admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-06-12 17:00:54 +00:00
parent dd9affc456
commit cca9753003
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
20 changed files with 484 additions and 416 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2017/15xxx/CVE-2017-15010.json
View File

@ -91,6 +91,11 @@
"name": "https://snyk.io/vuln/npm:tough-cookie:20170905",
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/npm:tough-cookie:20170905"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-76f1b57c1c",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT/"
}
]
}

5
2017/7xxx/CVE-2017-7675.json
View File

@ -115,6 +115,11 @@
"refsource": "MLIST",
"name": "[tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/",
"url": "https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E"
},
{
"refsource": "MLIST",
"name": "[tomcat-dev] 20190612 [Bug 61120] Tomcat 8.5.15 with HTTP/2: URL path parameters lost",
"url": "https://lists.apache.org/thread.html/5f8ab8a02f3610bd56ea2b0d69af25cbde451d79c46276c350e05a15@%3Cdev.tomcat.apache.org%3E"
}
]
}

5
2018/10xxx/CVE-2018-10237.json
View File

@ -141,6 +141,11 @@
"refsource": "MLIST",
"name": "[activemq-gitbox] 20190530 [GitHub] [activemq-artemis] brusdev opened a new pull request #2687: ARTEMIS-2359 Upgrade to Guava 24.1",
"url": "https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E"
},
{
"refsource": "MLIST",
"name": "[cassandra-commits] 20190612 [jira] [Assigned] (CASSANDRA-14760) CVE-2018-10237 Security vulnerability in 3.11.3",
"url": "https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E"
}
]
}

5
2019/0xxx/CVE-2019-0201.json
View File

@ -81,6 +81,11 @@
"refsource": "DEBIAN",
"name": "DSA-4461",
"url": "https://www.debian.org/security/2019/dsa-4461"
},
{
"refsource": "BUGTRAQ",
"name": "20190612 [SECURITY] [DSA 4461-1] zookeeper security update",
"url": "https://seclists.org/bugtraq/2019/Jun/13"
}
]
},

2
2019/0xxx/CVE-2019-0304.json
View File

@ -185,4 +185,4 @@
}
]
}
}
}

2
2019/0xxx/CVE-2019-0305.json
View File

@ -85,4 +85,4 @@
}
]
}
}
}

2
2019/0xxx/CVE-2019-0306.json
View File

@ -65,4 +65,4 @@
}
]
}
}
}

2
2019/0xxx/CVE-2019-0307.json
View File

@ -65,4 +65,4 @@
}
]
}
}
}

2
2019/0xxx/CVE-2019-0308.json
View File

@ -81,4 +81,4 @@
}
]
}
}
}

185
2019/0xxx/CVE-2019-0311.json
View File

@ -1,93 +1,96 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0311",
"ASSIGNER": "cna@sap.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP R/3 Enterprise Application",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "6.0"
},
{
"version_name": "<",
"version_value": "6.02"
},
{
"version_name": "<",
"version_value": "6.03"
},
{
"version_name": "<",
"version_value": "6.04"
},
{
"version_name": "<",
"version_value": "6.05"
},
{
"version_name": "<",
"version_value": "6.06"
},
{
"version_name": "<",
"version_value": "6.16"
},
{
"version_name": "<",
"version_value": "6.17"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability."
}
]
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang": "eng",
"value":"Cross-Site Scripting"
}
]
}
]
},
"references":{
"reference_data":[
{
"url":"https://launchpad.support.sap.com/#/notes/2728153"
},
{
"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0311",
"ASSIGNER": "cna@sap.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP R/3 Enterprise Application",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "6.0"
},
{
"version_name": "<",
"version_value": "6.02"
},
{
"version_name": "<",
"version_value": "6.03"
},
{
"version_name": "<",
"version_value": "6.04"
},
{
"version_name": "<",
"version_value": "6.05"
},
{
"version_name": "<",
"version_value": "6.06"
},
{
"version_name": "<",
"version_value": "6.16"
},
{
"version_name": "<",
"version_value": "6.17"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not sufficiently encode user-controlled inputs, this makes it possible for an attacker to send unwanted scripts to the browser of the victim using unwanted input and execute malicious code there, resulting in Cross-Site Scripting (XSS) vulnerability."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://launchpad.support.sap.com/#/notes/2728153",
"refsource": "MISC",
"name": "https://launchpad.support.sap.com/#/notes/2728153"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242",
"refsource": "MISC",
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
}

222
2019/0xxx/CVE-2019-0312.json
View File

@ -1,111 +1,115 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0312",
"ASSIGNER": "cna@sap.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIESR)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
}, {
"product_name": "SAP NetWeaver Process Integration(SAP_XITOOL)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings."
}
]
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang": "eng",
"value":"Information Disclosure"
}
]
}
]
},
"references":{
"reference_data":[
{
"url":"https://launchpad.support.sap.com/#/notes/2744086"
},
{
"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0312",
"ASSIGNER": "cna@sap.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIESR)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
},
{
"product_name": "SAP NetWeaver Process Integration(SAP_XITOOL)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 and SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50) are not password protected. An attacker could access landscape information like host names, ports or other technical data in the absence of restrictive firewall and port settings."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://launchpad.support.sap.com/#/notes/2744086",
"refsource": "MISC",
"name": "https://launchpad.support.sap.com/#/notes/2744086"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242",
"refsource": "MISC",
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
}

