"-Synchronized-Data."

2018/7xxx/CVE-2018-7580.json

@@ -56,6 +56,11 @@
                 "refsource": "MISC",
                 "name": "https://www.iliashn.com/CVE-2018-7580/",
                 "url": "https://www.iliashn.com/CVE-2018-7580/"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 [CVE-2018-7580] - Philips Hue Denial of Service",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/51"
             }
         ]
     }

2020/28xxx/CVE-2020-28241.json

@@ -76,6 +76,16 @@
                 "refsource": "GENTOO",
                 "name": "GLSA-202011-15",
                 "url": "https://security.gentoo.org/glsa/202011-15"
+            },
+            {
+                "refsource": "FEDORA",
+                "name": "FEDORA-2020-1fb1785fa1",
+                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ELTOHZBPO6XVUVADP4DPZBNQCPTYOQBV/"
+            },
+            {
+                "refsource": "FEDORA",
+                "name": "FEDORA-2020-8a8f8b244f",
+                "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WUK4UCOB5FJVK36E22IRLEYGKMUWGBG/"
             }
         ]
     }

2020/29xxx/CVE-2020-29550.json

@@ -61,6 +61,11 @@
                 "refsource": "MISC",
                 "name": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-042.txt",
                 "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-042.txt"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 SYSS-2020-042 Urve - Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/49"
             }
         ]
     }

2020/29xxx/CVE-2020-29551.json

@@ -61,6 +61,11 @@
                 "refsource": "MISC",
                 "name": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-041.txt",
                 "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-041.txt"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 SYSS-2020-041 Urve - Missing Authorization (CWE-862)",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/48"
             }
         ]
     }

2020/29xxx/CVE-2020-29552.json

@@ -61,6 +61,11 @@
                 "refsource": "MISC",
                 "name": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-040.txt",
                 "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-040.txt"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 SYSS-2020-040 Urve - Missing Authentication for Critical Function (CWE-306)",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/47"
             }
         ]
     }

2020/35xxx/CVE-2020-35388.json

@@ -1,17 +1,61 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
-        "ID": "CVE-2020-35388",
         "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ID": "CVE-2020-35388",
+        "STATE": "PUBLIC"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "n/a",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "n/a"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "n/a"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true."
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "n/a"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://github.com/xuechengen/xinhu-oa/blob/main/README.md",
+                "refsource": "MISC",
+                "name": "https://github.com/xuechengen/xinhu-oa/blob/main/README.md"
             }
         ]
     }

2020/8xxx/CVE-2020-8150.json

@@ -53,6 +53,11 @@
                 "refsource": "MISC",
                 "name": "https://nextcloud.com/security/advisory/?id=NC-SA-2020-039",
                 "url": "https://nextcloud.com/security/advisory/?id=NC-SA-2020-039"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 Re: [FD] CVE-2020-8150 - Remote Code Execution as SYSTEM/root via Backblaze",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/55"
             }
         ]
     },

2020/8xxx/CVE-2020-8152.json

@@ -53,6 +53,11 @@
                 "refsource": "MISC",
                 "name": "https://nextcloud.com/security/advisory/?id=NC-SA-2020-040",
                 "url": "https://nextcloud.com/security/advisory/?id=NC-SA-2020-040"
+            },
+            {
+                "refsource": "FULLDISC",
+                "name": "20201225 Re: [FD] CVE-2020-8152 - Elevation of Privilege in Backblaze",
+                "url": "http://seclists.org/fulldisclosure/2020/Dec/54"
             }
         ]
     },