admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 02:32:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-04-04 16:01:03 +00:00
parent cf7cfd27c0
commit cc1e47f480
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
88 changed files with 1131 additions and 617 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
2018/10xxx/CVE-2018-10243.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10243",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,28 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/",
"url": "https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/"
}
]
}

48
2018/10xxx/CVE-2018-10244.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10244",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,28 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/",
"url": "https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/"
}
]
}

120
2018/11xxx/CVE-2018-11830.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11830",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Input Validation vulnerability in QCPE"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11830",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Input Validation vulnerability in QCPE"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

120
2018/11xxx/CVE-2018-11958.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Access Control vulnerability in Content Protection"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Access Control vulnerability in Content Protection"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

120
2018/11xxx/CVE-2018-11966.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11966",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
"version": {
"version_data": [
{
"version_value": "MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Input Validation in NAS"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11966",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables",
"version": {
"version_data": [
{
"version_value": "MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Input Validation in NAS"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

120
2018/11xxx/CVE-2018-11970.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11970",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Permissions, Privilege and Access Controls vulnerability in QTEE"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11970",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Permissions, Privilege and Access Controls vulnerability in QTEE"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

120
2018/11xxx/CVE-2018-11971.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11971",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Exposure vulnerability in TrustZone"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-11971",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,",
"version": {
"version_data": [
{
"version_value": "MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Exposure vulnerability in TrustZone"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

120
2018/13xxx/CVE-2018-13918.json
View File

@ -1,62 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-13918",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables,",
"version": {
"version_data": [
{
"version_value": "MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Buffer Copy Without Checking Size of Input vulnerability in PMIC Modules"
}
"CVE_data_meta": {
"ASSIGNER": "product-security@qualcomm.com",
"ID": "CVE-2018-13918",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables,",
"version": {
"version_data": [
{
"version_value": "MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150"
}
]
}
}
]
},
"vendor_name": "Qualcomm, Inc."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Buffer Copy Without Checking Size of Input vulnerability in PMIC Modules"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.qualcomm.com/company/product-security/bulletins",
"refsource": "CONFIRM",
"url": "https://www.qualcomm.com/company/product-security/bulletins"
}
]
}
}

53
2018/20xxx/CVE-2018-20222.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-20222",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,33 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "XXE issue in Airsonic before 10.1.2 during parse."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md",
"url": "https://github.com/airsonic/airsonic/blob/master/CHANGELOG.md"
},
{
"refsource": "CONFIRM",
"name": "https://github.com/airsonic/airsonic/releases/tag/v10.2.1",
"url": "https://github.com/airsonic/airsonic/releases/tag/v10.2.1"
}
]
}

53
2018/20xxx/CVE-2018-20449.json
View File

@ -2,7 +2,30 @@
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-20449",
"STATE": "RESERVED"
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
@ -11,7 +34,33 @@
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading \"callback=\" lines in a debugfs file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"name": "https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92",
"url": "https://elixir.bootlin.com/linux/v4.14.90/source/drivers/dma/qcom/hidma_dbg.c#L92"
},
{
"refsource": "MISC",
"name": "https://www.mail-archive.com/debian-security-tracker@lists.debian.org/msg03808.html",
"url": "https://www.mail-archive.com/debian-security-tracker@lists.debian.org/msg03808.html"
}
]
}

7
2019/1003xxx/CVE-2019-1003051.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003051",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-829"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-829",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-829"
}
]
}

7
2019/1003xxx/CVE-2019-1003052.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003052",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-831"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-831",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-831"
}
]
}

7
2019/1003xxx/CVE-2019-1003053.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003053",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-839"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-839",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-839"
}
]
}

7
2019/1003xxx/CVE-2019-1003054.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003054",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-837"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-837",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-837"
}
]
}

7
2019/1003xxx/CVE-2019-1003055.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003055",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-954"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-954",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-954"
}
]
}

7
2019/1003xxx/CVE-2019-1003056.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003056",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-956"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-956",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-956"
}
]
}

7
2019/1003xxx/CVE-2019-1003057.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003057",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-965"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-965",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-965"
}
]
}

7
2019/1003xxx/CVE-2019-1003058.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003058",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974"
}
]
}

7
2019/1003xxx/CVE-2019-1003059.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003059",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-974"
}
]
}

7
2019/1003xxx/CVE-2019-1003060.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003060",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1041"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1041",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1041"
}
]
}

7
2019/1003xxx/CVE-2019-1003061.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003061",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1042"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1042",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1042"
}
]
}

7
2019/1003xxx/CVE-2019-1003062.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003062",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830"
}
]
}

7
2019/1003xxx/CVE-2019-1003063.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003063",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832"
}
]
}

7
2019/1003xxx/CVE-2019-1003064.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003064",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835"
}
]
}

7
2019/1003xxx/CVE-2019-1003065.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003065",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838"
}
]
}

7
2019/1003xxx/CVE-2019-1003066.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003066",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841"
}
]
}

7
2019/1003xxx/CVE-2019-1003067.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003067",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842"
}
]
}

7
2019/1003xxx/CVE-2019-1003068.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003068",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945"
}
]
}

