admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 19:47:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-05-27T20:00:25.280395+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-05-27 20:00:28 +00:00
parent ae77c2dd5d
commit 0583cefbf0
3 changed files with 41 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
CVE-2015/CVE-2015-201xx/CVE-2015-20108.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2015-20108",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-27T19:15:09.043",
"lastModified": "2023-05-27T19:15:09.043",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/compare/v0.9.2...v1.0.0",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/pull/225",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/OSVDB-124991.yml",
"source": "cve@mitre.org"
}
]
}

6
CVE-2023/CVE-2023-298xx/CVE-2023-29820.json
View File

@ -2,12 +2,12 @@
"id": "CVE-2023-29820", "id": "CVE-2023-29820",
"sourceIdentifier": "cve@mitre.org", "sourceIdentifier": "cve@mitre.org",
"published": "2023-05-12T11:15:12.960", "published": "2023-05-12T11:15:12.960",
"lastModified": "2023-05-23T20:50:48.400", "lastModified": "2023-05-27T19:15:09.650",
"vulnStatus": "Analyzed", "vulnStatus": "Modified",
"descriptions": [ "descriptions": [
{ {
"lang": "en", "lang": "en",
"value": "An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer." "value": "** DISPUTED ** An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819."
} }
], ],
"metrics": { "metrics": {

11
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update ### Last Repository Update
```plain ```plain
2023-05-27T18:00:24.424742+00:00 2023-05-27T20:00:25.280395+00:00
``` ```
### Most recent CVE Modification Timestamp synchronized with NVD ### Most recent CVE Modification Timestamp synchronized with NVD
```plain ```plain
2023-05-27T16:15:09.433000+00:00 2023-05-27T19:15:09.650000+00:00
``` ```
### Last Data Feed Release ### Last Data Feed Release
@ -29,20 +29,21 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs ### Total Number of included CVEs
```plain ```plain
216158 216159
``` ```
### CVEs added in the last Commit ### CVEs added in the last Commit
Recently added CVEs: `1` Recently added CVEs: `1`
* [CVE-2023-32695](CVE-2023/CVE-2023-326xx/CVE-2023-32695.json) (`2023-05-27T16:15:09.433`) * [CVE-2015-20108](CVE-2015/CVE-2015-201xx/CVE-2015-20108.json) (`2023-05-27T19:15:09.043`)
### CVEs modified in the last Commit ### CVEs modified in the last Commit
Recently modified CVEs: `0` Recently modified CVEs: `1`
* [CVE-2023-29820](CVE-2023/CVE-2023-298xx/CVE-2023-29820.json) (`2023-05-27T19:15:09.650`)
## Download and Usage ## Download and Usage