admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2020-03-18 22:01:22 +00:00
parent ed6213539c
commit e9b0740db2
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
12 changed files with 381 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2019/16xxx/CVE-2019-16884.json
View File

@ -106,6 +106,11 @@
"refsource": "GENTOO",
"name": "GLSA-202003-21",
"url": "https://security.gentoo.org/glsa/202003-21"
},
{
"refsource": "UBUNTU",
"name": "USN-4297-1",
"url": "https://usn.ubuntu.com/4297-1/"
}
]
}

5
2019/17xxx/CVE-2019-17361.json
View File

@ -61,6 +61,11 @@
"refsource": "CONFIRM",
"name": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix",
"url": "https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html#security-fix"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2020:0357",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html"
}
]
}

5
2019/18xxx/CVE-2019-18897.json
View File

@ -116,6 +116,11 @@
"name": "https://bugzilla.suse.com/show_bug.cgi?id=1157465",
"refsource": "CONFIRM",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=1157465"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2020:0357",
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html"
}
]
},

56
2019/19xxx/CVE-2019-19676.json
View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-19676",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2019-19676",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html",
"url": "https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html"
}
]
}

5
2019/19xxx/CVE-2019-19921.json
View File

@ -91,6 +91,11 @@
"refsource": "GENTOO",
"name": "GLSA-202003-21",
"url": "https://security.gentoo.org/glsa/202003-21"
},
{
"refsource": "UBUNTU",
"name": "USN-4297-1",
"url": "https://usn.ubuntu.com/4297-1/"
}
]
}

56
2020/10xxx/CVE-2020-10365.json
View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-10365",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-10365",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities",
"url": "https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities"
}
]
}

67
2020/10xxx/CVE-2020-10672.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-10672",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062",
"refsource": "MISC",
"name": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"
},
{
"url": "https://github.com/FasterXML/jackson-databind/issues/2659",
"refsource": "MISC",
"name": "https://github.com/FasterXML/jackson-databind/issues/2659"
}
]
}
}

67
2020/10xxx/CVE-2020-10673.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-10673",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062",
"refsource": "MISC",
"name": "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062"
},
{
"url": "https://github.com/FasterXML/jackson-databind/issues/2660",
"refsource": "MISC",
"name": "https://github.com/FasterXML/jackson-databind/issues/2660"
}
]
}
}

67
2020/10xxx/CVE-2020-10674.json Normal file
View File

@ -0,0 +1,67 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-10674",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://rt.cpan.org/Public/Bug/Display.html?id=132173",
"refsource": "MISC",
"name": "https://rt.cpan.org/Public/Bug/Display.html?id=132173"
},
{
"url": "https://metacpan.org/source/JKAMPHAUS/PerlSpeak-2.01/Changes",
"refsource": "MISC",
"name": "https://metacpan.org/source/JKAMPHAUS/PerlSpeak-2.01/Changes"
}
]
}
}

9
2020/7xxx/CVE-2020-7256.json
View File

@ -36,7 +36,7 @@
"description_data": [
{
"lang": "eng",
"value": "Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.\n"
"value": "Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors."
}
]
},
@ -74,8 +74,9 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310"
"refsource": "MISC",
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310",
"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310"
}
]
},
@ -83,4 +84,4 @@
"advisory": "SB10310",
"discovery": "EXTERNAL"
}
}
}

9
2020/7xxx/CVE-2020-7258.json
View File

@ -36,7 +36,7 @@
"description_data": [
{
"lang": "eng",
"value": "Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.\n"
"value": "Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors."
}
]
},
@ -74,8 +74,9 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310"
"refsource": "MISC",
"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310",
"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10310"
}
]
},
@ -83,4 +84,4 @@
"advisory": "SB10310",
"discovery": "EXTERNAL"
}
}
}

56
2020/9xxx/CVE-2020-9423.json
View File

@ -1,17 +1,61 @@
{
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-9423",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ID": "CVE-2020-9423",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users, applying tags, etc. This functionality could be abused by an unauthenticated attacker to upload an arbitrary file in a restricted folder. This would lead to the executions of malicious commands with root privileges."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities",
"url": "https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities"
}
]
}