167
2019/0xxx/CVE-2019-0314.json
View File

@ -1,84 +1,87 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0314",
"ASSIGNER": "cna@sap.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP Work Manager",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "6.3"
},
{
"version_name": "<",
"version_value": "6.4"
},
{
"version_name": "<",
"version_value": "6.5"
}
]
}
},
{
"product_name": "SAP Inventory Manager",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "4.3"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
}
]
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang": "eng",
"value":"Denial of Service"
}
]
}
]
},
"references":{
"reference_data":[
{
"url":"https://launchpad.support.sap.com/#/notes/2793805"
},
{
"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0314",
"ASSIGNER": "cna@sap.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP Work Manager",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "6.3"
},
{
"version_name": "<",
"version_value": "6.4"
},
{
"version_name": "<",
"version_value": "6.5"
}
]
}
},
{
"product_name": "SAP Inventory Manager",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "4.3"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://launchpad.support.sap.com/#/notes/2793805",
"refsource": "MISC",
"name": "https://launchpad.support.sap.com/#/notes/2793805"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242",
"refsource": "MISC",
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
}

261
2019/0xxx/CVE-2019-0315.json
View File

@ -1,131 +1,134 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0315",
"ASSIGNER": "cna@sap.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIESR)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
},
{
"product_name": "SAP NetWeaver Process Integration(SAP_XITOOL)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
},
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIPCK)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure."
}
]
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang": "eng",
"value":"Information Disclosure"
}
]
}
]
},
"references":{
"reference_data":[
{
"url":"https://launchpad.support.sap.com/#/notes/2755438"
},
{
"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-0315",
"ASSIGNER": "cna@sap.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "SAP SE",
"product": {
"product_data": [
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIESR)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
},
{
"product_name": "SAP NetWeaver Process Integration(SAP_XITOOL)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.30"
},
{
"version_name": "<",
"version_value": "7.31"
},
{
"version_name": "<",
"version_value": "7.40"
},
{
"version_name": "<",
"version_value": "7.50"
}
]
}
},
{
"product_name": "SAP NetWeaver Process Integration(SAP_XIPCK)",
"version": {
"version_data": [
{
"version_name": "<",
"version_value": "7.10 to 7.11"
},
{
"version_name": "<",
"version_value": "7.20"
},
{
"version_name": "<",
"version_value": "7.30"
}
]
}
}
]
}
}
]
}
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, SAP_XITOOL: 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50 and SAP_XIPCK 7.10 to 7.11, 7.20, 7.30) allows an attacker to access passwords used in FTP channels leading to information disclosure."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://launchpad.support.sap.com/#/notes/2755438",
"refsource": "MISC",
"name": "https://launchpad.support.sap.com/#/notes/2755438"
},
{
"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242",
"refsource": "MISC",
"name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242"
}
]
}
}

5
2019/11xxx/CVE-2019-11236.json
View File

@ -61,6 +61,11 @@
"refsource": "UBUNTU",
"name": "USN-3990-1",
"url": "https://usn.ubuntu.com/3990-1/"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-20bc611b61",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TBI45HO533KYHNB5YRO43TBYKA3E3VRL/"
}
]
}

5
2019/11xxx/CVE-2019-11358.json
View File

@ -206,6 +206,11 @@
"refsource": "DEBIAN",
"name": "DSA-4460",
"url": "https://www.debian.org/security/2019/dsa-4460"
},
{
"refsource": "BUGTRAQ",
"name": "20190612 [SECURITY] [DSA 4460-1] mediawiki security update",
"url": "https://seclists.org/bugtraq/2019/Jun/12"
}
]
}

5
2019/12xxx/CVE-2019-12308.json
View File

@ -96,6 +96,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20190605 [SECURITY] [DLA 1814-1] python-django security update",
"url": "https://lists.debian.org/debian-lts-announce/2019/06/msg00001.html"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-57a4324120",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/USYRARSYB7PE3S2ZQO7PZNWMH7RPGL5G/"
}
]
}

5
2019/12xxx/CVE-2019-12456.json
View File

@ -61,6 +61,11 @@
"url": "https://lkml.org/lkml/2019/5/29/1164",
"refsource": "MISC",
"name": "https://lkml.org/lkml/2019/5/29/1164"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-c03eda3cc6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDURACJVGIBIYBSGDZJTRDPX46H5WPZW/"
}
]
}

5
2019/12xxx/CVE-2019-12614.json
View File

@ -66,6 +66,11 @@
"refsource": "BID",
"name": "108550",
"url": "http://www.securityfocus.com/bid/108550"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-c03eda3cc6",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDURACJVGIBIYBSGDZJTRDPX46H5WPZW/"
}
]
}

5
2019/12xxx/CVE-2019-12749.json
View File

@ -66,6 +66,11 @@
"refsource": "UBUNTU",
"name": "USN-4015-1",
"url": "https://usn.ubuntu.com/4015-1/"
},
{
"refsource": "UBUNTU",
"name": "USN-4015-2",
"url": "https://usn.ubuntu.com/4015-2/"
}
]
}

5
2019/9xxx/CVE-2019-9946.json
View File

@ -66,6 +66,11 @@
"refsource": "REDHAT",
"name": "RHBA-2019:0862",
"url": "https://access.redhat.com/errata/RHBA-2019:0862"
},
{
"refsource": "FEDORA",
"name": "FEDORA-2019-d2b57d3b19",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCN66VYB3XS76SYH567SO7N3I254JOCT/"
}
]
}