diff --git a/2016/6xxx/CVE-2016-6555.json b/2016/6xxx/CVE-2016-6555.json index 120652f5f04..4f88065f878 100644 --- a/2016/6xxx/CVE-2016-6555.json +++ b/2016/6xxx/CVE-2016-6555.json @@ -1,9 +1,42 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "cve@rapid7.com", + "DATE_PUBLIC": "2016-09-14T18:18:00.000Z", "ID": "CVE-2016-6555", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "OpenNMS Stored XSS via SNMP Trap Alerts" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "OpenNMS", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "18.0.1", + "version_value": "18.0.1" + } + ] + } + } + ] + }, + "vendor_name": "OpenNMS" + } + ] + } + }, + "credit": [ + { + "lang": "eng", + "value": "This issue was discovered by Matthew Kienow and disclosure was coordinated by Rapid7." + } + ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", @@ -11,8 +44,56 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP trap supplied data. By creating a malicious SNMP trap, an attacker can store an XSS payload which will trigger when a user of the web UI views the events list page. This issue was fixed in version 18.0.2, released on September 20, 2016." } ] + }, + "generator": { + "engine": "Vulnogram 0.0.9" + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "version": "3.1" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Cross-site Scripting (XSS)" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/", + "refsource": "MISC", + "url": "https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/" + }, + { + "name": "https://github.com/OpenNMS/opennms/pull/1019", + "refsource": "MISC", + "url": "https://github.com/OpenNMS/opennms/pull/1019" + } + ] + }, + "source": { + "discovery": "UNKNOWN" } -} \ No newline at end of file +} diff --git a/2016/6xxx/CVE-2016-6556.json b/2016/6xxx/CVE-2016-6556.json index d2212dd21b3..955645d0943 100644 --- a/2016/6xxx/CVE-2016-6556.json +++ b/2016/6xxx/CVE-2016-6556.json @@ -1,9 +1,42 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "cve@rapid7.com", + "DATE_PUBLIC": "2016-09-14T18:18:00.000Z", "ID": "CVE-2016-6556", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "OpenNMS Stored XSS via SNMP Agent Data" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "OpenNMS", + "version": { + "version_data": [ + { + "version_affected": "<=", + "version_name": "18.0.1", + "version_value": "18.0.1" + } + ] + } + } + ] + }, + "vendor_name": "OpenNMS" + } + ] + } + }, + "credit": [ + { + "lang": "eng", + "value": "This issue was discovered by Matthew Kienow and disclosure was coordinated by Rapid7." + } + ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", @@ -11,8 +44,56 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "OpenNMS version 18.0.1 and prior are vulnerable to a stored XSS issue due to insufficient filtering of SNMP agent supplied data. By creating a malicious SNMP 'sysName' or 'sysContact' response, an attacker can store an XSS payload which will trigger when a user of the web UI views the data. This issue was fixed in version 18.0.2, released on September 20, 2016." } ] + }, + "generator": { + "engine": "Vulnogram 0.0.9" + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "version": "3.1" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Cross-site Scripting (XSS)" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/", + "refsource": "MISC", + "url": "https://www.rapid7.com/blog/post/2016/11/15/r7-2016-24-opennms-stored-xss-via-snmp-cve-2016-6555-cve-2016-6556/" + }, + { + "name": "https://github.com/OpenNMS/opennms/pull/1019", + "refsource": "MISC", + "url": "https://github.com/OpenNMS/opennms/pull/1019" + } + ] + }, + "source": { + "discovery": "UNKNOWN" } -} \ No newline at end of file +} diff --git a/2019/9xxx/CVE-2019-9564.json b/2019/9xxx/CVE-2019-9564.json index 1a862dd9b67..13d969005bf 100644 --- a/2019/9xxx/CVE-2019-9564.json +++ b/2019/9xxx/CVE-2019-9564.json @@ -1,9 +1,63 @@ { "CVE_data_meta": { - "ASSIGNER": "cve@mitre.org", + "ASSIGNER": "cve-requests@bitdefender.com", + "DATE_PUBLIC": "2022-03-29T12:38:00.000Z", "ID": "CVE-2019-9564", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "Authentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v3" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "Cam Pan v2", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "4.49.1.47" + } + ] + } + }, + { + "product_name": "Cam v2", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "4.9.8.1002" + } + ] + } + }, + { + "product_name": "Cam