7
2019/1003xxx/CVE-2019-1003069.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003069",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949"
}
]
}

7
2019/1003xxx/CVE-2019-1003070.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003070",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952"
}
]
}

7
2019/1003xxx/CVE-2019-1003071.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003071",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957"
}
]
}

7
2019/1003xxx/CVE-2019-1003072.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003072",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961"
}
]
}

7
2019/1003xxx/CVE-2019-1003073.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003073",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962"
}
]
}

7
2019/1003xxx/CVE-2019-1003074.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003074",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964"
}
]
}

7
2019/1003xxx/CVE-2019-1003075.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003075",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966"
}
]
}

7
2019/1003xxx/CVE-2019-1003076.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003076",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977"
}
]
}

7
2019/1003xxx/CVE-2019-1003077.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003077",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977"
}
]
}

7
2019/1003xxx/CVE-2019-1003078.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003078",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979"
}
]
}

7
2019/1003xxx/CVE-2019-1003079.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003079",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979"
}
]
}

7
2019/1003xxx/CVE-2019-1003080.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003080",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981"
}
]
}

7
2019/1003xxx/CVE-2019-1003081.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003081",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981"
}
]
}

7
2019/1003xxx/CVE-2019-1003082.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003082",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991"
}
]
}

7
2019/1003xxx/CVE-2019-1003083.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003083",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991"
}
]
}

7
2019/1003xxx/CVE-2019-1003084.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003084",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993"
}
]
}

7
2019/1003xxx/CVE-2019-1003085.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003085",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993"
}
]
}

7
2019/1003xxx/CVE-2019-1003086.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003086",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037"
}
]
}

7
2019/1003xxx/CVE-2019-1003087.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003087",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037"
}
]
}

7
2019/1003xxx/CVE-2019-1003088.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003088",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043"
}
]
}

7
2019/1003xxx/CVE-2019-1003089.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003089",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044"
}
]
}

7
2019/1003xxx/CVE-2019-1003090.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003090",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054"
}
]
}

7
2019/1003xxx/CVE-2019-1003091.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003091",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054"
}
]
}

7
2019/1003xxx/CVE-2019-1003092.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003092",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058"
}
]
}

7
2019/1003xxx/CVE-2019-1003093.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003093",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058"
}
]
}

7
2019/1003xxx/CVE-2019-1003094.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003094",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059"
}
]
}

7
2019/1003xxx/CVE-2019-1003095.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003095",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061"
}
]
}

7
2019/1003xxx/CVE-2019-1003096.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003096",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062"
}
]
}

7
2019/1003xxx/CVE-2019-1003097.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003097",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069"
}
]
}

7
2019/1003xxx/CVE-2019-1003098.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003098",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084"
}
]
}

7
2019/1003xxx/CVE-2019-1003099.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-1003099",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "cve-assign@distributedweaknessfiling.org",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084"
}
]
}

56
2019/10xxx/CVE-2019-10273.json
View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-10273",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2019-10273",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticated users to enumerate active users. Due to a flaw within the way the authentication is handled, an attacker is able to login and verify any active account."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://0x445.github.io/CVE-2019-10273/",
"url": "https://0x445.github.io/CVE-2019-10273/"
}
]
}

7
2019/10xxx/CVE-2019-10277.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10277",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1085"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1085",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1085"
}
]
}

7
2019/10xxx/CVE-2019-10278.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10278",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091"
}
]
}

7
2019/10xxx/CVE-2019-10279.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10279",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1091"
}
]
}

7
2019/10xxx/CVE-2019-10280.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10280",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1093"
}
]
}

7
2019/10xxx/CVE-2019-10281.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10281",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-828"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-828",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-828"
}
]
}

7
2019/10xxx/CVE-2019-10282.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10282",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-843"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-843",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-843"
}
]
}

7
2019/10xxx/CVE-2019-10283.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10283",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946"
}
]
}

7
2019/10xxx/CVE-2019-10284.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10284",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-947"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-947",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-947"
}
]
}

7
2019/10xxx/CVE-2019-10285.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10285",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-955"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-955",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-955"
}
]
}

7
2019/10xxx/CVE-2019-10286.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10286",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-959"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-959",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-959"
}
]
}

7
2019/10xxx/CVE-2019-10287.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10287",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963"
}
]
}

7
2019/10xxx/CVE-2019-10288.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10288",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1031"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1031",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1031"
}
]
}

7
2019/10xxx/CVE-2019-10289.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10289",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032"
}
]
}

7
2019/10xxx/CVE-2019-10290.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10290",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1032"
}
]
}

7
2019/10xxx/CVE-2019-10291.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10291",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1040"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1040",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1040"
}
]
}

7
2019/10xxx/CVE-2019-10292.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10292",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055"
}
]
}

7
2019/10xxx/CVE-2019-10293.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10293",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1055"
}
]
}

7
2019/10xxx/CVE-2019-10294.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10294",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1056"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1056",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1056"
}
]
}

7
2019/10xxx/CVE-2019-10295.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10295",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1063"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1063",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1063"
}
]
}

