@ -46,15 +46,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Simcenter STAR-CCM+ (All versions). The affected application improperly assigns file permissions to installation folders.\n\nThis could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges."
+                "value": "A vulnerability has been identified in Simcenter STAR-CCM+ (All versions). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf"
             }
         ]
     }
diff --git a/2022/43xxx/CVE-2022-43722.json b/2022/43xxx/CVE-2022-43722.json
index dc06d04ed1b..35cfa5f6441 100644
--- a/2022/43xxx/CVE-2022-43722.json
+++ b/2022/43xxx/CVE-2022-43722.json
@@ -46,15 +46,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL.\nAt the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
+                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
             }
         ]
     }
diff --git a/2022/43xxx/CVE-2022-43723.json b/2022/43xxx/CVE-2022-43723.json
index 46fbb296910..5cf42501102 100644
--- a/2022/43xxx/CVE-2022-43723.json
+++ b/2022/43xxx/CVE-2022-43723.json
@@ -56,15 +56,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes.\nAt the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
+                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
             }
         ]
     }
diff --git a/2022/43xxx/CVE-2022-43724.json b/2022/43xxx/CVE-2022-43724.json
index 401c4a3353d..7d776c0b933 100644
--- a/2022/43xxx/CVE-2022-43724.json
+++ b/2022/43xxx/CVE-2022-43724.json
@@ -46,15 +46,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xp_cmdshell feature unauthenticated remote attackers could execute custom OS commands.\nAt the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
+                "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xp_cmdshell feature unauthenticated remote attackers could execute custom OS commands. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf"
             }
         ]
     }
diff --git a/2022/44xxx/CVE-2022-44457.json b/2022/44xxx/CVE-2022-44457.json
index 5c019af471a..824804a6bf6 100644
--- a/2022/44xxx/CVE-2022-44457.json
+++ b/2022/44xxx/CVE-2022-44457.json
@@ -116,7 +116,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled.\n\nThis CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
+                "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
             }
         ]
     },
diff --git a/2022/44xxx/CVE-2022-44575.json b/2022/44xxx/CVE-2022-44575.json
index cd3a5740a3b..99a7ee6029c 100644
--- a/2022/44xxx/CVE-2022-44575.json
+++ b/2022/44xxx/CVE-2022-44575.json
@@ -53,8 +53,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-274282.pdf"
             }
         ]
     }
diff --git a/2022/44xxx/CVE-2022-44731.json b/2022/44xxx/CVE-2022-44731.json
index 3d8084c8bd6..1d609949fe8 100644
--- a/2022/44xxx/CVE-2022-44731.json
+++ b/2022/44xxx/CVE-2022-44731.json
@@ -76,15 +76,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances.\n\nThis could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script)."
+                "value": "A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances. This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script)."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-547714.pdf"
             }
         ]
     }
diff --git a/2022/45xxx/CVE-2022-45044.json b/2022/45xxx/CVE-2022-45044.json
index b6e6b420b05..f0cbc7152d8 100644
--- a/2022/45xxx/CVE-2022-45044.json
+++ b/2022/45xxx/CVE-2022-45044.json
@@ -633,8 +633,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-552874.pdf"
             }
         ]
     }
diff --git a/2022/45xxx/CVE-2022-45484.json b/2022/45xxx/CVE-2022-45484.json
index b2fbb08ce20..6c0e1b2b340 100644
--- a/2022/45xxx/CVE-2022-45484.json
+++ b/2022/45xxx/CVE-2022-45484.json
@@ -113,8 +113,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-700053.pdf"
             }
         ]
     }
diff --git a/2022/45xxx/CVE-2022-45936.json b/2022/45xxx/CVE-2022-45936.json
index 98cc8d4f787..8e4584bf669 100644
--- a/2022/45xxx/CVE-2022-45936.json
+++ b/2022/45xxx/CVE-2022-45936.json
@@ -46,15 +46,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities.\n\nThis could allow authenticated remote attackers to read and manipulate sensitive information."
