"-Synchronized-Data."

This commit is contained in:
CVE Team 2019-09-25 21:01:00 +00:00
parent 9c2e0c0d64
commit be2f49a129
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
33 changed files with 218 additions and 146 deletions

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product."
"value": "On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product. This has been solved in v3.8.8.2 and later release firmware."
}
]
},
@ -56,6 +56,11 @@
"url": "https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755",
"refsource": "MISC",
"name": "https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755"
},
{
"refsource": "MISC",
"name": "https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers",
"url": "https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers"
}
]
}

View File

@ -34,7 +34,7 @@
"description_data": [
{
"lang": "eng",
"value": "On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product."
"value": "On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product. This has been solved in v3.8.8.2 and later release firmware"
}
]
},
@ -56,6 +56,11 @@
"url": "https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755",
"refsource": "MISC",
"name": "https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755"
},
{
"refsource": "MISC",
"name": "https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers",
"url": "https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers"
}
]
}

View File

@ -0,0 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-16890",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/halo-dev/halo/issues/311",
"refsource": "MISC",
"name": "https://github.com/halo-dev/halo/issues/311"
}
]
}
}