admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-08 14:08:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

converts 2 space indents to 4 space

Browse Source
This commit is contained in:
zdi-team 2022-09-26 16:20:41 -05:00
parent 6ab8a72607
commit c2acd0273d
3 changed files with 196 additions and 196 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

124
2020/10xxx/CVE-2020-10919.json
View File

@ -1,69 +1,69 @@
{ {
"CVE_data_meta": { "CVE_data_meta": {
"ASSIGNER": "zdi-disclosures@trendmicro.com", "ASSIGNER": "zdi-disclosures@trendmicro.com",
"ID": "CVE-2020-10919", "ID": "CVE-2020-10919",
"STATE": "PUBLIC" "STATE": "PUBLIC"
}, },
"affects": { "affects": {
"vendor": { "vendor": {
"vendor_data": [ "vendor_data": [
{ {
"product": { "product": {
"product_data": [ "product_data": [
{ {
"product_name": "HMI EA9", "product_name": "HMI EA9",
"version": { "version": {
"version_data": [ "version_data": [
{ {
"version_value": "Firmware version 6.52" "version_value": "Firmware version 6.52"
} }
] ]
}
}
]
},
"vendor_name": "C-MORE"
} }
}
] ]
},
"vendor_name": "C-MORE"
} }
] },
} "credit": "Ta-Lun Yen & Chizuru Toyama of TXOne IoT/ICS Security Research Labs (Trend Micro)",
}, "data_format": "MITRE",
"credit": "Ta-Lun Yen & Chizuru Toyama of TXOne IoT/ICS Security Research Labs (Trend Micro)", "data_type": "CVE",
"data_format": "MITRE", "data_version": "4.0",
"data_type": "CVE", "description": {
"data_version": "4.0", "description_data": [
"description": { {
"description_data": [ "lang": "eng",
{ "value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of passwords. When transmitting passwords, the process encrypts them in a recoverable format. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-10185."
"lang": "eng", }
"value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of passwords. When transmitting passwords, the process encrypts them in a recoverable format. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-10185."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-261: Weak Cryptography for Passwords"
}
] ]
} },
] "problemtype": {
}, "problemtype_data": [
"references": { {
"reference_data": [ "description": [
{ {
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-806/", "lang": "eng",
"refsource": "MISC", "value": "CWE-261: Weak Cryptography for Passwords"
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-806/" }
} ]
] }
}, ]
"impact": { },
"cvss": { "references": {
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "reference_data": [
"version": "3.0" {
"url": "https://www.zerodayinitiative.com/advisories/ZDI-20-806/",
"refsource": "MISC",
"name": "https://www.zerodayinitiative.com/advisories/ZDI-20-806/"
}
]
},
"impact": {
"cvss": {
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
} }
}
} }