v3", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "4.36.8.32" + } + ] + } + } + ] + }, + "vendor_name": "Wyze" + } + ] + } + }, + "credit": [ + { + "lang": "eng", + "value": "Bitdefender Labs" + } + ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", @@ -11,8 +65,57 @@ "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "A vulnerability in the authentication logic of Wyze Cam Pan v2, Cam v2, Cam v3 allows an attacker to bypass login and control the devices. This issue affects: Wyze Cam Pan v2 versions prior to 4.49.1.47. Wyze Cam v2 versions prior to 4.9.8.1002. Wyze Cam v3 versions prior to 4.36.8.32." } ] + }, + "generator": { + "engine": "Vulnogram 0.0.9" + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "NONE", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "version": "3.1" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "authenti" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "url": "https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/", + "name": "https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-wyze-cam-iot-device/" + } + ] + }, + "solution": [ + { + "lang": "eng", + "value": "An update to the following firmware versions fixes the issue:\n\nWyze Cam Pan v2 firmware version 4.49.1.47.\nWyze Cam v2 firmware version 4.9.8.1002.\nWyze Cam v3 firmware version 4.36.8.32." + } + ], + "source": { + "discovery": "EXTERNAL" } -} \ No newline at end of file +} diff --git a/2022/1xxx/CVE-2022-1726.json b/2022/1xxx/CVE-2022-1726.json index 8cbe16523d0..a33db2ab937 100644 --- a/2022/1xxx/CVE-2022-1726.json +++ b/2022/1xxx/CVE-2022-1726.json @@ -1,18 +1,89 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { + "ASSIGNER": "security@huntr.dev", "ID": "CVE-2022-1726", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-table" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "wenzhixin/bootstrap-table", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "1.20.2" + } + ] + } + } + ] + }, + "vendor_name": "wenzhixin" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties." } ] + }, + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "LOW", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "privilegesRequired": "LOW", + "scope": "UNCHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L", + "version": "3.0" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea", + "refsource": "CONFIRM", + "url": "https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea" + }, + { + "name": "https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9", + "refsource": "MISC", + "url": "https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9" + } + ] + }, + "source": { + "advisory": "9b85cc33-0395-4c31-8a42-3a94beb2efea", + "discovery": "EXTERNAL" } -} \ No newline at end of file +} diff --git a/2022/1xxx/CVE-2022-1728.json b/2022/1xxx/CVE-2022-1728.json index b5b27a251dd..f2205785444 100644 --- a/2022/1xxx/CVE-2022-1728.json +++ b/2022/1xxx/CVE-2022-1728.json @@ -1,18 +1,89 @@ { - "data_type": "CVE", - "data_format": "MITRE", - "data_version": "4.0", "CVE_data_meta": { + "ASSIGNER": "security@huntr.dev", "ID": "CVE-2022-1728", - "ASSIGNER": "cve@mitre.org", - "STATE": "RESERVED" + "STATE": "PUBLIC", + "TITLE": "Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk" }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "polonel/trudesk", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_value": "1.2.2" + } + ] + } + } + ] + }, + "vendor_name": "polonel" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", - "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value": "Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications." } ] + }, + "impact": { + "cvss": { + "attackComplexity": "HIGH", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "HIGH", + "scope": "CHANGED", + "userInteraction": "REQUIRED", + "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", + "version": "3.0" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "CWE-190 Integer Overflow or Wraparound" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "name": "https://huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519", + "refsource": "CONFIRM", + "url": "https://huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519" + }, + { + "name": "https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19", + "refsource": "MISC", + "url": "https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19" + } + ] + }, + "source": { + "advisory": "3c6cb129-6995-4722-81b5-af052572b519", + "discovery": "EXTERNAL" } -} \ No newline at end of file +}