admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-08 14:08:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Synchronized data.

Browse Source
This commit is contained in:
CVE Team 2018-11-13 10:07:24 -05:00
parent 5d0b9c9b33
commit 97645ee6d1
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
5 changed files with 191 additions and 183 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

151
2018/16xxx/CVE-2018-16850.json
View File

@ -1,77 +1,80 @@
{ {
"data_type": "CVE", "CVE_data_meta" : {
"data_format": "MITRE", "ASSIGNER" : "psampaio@redhat.com",
"data_version": "4.0", "ID" : "CVE-2018-16850",
"CVE_data_meta": { "STATE" : "PUBLIC"
"ID": "CVE-2018-16850", },
"ASSIGNER": "psampaio@redhat.com" "affects" : {
}, "vendor" : {
"affects": { "vendor_data" : [
"vendor": { {
"vendor_data": [ "product" : {
{ "product_data" : [
"vendor_name": "The PostgreSQL Project", {
"product": { "product_name" : "postgresql",
"product_data": [ "version" : {
{ "version_data" : [
"product_name": "postgresql", {
"version": { "version_value" : "11.1"
"version_data": [ },
{ {
"version_value": "11.1" "version_value" : "10.6"
}, }
{ ]
"version_value": "10.6" }
} }
] ]
} },
} "vendor_name" : "The PostgreSQL Project"
] }
} ]
} }
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges."
}
]
},
"impact" : {
"cvss" : [
[
{
"vectorString" : "8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version" : "3.0"
}
]
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "CWE-89"
}
] ]
} }
}, ]
"problemtype": { },
"problemtype_data": [ "references" : {
{ "reference_data" : [
"description": [ {
{ "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850",
"lang": "eng", "refsource" : "CONFIRM",
"value": "CWE-89" "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850"
} },
] {
} "name" : "https://www.postgresql.org/about/news/1905/",
] "refsource" : "CONFIRM",
}, "url" : "https://www.postgresql.org/about/news/1905/"
"references": { }
"reference_data": [ ]
{ }
"url": "https://www.postgresql.org/about/news/1905/"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850",
"refsource": "CONFIRM"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges."
}
]
},
"impact": {
"cvss": [
[
{
"vectorString": "8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
]
]
}
} }

9
2018/17xxx/CVE-2018-17187.json
View File

@ -53,9 +53,18 @@
"references" : { "references" : {
"reference_data" : [ "reference_data" : [
{ {
"name" : "https://issues.apache.org/jira/browse/PROTON-1962",
"refsource" : "MISC",
"url" : "https://issues.apache.org/jira/browse/PROTON-1962" "url" : "https://issues.apache.org/jira/browse/PROTON-1962"
}, },
{ {
"name" : "https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E",
"refsource" : "MISC",
"url" : "https://mail-archives.apache.org/mod_mbox/qpid-users/201811.mbox/%3CCAFitrpQSV73Vz7rJYfLJK7gvEymZSCR5ooWUeU8j4jzRydk-eg%40mail.gmail.com%3E"
},
{
"name" : "https://qpid.apache.org/cves/CVE-2018-17187.html",
"refsource" : "MISC",
"url" : "https://qpid.apache.org/cves/CVE-2018-17187.html" "url" : "https://qpid.apache.org/cves/CVE-2018-17187.html"
} }
] ]

4
2018/1xxx/CVE-2018-1293.json
View File

@ -2,7 +2,7 @@
"CVE_data_meta" : { "CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org", "ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2018-1293", "ID" : "CVE-2018-1293",
"STATE" : "RESERVED" "STATE" : "REJECT"
}, },
"data_format" : "MITRE", "data_format" : "MITRE",
"data_type" : "CVE", "data_type" : "CVE",
@ -11,7 +11,7 @@
"description_data" : [ "description_data" : [
{ {
"lang" : "eng", "lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
} }
] ]
} }

