"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-08-18 15:01:35 +00:00
parent a4078b0128
commit a03f4a014b
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
4 changed files with 31 additions and 13 deletions

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "Wowza Streaming Engine through 2019-11-28 has Insecure Permissions."
"value": "Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was resolved in Wowza Streaming Engine 4.8.5."
}
]
},
@ -52,15 +52,20 @@
},
"references": {
"reference_data": [
{
"url": "https://www.wowza.com/products/streaming-engine",
"refsource": "MISC",
"name": "https://www.wowza.com/products/streaming-engine"
},
{
"refsource": "MISC",
"name": "https://www.gruppotim.it/redteam",
"url": "https://www.gruppotim.it/redteam"
},
{
"refsource": "MISC",
"name": "https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes",
"url": "https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes"
},
{
"refsource": "MISC",
"name": "https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/master/wowza-streaming-engine/CVE-2019-19455.txt",
"url": "https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/master/wowza-streaming-engine/CVE-2019-19455.txt"
}
]
}

View File

@ -86,6 +86,11 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2020:1210",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2020:1231",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
}
]
}

View File

@ -86,6 +86,11 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2020:1210",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2020:1231",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html"
}
]
}

View File

@ -66,16 +66,19 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672",
"name": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672"
},
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673",
"name": "https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673"
},
{
"refsource": "CONFIRM",
"url": "https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3"
"refsource": "MISC",
"url": "https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3",
"name": "https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3"
}
]
},
@ -83,7 +86,7 @@
"description_data": [
{
"lang": "eng",
"value": "The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.\r\n\r\n"
"value": "The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions."
}
]
},