admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-09-26 12:01:08 +00:00
parent a99405469b
commit 956d88102c
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
13 changed files with 333 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
2017/18xxx/CVE-2017-18594.json
View File

@ -81,6 +81,16 @@
"url": "https://seclists.org/nmap-announce/2019/0",
"refsource": "MISC",
"name": "https://seclists.org/nmap-announce/2019/0"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2198",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2200",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html"
}
]
}

5
2018/14xxx/CVE-2018-14040.json
View File

@ -101,6 +101,11 @@
"refsource": "FULLDISC",
"name": "20190510 Re: dotCMS v5.1.1 HTML Injection & XSS Vulnerability",
"url": "http://seclists.org/fulldisclosure/2019/May/13"
},
{
"refsource": "MLIST",
"name": "[superset-dev] 20190926 Re: [VOTE] Release Superset 0.34.1 based on Superset 0.34.1rc1",
"url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"
}
]
}

5
2018/14xxx/CVE-2018-14041.json
View File

@ -101,6 +101,11 @@
"refsource": "REDHAT",
"name": "RHSA-2019:1456",
"url": "https://access.redhat.com/errata/RHSA-2019:1456"
},
{
"refsource": "MLIST",
"name": "[superset-dev] 20190926 Re: [VOTE] Release Superset 0.34.1 based on Superset 0.34.1rc1",
"url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"
}
]
}

5
2018/14xxx/CVE-2018-14042.json
View File

@ -91,6 +91,11 @@
"refsource": "FULLDISC",
"name": "20190510 Re: dotCMS v5.1.1 HTML Injection & XSS Vulnerability",
"url": "http://seclists.org/fulldisclosure/2019/May/13"
},
{
"refsource": "MLIST",
"name": "[superset-dev] 20190926 Re: [VOTE] Release Superset 0.34.1 based on Superset 0.34.1rc1",
"url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"
}
]
}

10
2018/15xxx/CVE-2018-15173.json
View File

@ -66,6 +66,16 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2019:1462",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00067.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2198",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00073.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2200",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00075.html"
}
]
}

5
2018/20xxx/CVE-2018-20677.json
View File

@ -91,6 +91,11 @@
"refsource": "REDHAT",
"name": "RHBA-2019:1570",
"url": "https://access.redhat.com/errata/RHBA-2019:1570"
},
{
"refsource": "MLIST",
"name": "[superset-dev] 20190926 Re: [VOTE] Release Superset 0.34.1 based on Superset 0.34.1rc1",
"url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"
}
]
}

71
2019/12xxx/CVE-2019-12617.json
View File

@ -1,17 +1,76 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-12617",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2019-12617",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.silverstripe.org/download/security-releases/",
"refsource": "MISC",
"name": "https://www.silverstripe.org/download/security-releases/"
},
{
"url": "https://www.silverstripe.org/blog/tag/release",
"refsource": "MISC",
"name": "https://www.silverstripe.org/blog/tag/release"
},
{
"url": "https://forum.silverstripe.org/c/releases",
"refsource": "MISC",
"name": "https://forum.silverstripe.org/c/releases"
},
{
"refsource": "CONFIRM",
"name": "https://www.silverstripe.org/download/security-releases/CVE-2019-12617",
"url": "https://www.silverstripe.org/download/security-releases/CVE-2019-12617"
}
]
}

77
2019/14xxx/CVE-2019-14272.json Normal file
View File

@ -0,0 +1,77 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-14272",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.silverstripe.org/download/security-releases/",
"refsource": "MISC",
"name": "https://www.silverstripe.org/download/security-releases/"
},
{
"url": "https://www.silverstripe.org/blog/tag/release",
"refsource": "MISC",
"name": "https://www.silverstripe.org/blog/tag/release"
},
{
"url": "https://forum.silverstripe.org/c/releases",
"refsource": "MISC",
"name": "https://forum.silverstripe.org/c/releases"
},
{
"refsource": "CONFIRM",
"name": "https://www.silverstripe.org/download/security-releases/CVE-2019-14272",
"url": "https://www.silverstripe.org/download/security-releases/CVE-2019-14272"
}
]
}
}

77
2019/14xxx/CVE-2019-14273.json Normal file
View File

@ -0,0 +1,77 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-14273",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In SilverStripe assets 4.0, there is broken access control on files."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://www.silverstripe.org/download/security-releases/",
"refsource": "MISC",
"name": "https://www.silverstripe.org/download/security-releases/"
},
{
"url": "https://www.silverstripe.org/blog/tag/release",
"refsource": "MISC",
"name": "https://www.silverstripe.org/blog/tag/release"
},
{
"url": "https://forum.silverstripe.org/c/releases",
"refsource": "MISC",
"name": "https://forum.silverstripe.org/c/releases"
},
{
"refsource": "CONFIRM",
"name": "https://www.silverstripe.org/download/security-releases/CVE-2019-14273",
"url": "https://www.silverstripe.org/download/security-releases/CVE-2019-14273"
}
]
}
}

2
2019/14xxx/CVE-2019-14666.json
View File

@ -58,7 +58,7 @@
"url": "https://www.tarlogic.com/advisories/Tarlogic-2019-GPLI-Account-Takeover.txt"
},
{
"refsource": "MISC",
"refsource": "CONFIRM",
"name": "https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5q",
"url": "https://github.com/glpi-project/glpi/security/advisories/GHSA-47hq-pfrr-jh5q"
}

9
2019/14xxx/CVE-2019-14844.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-14844",
"ASSIGNER": "mrehak@redhat.com"
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -44,7 +45,9 @@
"references": {
"reference_data": [
{
"url": "https://github.com/krb5/krb5/pull/981"
"url": "https://github.com/krb5/krb5/pull/981",
"refsource": "MISC",
"name": "https://github.com/krb5/krb5/pull/981"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844",
@ -71,4 +74,4 @@
]
]
}
}
}

62
2019/16xxx/CVE-2019-16904.json Normal file
View File

@ -0,0 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-16904",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TeamPass 2.1.27.36 allows XSS by setting a crafted password for an item in a folder, and then sharing that item with an admin. (The crafted password is exploitable when viewing the change history, or the previous used password field.)"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/nilsteampassnet/TeamPass/issues/2685",
"refsource": "MISC",
"name": "https://github.com/nilsteampassnet/TeamPass/issues/2685"
}
]
}
}

5
2019/8xxx/CVE-2019-8331.json
View File

@ -126,6 +126,11 @@
"refsource": "MLIST",
"name": "[flink-user] 20190813 Re: Apache flink 1.7.2 security issues",
"url": "https://lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2@%3Cuser.flink.apache.org%3E"
},
{
"refsource": "MLIST",
"name": "[superset-dev] 20190926 Re: [VOTE] Release Superset 0.34.1 based on Superset 0.34.1rc1",
"url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"
}
]
}