+                "value": "A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf"
             }
         ]
     }
diff --git a/2022/45xxx/CVE-2022-45937.json b/2022/45xxx/CVE-2022-45937.json
index 3f848dd95c7..13b5308eed8 100644
--- a/2022/45xxx/CVE-2022-45937.json
+++ b/2022/45xxx/CVE-2022-45937.json
@@ -73,8 +73,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46062.json b/2022/46xxx/CVE-2022-46062.json
index 4f59135fde0..d08bd9d0b54 100644
--- a/2022/46xxx/CVE-2022-46062.json
+++ b/2022/46xxx/CVE-2022-46062.json
@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2022-46062",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2022-46062",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF)."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/rdyx0/CVE/blob/master/Gym%20Management%20System/CSRF/delete_user/delete_user.md",
+                "refsource": "MISC",
+                "name": "https://github.com/rdyx0/CVE/blob/master/Gym%20Management%20System/CSRF/delete_user/delete_user.md"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46140.json b/2022/46xxx/CVE-2022-46140.json
index f7e39a1bb60..df8ce04aa0b 100644
--- a/2022/46xxx/CVE-2022-46140.json
+++ b/2022/46xxx/CVE-2022-46140.json
@@ -1943,8 +1943,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46142.json b/2022/46xxx/CVE-2022-46142.json
index 22282124872..b3066df73eb 100644
--- a/2022/46xxx/CVE-2022-46142.json
+++ b/2022/46xxx/CVE-2022-46142.json
@@ -2003,8 +2003,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46143.json b/2022/46xxx/CVE-2022-46143.json
index 0533965e20e..3d674d852f4 100644
--- a/2022/46xxx/CVE-2022-46143.json
+++ b/2022/46xxx/CVE-2022-46143.json
@@ -2003,8 +2003,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46144.json b/2022/46xxx/CVE-2022-46144.json
index c136f496808..c5e8e32ff56 100644
--- a/2022/46xxx/CVE-2022-46144.json
+++ b/2022/46xxx/CVE-2022-46144.json
@@ -156,15 +156,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C (All versions >= 2.3 < V3.0), SCALANCE SC626-2C (All versions < V2.3), SCALANCE SC626-2C (All versions >= 2.3 < V3.0), SCALANCE SC632-2C (All versions < V2.3), SCALANCE SC632-2C (All versions >= 2.3 < V3.0), SCALANCE SC636-2C (All versions < V2.3), SCALANCE SC636-2C (All versions >= 2.3 < V3.0), SCALANCE SC642-2C (All versions < V2.3), SCALANCE SC642-2C (All versions >= 2.3 < V3.0), SCALANCE SC646-2C (All versions < V2.3), SCALANCE SC646-2C (All versions >= 2.3 < V3.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial  interface irresponsive."
+                "value": "A vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C (All versions >= 2.3 < V3.0), SCALANCE SC626-2C (All versions < V2.3), SCALANCE SC626-2C (All versions >= 2.3 < V3.0), SCALANCE SC632-2C (All versions < V2.3), SCALANCE SC632-2C (All versions >= 2.3 < V3.0), SCALANCE SC636-2C (All versions < V2.3), SCALANCE SC636-2C (All versions >= 2.3 < V3.0), SCALANCE SC642-2C (All versions < V2.3), SCALANCE SC642-2C (All versions >= 2.3 < V3.0), SCALANCE SC646-2C (All versions < V2.3), SCALANCE SC646-2C (All versions >= 2.3 < V3.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-413565.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46265.json b/2022/46xxx/CVE-2022-46265.json
index 3f1d92be77d..e43eca7b375 100644
--- a/2022/46xxx/CVE-2022-46265.json
+++ b/2022/46xxx/CVE-2022-46265.json
@@ -53,8 +53,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-792594.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46345.json b/2022/46xxx/CVE-2022-46345.json
index 4d8e5bd56a3..e98711dfaac 100644
--- a/2022/46xxx/CVE-2022-46345.json
+++ b/2022/46xxx/CVE-2022-46345.json
@@ -83,8 +83,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46346.json b/2022/46xxx/CVE-2022-46346.json
index cb3d4e11fe3..6215c7d6a0f 100644
--- a/2022/46xxx/CVE-2022-46346.json
+++ b/2022/46xxx/CVE-2022-46346.json
@@ -83,8 +83,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46347.json b/2022/46xxx/CVE-2022-46347.json
index 47f92b4e200..2b76d52d506 100644
--- a/2022/46xxx/CVE-2022-46347.json
+++ b/2022/46xxx/CVE-2022-46347.json
@@ -83,8 +83,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46348.json b/2022/46xxx/CVE-2022-46348.json
index a8b7cb7a924..f62f8ae0e04 100644
--- a/2022/46xxx/CVE-2022-46348.json
+++ b/2022/46xxx/CVE-2022-46348.json
@@ -83,8 +83,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46349.json b/2022/46xxx/CVE-2022-46349.json
index 7fa3be9a256..4c8b427a74e 100644
--- a/2022/46xxx/CVE-2022-46349.json
