"-Synchronized-Data."

2019/1020xxx/CVE-2019-1020018.json

@@ -1,17 +1,66 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "cve-assign@distributedweaknessfiling.org",
         "ID": "CVE-2019-1020018",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC"
-        "STATE": "RESERVED"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Discourse",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Discourse",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "< v2.4.0.beta2"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Discourse before v2.4.0.beta2 lacks a confirmation screen when logging in via an email link."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "lacks a confirmation screen"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/discourse/discourse/commit/b8340c6c8e50a71ff1bca9654b9126ca5a84ce9a",
+                "refsource": "MISC",
+                "name": "https://github.com/discourse/discourse/commit/b8340c6c8e50a71ff1bca9654b9126ca5a84ce9a"
+            },
+            {
+                "url": "https://github.com/discourse/discourse/commit/52387be4a44cdeaca5421ee955ba1343e836bade",
+                "refsource": "MISC",
+                "name": "https://github.com/discourse/discourse/commit/52387be4a44cdeaca5421ee955ba1343e836bade"
             }
         ]
     }

2019/1020xxx/CVE-2019-1020019.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "cve-assign@distributedweaknessfiling.org",
         "ID": "CVE-2019-1020019",
-        "ASSIGNER": "cve@mitre.org",
+        "STATE": "PUBLIC"
-        "STATE": "RESERVED"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Invenio",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "invenio-previewer",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "< 1.0.0a12"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "invenio-previewer before 1.0.0a12 allows XSS."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "XSS"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/inveniosoftware/invenio-previewer/security/advisories/GHSA-j9m2-6hq2-4r3c",
+                "refsource": "MISC",
+                "name": "https://github.com/inveniosoftware/invenio-previewer/security/advisories/GHSA-j9m2-6hq2-4r3c"
             }
         ]
     }

2019/1xxx/CVE-2019-1098.json

@@ -65,7 +65,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka \u0027Windows GDI Information Disclosure Vulnerability\u0027. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116."
+                "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116."
             }
         ]
     },
@@ -84,7 +84,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1098"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1098",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1098"
             }
         ]
     }

2019/1xxx/CVE-2019-1099.json

@@ -68,7 +68,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka \u0027Windows GDI Information Disclosure Vulnerability\u0027. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116."
+                "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116."
             }
         ]
     },
@@ -87,7 +87,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1099"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1099",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1099"
             }
         ]
     }

2019/1xxx/CVE-2019-1100.json

@@ -68,7 +68,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka \u0027Windows GDI Information Disclosure Vulnerability\u0027. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116."
+                "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116."
             }
         ]
     },
@@ -87,7 +87,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1100"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1100",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1100"
             }
         ]
     }

2019/1xxx/CVE-2019-1101.json

@@ -68,7 +68,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka \u0027Windows GDI Information Disclosure Vulnerability\u0027. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1116."
+                "value": "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1116."
             }
         ]
     },
@@ -87,7 +87,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1101"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1101",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1101"
             }
         ]
     }

2019/1xxx/CVE-2019-1102.json

@@ -186,7 +186,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka \u0027GDI+ Remote Code Execution Vulnerability\u0027."
+                "value": "A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'."
             }
         ]
     },
@@ -205,7 +205,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102"
             }
         ]
     }

2019/1xxx/CVE-2019-1103.json

@@ -122,7 +122,7 @@
         "description_data": [
             {
                 "lang": "eng",
-        "value": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka \u0027Chakra Scripting Engine Memory Corruption Vulnerability\u0027. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1106, CVE-2019-1107."
+                "value": "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1106, CVE-2019-1107."
             }
         ]
     },
@@ -141,7 +141,9 @@
     "references": {
         "reference_data": [
             {
-        "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103"
+                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103",
+                "refsource": "MISC",
+                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103"
             }
         ]
     }