134
2021/27xxx/CVE-2021-27242.json
View File

@ -1,74 +1,74 @@
{ {
"CVE_data_meta": { "CVE_data_meta": {
"ASSIGNER": "zdi-disclosures@trendmicro.com", "ASSIGNER": "zdi-disclosures@trendmicro.com",
"ID": "CVE-2021-27242", "ID": "CVE-2021-27242",
"STATE": "PUBLIC" "STATE": "PUBLIC"
}, },
"affects": { "affects": {
"vendor": { "vendor": {
"vendor_data": [ "vendor_data": [
{ {
"product": { "product": {
"product_data": [ "product_data": [
{ {
"product_name": "Desktop", "product_name": "Desktop",
"version": { "version": {
"version_data": [ "version_data": [
{ {
"version_value": "16.0.1-48919" "version_value": "16.0.1-48919"
} }
] ]
}
}
]
},
"vendor_name": "Parallels"
} }
}
] ]
},
"vendor_name": "Parallels"
} }
] },
} "credit": "Ezrak1e",
}, "data_format": "MITRE",
"credit": "Ezrak1e", "data_type": "CVE",
"data_format": "MITRE", "data_version": "4.0",
"data_type": "CVE", "description": {
"data_version": "4.0", "description_data": [
"description": { {
"description_data": [ "lang": "eng",
{ "value": "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the hypervisor. Was ZDI-CAN-11926."
"lang": "eng", }
"value": "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability.\n\nThe specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the hypervisor. Was ZDI-CAN-11926."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-787: Out-of-bounds Write"
}
] ]
} },
] "problemtype": {
}, "problemtype_data": [
"references": { {
"reference_data": [ "description": [
{ {
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-209/", "lang": "eng",
"refsource": "MISC", "value": "CWE-787: Out-of-bounds Write"
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-209/" }
}, ]
{ }
"url": "https://kb.parallels.com/en/125013", ]
"refsource": "MISC", },
"name": "https://kb.parallels.com/en/125013" "references": {
} "reference_data": [
] {
}, "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-209/",
"impact": { "refsource": "MISC",
"cvss": { "name": "https://www.zerodayinitiative.com/advisories/ZDI-21-209/"
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", },
"version": "3.0" {
"url": "https://kb.parallels.com/en/125013",
"refsource": "MISC",
"name": "https://kb.parallels.com/en/125013"
}
]
},
"impact": {
"cvss": {
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
} }
}
} }

134
2021/27xxx/CVE-2021-27271.json
View File

@ -1,74 +1,74 @@
{ {
"CVE_data_meta": { "CVE_data_meta": {
"ASSIGNER": "zdi-disclosures@trendmicro.com", "ASSIGNER": "zdi-disclosures@trendmicro.com",
"ID": "CVE-2021-27271", "ID": "CVE-2021-27271",
"STATE": "PUBLIC" "STATE": "PUBLIC"
}, },
"affects": { "affects": {
"vendor": { "vendor": {
"vendor_data": [ "vendor_data": [
{ {
"product": { "product": {
"product_data": [ "product_data": [
{ {
"product_name": "PhantomPDF", "product_name": "PhantomPDF",
"version": { "version": {
"version_data": [ "version_data": [
{ {
"version_value": "10.1.0.37527" "version_value": "10.1.0.37527"
} }
] ]
}
}
]
},
"vendor_name": "Foxit"
} }
}
] ]
},
"vendor_name": "Foxit"
} }
] },
} "credit": "Mat Powell of Trend Micro Zero Day Initiative",
}, "data_format": "MITRE",
"credit": "Mat Powell of Trend Micro Zero Day Initiative", "data_type": "CVE",
"data_format": "MITRE", "data_version": "4.0",
"data_type": "CVE", "description": {
"data_version": "4.0", "description_data": [
"description": { {
"description_data": [ "lang": "eng",
{ "value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in an out-of-bounds read condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12438."
"lang": "eng", }
"value": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in an out-of-bounds read condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12438."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-125: Out-of-bounds Read"
}
] ]
} },
] "problemtype": {
}, "problemtype_data": [
"references": { {
"reference_data": [ "description": [
{ {
"url": "https://www.zerodayinitiative.com/advisories/ZDI-21-353/", "lang": "eng",
"refsource": "MISC", "value": "CWE-125: Out-of-bounds Read"
"name": "https://www.zerodayinitiative.com/advisories/ZDI-21-353/" }
}, ]
{ }
"url": "https://www.foxitsoftware.com/support/security-bulletins.php", ]
"refsource": "MISC", },
"name": "https://www.foxitsoftware.com/support/security-bulletins.php" "references": {
} "reference_data": [
] {
}, "url": "https://www.zerodayinitiative.com/advisories/ZDI-21-353/",
"impact": { "refsource": "MISC",
"cvss": { "name": "https://www.zerodayinitiative.com/advisories/ZDI-21-353/"
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", },
"version": "3.0" {
"url": "https://www.foxitsoftware.com/support/security-bulletins.php",
"refsource": "MISC",
"name": "https://www.foxitsoftware.com/support/security-bulletins.php"
}
]
},
"impact": {
"cvss": {
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
} }
}
} }