126
2018/1xxx/CVE-2018-1792.json
View File

@ -1,61 +1,10 @@
{ {
"impact" : { "CVE_data_meta" : {
"cvssv3" : { "ASSIGNER" : "psirt@us.ibm.com",
"TM" : { "DATE_PUBLIC" : "2018-11-12T00:00:00",
"RL" : "O", "ID" : "CVE-2018-1792",
"RC" : "C", "STATE" : "PUBLIC"
"E" : "U"
},
"BM" : {
"S" : "C",
"A" : "H",
"C" : "H",
"AV" : "L",
"PR" : "L",
"UI" : "N",
"AC" : "L",
"I" : "H",
"SCORE" : "8.800"
}
}
}, },
"description" : {
"description_data" : [
{
"value" : "IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947.",
"lang" : "eng"
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Privileges"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10734447",
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10734447",
"title" : "IBM Security Bulletin 734447 (MQ)",
"refsource" : "CONFIRM"
},
{
"name" : "ibm-websphere-cve20181792-priv-escalation (148947)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148947",
"refsource" : "XF",
"title" : "X-Force Vulnerability Report"
}
]
},
"data_version" : "4.0",
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
@ -63,6 +12,7 @@
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
"product_name" : "MQ",
"version" : { "version" : {
"version_data" : [ "version_data" : [
{ {
@ -135,8 +85,7 @@
"version_value" : "9.1.0.0" "version_value" : "9.1.0.0"
} }
] ]
}, }
"product_name" : "MQ"
} }
] ]
}, },
@ -145,12 +94,61 @@
] ]
} }
}, },
"data_type" : "CVE",
"data_format" : "MITRE", "data_format" : "MITRE",
"CVE_data_meta" : { "data_type" : "CVE",
"DATE_PUBLIC" : "2018-11-12T00:00:00", "data_version" : "4.0",
"ID" : "CVE-2018-1792", "description" : {
"STATE" : "PUBLIC", "description_data" : [
"ASSIGNER" : "psirt@us.ibm.com" {
"lang" : "eng",
"value" : "IBM WebSphere MQ 8.0.0.0 through 8.0.0.10, 9.0.0.0 through 9.0.0.5, 9.0.1 through 9.0.5, and 9.1.0.0 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "H",
"AC" : "L",
"AV" : "L",
"C" : "H",
"I" : "H",
"PR" : "L",
"S" : "C",
"SCORE" : "8.800",
"UI" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Gain Privileges"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10734447",
"refsource" : "CONFIRM",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10734447"
},
{
"name" : "ibm-websphere-cve20181792-priv-escalation(148947)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/148947"
}
]
} }
} }

84
2018/1xxx/CVE-2018-1808.json
View File

@ -1,18 +1,14 @@
{ {
"CVE_data_meta" : { "CVE_data_meta" : {
"ASSIGNER" : "psirt@us.ibm.com",
"DATE_PUBLIC" : "2018-10-24T00:00:00", "DATE_PUBLIC" : "2018-10-24T00:00:00",
"ID" : "CVE-2018-1808", "ID" : "CVE-2018-1808",
"STATE" : "PUBLIC", "STATE" : "PUBLIC"
"ASSIGNER" : "psirt@us.ibm.com"
}, },
"data_format" : "MITRE",
"data_version" : "4.0",
"data_type" : "CVE",
"affects" : { "affects" : {
"vendor" : { "vendor" : {
"vendor_data" : [ "vendor_data" : [
{ {
"vendor_name" : "IBM",
"product" : { "product" : {
"product_data" : [ "product_data" : [
{ {
@ -44,18 +40,50 @@
} }
} }
] ]
} },
"vendor_name" : "IBM"
} }
] ]
} }
}, },
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"A" : "N",
"AC" : "L",
"AV" : "N",
"C" : "N",
"I" : "L",
"PR" : "L",
"S" : "U",
"SCORE" : "4.300",
"UI" : "N"
},
"TM" : {
"E" : "U",
"RC" : "C",
"RL" : "O"
}
}
},
"problemtype" : { "problemtype" : {
"problemtype_data" : [ "problemtype_data" : [
{ {
"description" : [ "description" : [
{ {
"value" : "Gain Access", "lang" : "eng",
"lang" : "eng" "value" : "Gain Access"
} }
] ]
} }
@ -64,45 +92,15 @@
"references" : { "references" : {
"reference_data" : [ "reference_data" : [
{ {
"url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10735905",
"name" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10735905", "name" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10735905",
"title" : "IBM Security Bulletin 0735905", "refsource" : "CONFIRM",
"refsource" : "CONFIRM" "url" : "https://www-01.ibm.com/support/docview.wss?uid=ibm10735905"
}, },
{ {
"title" : "X-Force Vulnerability Report", "name" : "ibm-websphere-cve20181808-ssi(149828)",
"refsource" : "XF", "refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/149828", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/149828"
"name" : "ibm-websphere-cve20181808-ssi (149828)"
} }
] ]
},
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828."
}
]
},
"impact" : {
"cvssv3" : {
"BM" : {
"AV" : "N",
"C" : "N",
"A" : "N",
"S" : "U",
"SCORE" : "4.300",
"UI" : "N",
"AC" : "L",
"I" : "L",
"PR" : "L"
},
"TM" : {
"RC" : "C",
"RL" : "O",
"E" : "U"
}
}
} }
} }