admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-08 11:37:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-05-27T20:00:25.280395+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-05-27 20:00:28 +00:00
parent ae77c2dd5d
commit 0583cefbf0
3 changed files with 41 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
CVE-2015/CVE-2015-201xx/CVE-2015-20108.json Normal file
View File

@ -0,0 +1,32 @@
{
"id": "CVE-2015-20108",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-27T19:15:09.043",
"lastModified": "2023-05-27T19:15:09.043",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/compare/v0.9.2...v1.0.0",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/SAML-Toolkits/ruby-saml/pull/225",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/OSVDB-124991.yml",
"source": "cve@mitre.org"
}
]
}

6
CVE-2023/CVE-2023-298xx/CVE-2023-29820.json
View File

@ -2,12 +2,12 @@
"id": "CVE-2023-29820",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-05-12T11:15:12.960",
"lastModified": "2023-05-23T20:50:48.400",
"vulnStatus": "Analyzed",
"lastModified": "2023-05-27T19:15:09.650",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer."
"value": "** DISPUTED ** An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819."
}
],
"metrics": {

11
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-05-27T18:00:24.424742+00:00
2023-05-27T20:00:25.280395+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-05-27T16:15:09.433000+00:00
2023-05-27T19:15:09.650000+00:00
```
### Last Data Feed Release
@ -29,20 +29,21 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
216158
216159
```
### CVEs added in the last Commit
Recently added CVEs: `1`
* [CVE-2023-32695](CVE-2023/CVE-2023-326xx/CVE-2023-32695.json) (`2023-05-27T16:15:09.433`)
* [CVE-2015-20108](CVE-2015/CVE-2015-201xx/CVE-2015-20108.json) (`2023-05-27T19:15:09.043`)
### CVEs modified in the last Commit
Recently modified CVEs: `0`
Recently modified CVEs: `1`
* [CVE-2023-29820](CVE-2023/CVE-2023-298xx/CVE-2023-29820.json) (`2023-05-27T19:15:09.650`)
## Download and Usage