+++ b/2022/46xxx/CVE-2022-46349.json
@@ -83,8 +83,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-588101.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46350.json b/2022/46xxx/CVE-2022-46350.json
index 86f1eb3b309..dadfd2e08fc 100644
--- a/2022/46xxx/CVE-2022-46350.json
+++ b/2022/46xxx/CVE-2022-46350.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46351.json b/2022/46xxx/CVE-2022-46351.json
index aa43effaf03..111e9eafe1b 100644
--- a/2022/46xxx/CVE-2022-46351.json
+++ b/2022/46xxx/CVE-2022-46351.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46352.json b/2022/46xxx/CVE-2022-46352.json
index 964ecbf91dc..4599f8ba2d8 100644
--- a/2022/46xxx/CVE-2022-46352.json
+++ b/2022/46xxx/CVE-2022-46352.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46353.json b/2022/46xxx/CVE-2022-46353.json
index a81529440d9..2cbe33b28b4 100644
--- a/2022/46xxx/CVE-2022-46353.json
+++ b/2022/46xxx/CVE-2022-46353.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46354.json b/2022/46xxx/CVE-2022-46354.json
index 666c8675e44..0bdefadbf36 100644
--- a/2022/46xxx/CVE-2022-46354.json
+++ b/2022/46xxx/CVE-2022-46354.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46355.json b/2022/46xxx/CVE-2022-46355.json
index bc3f443cb7d..0079a47047c 100644
--- a/2022/46xxx/CVE-2022-46355.json
+++ b/2022/46xxx/CVE-2022-46355.json
@@ -93,8 +93,9 @@
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-363821.pdf"
             }
         ]
     }
diff --git a/2022/46xxx/CVE-2022-46364.json b/2022/46xxx/CVE-2022-46364.json
index 83c698fda12..b1635611beb 100644
--- a/2022/46xxx/CVE-2022-46364.json
+++ b/2022/46xxx/CVE-2022-46364.json
@@ -1,18 +1,76 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2022-46364",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "security@apache.org",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type."
             }
         ]
-    }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-918 Server-Side Request Forgery (SSRF)",
+                        "cweId": "CWE-918"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Apache Software Foundation",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Apache CXF",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "0",
+                                            "version_affected": "="
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2",
+                "refsource": "MISC",
+                "name": "https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "discovery": "EXTERNAL"
+    },
+    "credits": [
+        {
+            "lang": "en",
+            "value": "thanat0s from Beijin Qihoo 360 adlab"
+        }
+    ]
 }
\ No newline at end of file
diff --git a/2022/46xxx/CVE-2022-46664.json b/2022/46xxx/CVE-2022-46664.json
index 205a363e4c5..01a852ef24a 100644
--- a/2022/46xxx/CVE-2022-46664.json
+++ b/2022/46xxx/CVE-2022-46664.json
@@ -46,15 +46,16 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0). Affected versions of the module improperly handle access control for some module entities.\n\nThis could allow authenticated remote attackers to read or delete sensitive information."
+                "value": "A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information."
             }
         ]
     },
     "references": {
         "reference_data": [
             {
-                "refsource": "CONFIRM",
-                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf"
+                "refsource": "MISC",
+                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf",
+                "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf"
             }
         ]
     }
diff --git a/2022/4xxx/CVE-2022-4454.json b/2022/4xxx/CVE-2022-4454.json
new file mode 100644
index 00000000000..6d2ddcbbf02
--- /dev/null
+++ b/2022/4xxx/CVE-2022-4454.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-4454",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/4xxx/CVE-2022-4455.json b/2022/4xxx/CVE-2022-4455.json
new file mode 100644
index 00000000000..e3ed8ffc285
--- /dev/null
+++ b/2022/4xxx/CVE-2022-4455.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-4455",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2022/4xxx/CVE-2022-4456.json b/2022/4xxx/CVE-2022-4456.json
new file mode 100644
index 00000000000..824e8cf3abb
--- /dev/null
+++ b/2022/4xxx/CVE-2022-4456.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2022-4456",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file