From dd9211b4b821be51ddcdcae0c7958064b28438a0 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 21 Nov 2018 11:05:22 -0500 Subject: [PATCH] - Synchronized data. --- 2018/19xxx/CVE-2018-19409.json | 72 ++++++++++++++++++++++++++++++++++ 2018/19xxx/CVE-2018-19410.json | 62 +++++++++++++++++++++++++++++ 2018/19xxx/CVE-2018-19411.json | 62 +++++++++++++++++++++++++++++ 2018/19xxx/CVE-2018-19412.json | 18 +++++++++ 4 files changed, 214 insertions(+) create mode 100644 2018/19xxx/CVE-2018-19409.json create mode 100644 2018/19xxx/CVE-2018-19410.json create mode 100644 2018/19xxx/CVE-2018-19411.json create mode 100644 2018/19xxx/CVE-2018-19412.json diff --git a/2018/19xxx/CVE-2018-19409.json b/2018/19xxx/CVE-2018-19409.json new file mode 100644 index 00000000000..5b95e8d6e30 --- /dev/null +++ b/2018/19xxx/CVE-2018-19409.json @@ -0,0 +1,72 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-19409", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://bugs.ghostscript.com/show_bug.cgi?id=700176", + "refsource" : "MISC", + "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=700176" + }, + { + "name" : "https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=661e8d8fb8248c38d67958beda32f3a5876d0c3f", + "refsource" : "MISC", + "url" : "https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=661e8d8fb8248c38d67958beda32f3a5876d0c3f" + }, + { + "name" : "https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26", + "refsource" : "MISC", + "url" : "https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26" + } + ] + } +} diff --git a/2018/19xxx/CVE-2018-19410.json b/2018/19xxx/CVE-2018-19410.json new file mode 100644 index 00000000000..6e62d37e923 --- /dev/null +++ b/2018/19xxx/CVE-2018-19410.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-19410", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator)." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-24/", + "refsource" : "MISC", + "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-24/" + } + ] + } +} diff --git a/2018/19xxx/CVE-2018-19411.json b/2018/19xxx/CVE-2018-19411.json new file mode 100644 index 00000000000..32ab33a8fe2 --- /dev/null +++ b/2018/19xxx/CVE-2018-19411.json @@ -0,0 +1,62 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-19411", + "STATE" : "PUBLIC" + }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "n/a", + "version" : { + "version_data" : [ + { + "version_value" : "n/a" + } + ] + } + } + ] + }, + "vendor_name" : "n/a" + } + ] + } + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights." + } + ] + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : "n/a" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "name" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-25/", + "refsource" : "MISC", + "url" : "https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-25/" + } + ] + } +} diff --git a/2018/19xxx/CVE-2018-19412.json b/2018/19xxx/CVE-2018-19412.json new file mode 100644 index 00000000000..27f3baa3065 --- /dev/null +++ b/2018/19xxx/CVE-2018-19412.json @@ -0,0 +1,18 @@ +{ + "CVE_data_meta" : { + "ASSIGNER" : "cve@mitre.org", + "ID" : "CVE-2018-19412", + "STATE" : "RESERVED" + }, + "data_format" : "MITRE", + "data_type" : "CVE", + "data_version" : "4.0", + "description" : { + "description_data" : [ + { + "lang" : "eng", + "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + } + ] + } +}