admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-19 17:32:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-04-14 14:01:14 +00:00
parent 54e0bcdb21
commit d9497d381f
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
7 changed files with 119 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2020/11xxx/CVE-2020-11739.json
View File

@ -56,6 +56,11 @@
"url": "https://xenbits.xen.org/xsa/advisory-314.html",
"refsource": "MISC",
"name": "https://xenbits.xen.org/xsa/advisory-314.html"
},
{
"refsource": "CONFIRM",
"name": "http://xenbits.xen.org/xsa/advisory-314.html",
"url": "http://xenbits.xen.org/xsa/advisory-314.html"
}
]
}

5
2020/11xxx/CVE-2020-11740.json
View File

@ -56,6 +56,11 @@
"url": "https://xenbits.xen.org/xsa/advisory-313.html",
"refsource": "MISC",
"name": "https://xenbits.xen.org/xsa/advisory-313.html"
},
{
"refsource": "CONFIRM",
"name": "http://xenbits.xen.org/xsa/advisory-313.html",
"url": "http://xenbits.xen.org/xsa/advisory-313.html"
}
]
}

5
2020/11xxx/CVE-2020-11741.json
View File

@ -56,6 +56,11 @@
"url": "https://xenbits.xen.org/xsa/advisory-313.html",
"refsource": "MISC",
"name": "https://xenbits.xen.org/xsa/advisory-313.html"
},
{
"refsource": "CONFIRM",
"name": "http://xenbits.xen.org/xsa/advisory-313.html",
"url": "http://xenbits.xen.org/xsa/advisory-313.html"
}
]
}

5
2020/11xxx/CVE-2020-11742.json
View File

@ -56,6 +56,11 @@
"url": "https://xenbits.xen.org/xsa/advisory-318.html",
"refsource": "MISC",
"name": "https://xenbits.xen.org/xsa/advisory-318.html"
},
{
"refsource": "CONFIRM",
"name": "http://xenbits.xen.org/xsa/advisory-318.html",
"url": "http://xenbits.xen.org/xsa/advisory-318.html"
}
]
}

5
2020/11xxx/CVE-2020-11743.json
View File

@ -56,6 +56,11 @@
"url": "https://xenbits.xen.org/xsa/advisory-316.html",
"refsource": "MISC",
"name": "https://xenbits.xen.org/xsa/advisory-316.html"
},
{
"refsource": "CONFIRM",
"name": "http://xenbits.xen.org/xsa/advisory-316.html",
"url": "http://xenbits.xen.org/xsa/advisory-316.html"
}
]
}

50
2020/5xxx/CVE-2020-5738.json
View File

@ -4,14 +4,58 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5738",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "vulnreport@tenable.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Grandstream GXP1600 Series",
"version": {
"version_data": [
{
"version_value": "1.0.4.152 and below"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-59"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://www.tenable.com/security/research/tra-2020-22",
"url": "https://www.tenable.com/security/research/tra-2020-22"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker uploads a specially crafted tar file to the HTTP /cgi-bin/upload_vpntar interface."
}
]
}

50
2020/5xxx/CVE-2020-5739.json
View File

@ -4,14 +4,58 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-5739",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "vulnreport@tenable.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "Grandstream GXP1600 Series",
"version": {
"version_data": [
{
"version_value": "1.0.4.152 and below"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-94"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://www.tenable.com/security/research/tra-2020-22",
"url": "https://www.tenable.com/security/research/tra-2020-22"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the \"Additional Settings\" field in the web interface. When the VPN's connection is established, the user defined script is executed with root privileges."
}
]
}