From c5df4986479b708dba303116e64d2af9e97deb57 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 17 Sep 2018 02:11:17 -0400 Subject: [PATCH] - Synchronized data. --- 2018/17xxx/CVE-2018-17136.json | 62 ++++++++++++++++++++++++++++++++++ 2018/17xxx/CVE-2018-17137.json | 62 ++++++++++++++++++++++++++++++++++ 2018/17xxx/CVE-2018-17138.json | 62 ++++++++++++++++++++++++++++++++++ 2018/17xxx/CVE-2018-17139.json | 62 ++++++++++++++++++++++++++++++++++ 2018/17xxx/CVE-2018-17140.json | 62 ++++++++++++++++++++++++++++++++++ 5 files changed, 310 insertions(+) create mode 100644 2018/17xxx/CVE-2018-17136.json create mode 100644 2018/17xxx/CVE-2018-17137.json create mode 100644 2018/17xxx/CVE-2018-17138.json create mode 100644 2018/17xxx/CVE-2018-17139.json create mode 100644 2018/17xxx/CVE-2018-17140.json diff --git a/2018/17xxx/CVE-2018-17136.json b/2018/17xxx/CVE-2018-17136.json new file mode 100644 index 00000000000..1dddecbfe40 --- /dev/null +++ b/2018/17xxx/CVE-2018-17136.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-17136", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://github.com/TEag1e/zzcms", + "refsource" : "MISC", + "url" : "https://github.com/TEag1e/zzcms" + } + ] + } +} diff --git a/2018/17xxx/CVE-2018-17137.json b/2018/17xxx/CVE-2018-17137.json new file mode 100644 index 00000000000..56455c2cc3d --- /dev/null +++ b/2018/17xxx/CVE-2018-17137.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-17137", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "Prezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has SE_DEBUG_PRIVILEGE on Windows, which might allow attackers to bypass intended access restrictions." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://github.com/GitHubAssessments/CVE_Assessment_04_2018", + "refsource" : "MISC", + "url" : "https://github.com/GitHubAssessments/CVE_Assessment_04_2018" + } + ] + } +} diff --git a/2018/17xxx/CVE-2018-17138.json b/2018/17xxx/CVE-2018-17138.json new file mode 100644 index 00000000000..f9e07000ee2 --- /dev/null +++ b/2018/17xxx/CVE-2018-17138.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-17138", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "45305", + "refsource" : "EXPLOIT-DB", + "url" : "https://www.exploit-db.com/exploits/45305/" + } + ] + } +} diff --git a/2018/17xxx/CVE-2018-17139.json b/2018/17xxx/CVE-2018-17139.json new file mode 100644 index 00000000000..360a21fb21e --- /dev/null +++ b/2018/17xxx/CVE-2018-17139.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-17139", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "45253", + "refsource" : "EXPLOIT-DB", + "url" : "https://www.exploit-db.com/exploits/45253/" + } + ] + } +} diff --git a/2018/17xxx/CVE-2018-17140.json b/2018/17xxx/CVE-2018-17140.json new file mode 100644 index 00000000000..686e0c2002b --- /dev/null +++ b/2018/17xxx/CVE-2018-17140.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-17140", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a ql_insert action to wp-admin/admin.php." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "45307", + "refsource" : "EXPLOIT-DB", + "url" : "https://www.exploit-db.com/exploits/45307/" + } + ] + } +}