7
2019/10xxx/CVE-2019-10296.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10296",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1066"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1066",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1066"
}
]
}

7
2019/10xxx/CVE-2019-10297.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10297",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1090"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1090",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1090"
}
]
}

7
2019/10xxx/CVE-2019-10298.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10298",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1092"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1092",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1092"
}
]
}

7
2019/10xxx/CVE-2019-10299.json
View File

@ -1,7 +1,8 @@
{
"CVE_data_meta": {
"ID": "CVE-2019-10299",
"ASSIGNER": "jenkinsci-cert@googlegroups.com"
"ASSIGNER": "jenkinsci-cert@googlegroups.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -52,7 +53,9 @@
"references": {
"reference_data": [
{
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-960"
"url": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-960",
"refsource": "MISC",
"name": "https://jenkins.io/security/advisory/2019-04-03/#SECURITY-960"
}
]
}

67
2019/10xxx/CVE-2019-10856.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-10856",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4",
"refsource": "MISC",
"name": "https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4"
},
{
"url": "https://github.com/jupyter/notebook/compare/16cf97c...b8e30ea",
"refsource": "MISC",
"name": "https://github.com/jupyter/notebook/compare/16cf97c...b8e30ea"
}
]
}
}

4
2019/1xxx/CVE-2019-1827.json
View File

@ -37,7 +37,7 @@
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists because the Online Help web service of an affected device insufficiently validates user-supplied input. An attacker could exploit this vulnerability by persuading a user of the service to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected service or access sensitive browser-based information.This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22. "
"value": "A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists because the Online Help web service of an affected device insufficiently validates user-supplied input. An attacker could exploit this vulnerability by persuading a user of the service to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected service or access sensitive browser-based information.This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22."
}
]
},
@ -84,4 +84,4 @@
],
"discovery": "INTERNAL"
}
}
}

4
2019/1xxx/CVE-2019-1828.json
View File

@ -37,7 +37,7 @@
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to access administrative credentials. The vulnerability exists because affected devices use weak encryption algorithms for user credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack and decrypting intercepted credentials. A successful exploit could allow the attacker to gain access to an affected device with administrator privileges. This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22. "
"value": "A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to access administrative credentials. The vulnerability exists because affected devices use weak encryption algorithms for user credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack and decrypting intercepted credentials. A successful exploit could allow the attacker to gain access to an affected device with administrator privileges. This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22."
}
]
},
@ -84,4 +84,4 @@
],
"discovery": "INTERNAL"
}
}
}

5
2019/3xxx/CVE-2019-3886.json
View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-3886",
"ASSIGNER": "psampaio@redhat.com"
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -68,4 +69,4 @@
]
]
}
}
}

186
2019/7xxx/CVE-2019-7001.json
View File

@ -1,95 +1,95 @@
{
"CVE_data_meta": {
"ASSIGNER": "securityalerts@avaya.com",
"DATE_PUBLIC": "2019-04-04T00:00:00.000Z",
"ID": "CVE-2019-7001",
"STATE": "PUBLIC",
"TITLE": "Avaya IPOCC WebUI SQL Injection"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "IP Office Contact Center",
"version": {
"version_data": [
{
"affected": "=",
"version_name": "10.0.x",
"version_value": "10.x"
},
{
"affected": "<",
"version_name": "10.1.x",
"version_value": "10.1.2.2.2-11201.1908"
},
{
"affected": "=",
"version_name": "9.x",
"version_value": "9.x"
}
]
}
}
]
},
"vendor_name": "Avaya"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to 10.1.2.2.2-11201.1908. Unsupported versions not listed here were not evaluated."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
"CVE_data_meta": {
"ASSIGNER": "securityalerts@avaya.com",
"DATE_PUBLIC": "2019-04-04T00:00:00.000Z",
"ID": "CVE-2019-7001",
"STATE": "PUBLIC",
"TITLE": "Avaya IPOCC WebUI SQL Injection"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "IP Office Contact Center",
"version": {
"version_data": [
{
"affected": "=",
"version_name": "10.0.x",
"version_value": "10.x"
},
{
"affected": "<",
"version_name": "10.1.x",
"version_value": "10.1.2.2.2-11201.1908"
},
{
"affected": "=",
"version_name": "9.x",
"version_value": "9.x"
}
]
}
}
]
},
"vendor_name": "Avaya"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://downloads.avaya.com/css/P8/documents/101056762",
"refsource": "CONFIRM",
"url": "https://downloads.avaya.com/css/P8/documents/101056762"
}
]
},
"source": {
"advisory": "ASA-2019-058"
}
}
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A SQL injection vulnerability in the WebUI component of IP Office Contact Center could allow an authenticated attacker to retrieve or alter sensitive data related to other users on the system. Affected versions of IP Office Contact Center include all 9.x and 10.x versions prior to 10.1.2.2.2-11201.1908. Unsupported versions not listed here were not evaluated."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://downloads.avaya.com/css/P8/documents/101056762",
"refsource": "CONFIRM",
"url": "https://downloads.avaya.com/css/P8/documents/101056762"
}
]
},
"source": {
"advisory": "ASA-2019-058"
}
}