capture all references, etc from previous overrides

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 22, 2024 · 660a919 · 660a919
1 parent e1fda56
commit 660a919
Show file tree

Hide file tree

Showing 1,872 changed files with 8,952 additions and 3,218 deletions.
diff --git a/data/anchore/2014/CVE-2014-125110.json b/data/anchore/2014/CVE-2014-125110.json
@@ -2,39 +2,37 @@
   "additionalMetadata": {
     "cveId": "CVE-2014-125110",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
-    "triageNotes": {
-      "references": [
-        "https://vuldb.com/?ctiid.258781",
-        "https://github.com/wp-plugins/wp-file-upload/releases/tag/2.4.4",
-        "https://vuldb.com/?id.258781",
-        "https://github.com/wp-plugins/wp-file-upload/commit/c846327df030a0a97da036a2f07c769ab9284ddb",
-        "https://www.wordfence.com/threat-intel/vulnerabilities/id/a85eec18-49cc-44c0-ac86-ccc192a621a0?source=cve"
-      ]
-    }
+    "references": [
+      "https://github.com/wp-plugins/wp-file-upload/commit/c846327df030a0a97da036a2f07c769ab9284ddb",
+      "https://github.com/wp-plugins/wp-file-upload/releases/tag/2.4.4",
+      "https://vuldb.com/?ctiid.258781",
+      "https://vuldb.com/?id.258781",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/a85eec18-49cc-44c0-ac86-ccc192a621a0?source=cve"
+    ]
   },
   "adp": {
-    "providerMetadata": {
-      "orgId": "00000000-0000-4000-8000-000000000000",
-      "shortName": "anchoreadp"
-    },
     "affected": [
       {
         "collectionURL": "https://wordpress.org/plugins",
-        "packageName": "wp-file-upload",
-        "repo": "https://plugins.svn.wordpress.org/wp-file-upload",
         "cpes": [
           "cpe:2.3:a:iptanus:wordpress_file_upload:*:*:*:*:*:wordpress:*:*"
         ],
+        "packageName": "wp-file-upload",
+        "repo": "https://plugins.svn.wordpress.org/wp-file-upload",
         "versions": [
           {
-            "version": "0",
             "lessThan": "2.4.4",
             "status": "affected",
+            "version": "0",
             "versionType": "semver"
           }
         ]
       }
     ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    },
     "references": [
       {
         "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a85eec18-49cc-44c0-ac86-ccc192a621a0?source=cve"

diff --git a/data/anchore/2014/CVE-2014-125111.json b/data/anchore/2014/CVE-2014-125111.json
@@ -4,8 +4,8 @@
     "cveId": "CVE-2014-125111",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://vuldb.com/?ctiid.259628",
       "https://github.com/wp-plugins/wp-insert/commit/a07b7b08084b9b85859f3968ce7fde0fd1fcbba3",
+      "https://vuldb.com/?ctiid.259628",
       "https://vuldb.com/?id.259628"
     ]
   },

diff --git a/data/anchore/2015/CVE-2015-10130.json b/data/anchore/2015/CVE-2015-10130.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "wordfence",
     "cveId": "CVE-2015-10130",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=1269993%40circle-image-slider-with-lightbox&new=1269993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/b6a54470-fc66-43c5-a523-ddbefd47ee1f?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2020/CVE-2020-13597.json b/data/anchore/2020/CVE-2020-13597.json
@@ -91,17 +91,17 @@
         ]
       }
     ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    },
     "references": [
       {
         "url": "https://www.tigera.io/security-bulletins-tta-2020-001"
       },
       {
         "url": "https://github.com/advisories/GHSA-pf59-j7c2-rh6x"
       }
-    ],
-    "providerMetadata": {
-      "orgId": "00000000-0000-4000-8000-000000000000",
-      "shortName": "anchoreadp"
-    }
+    ]
   }
 }
diff --git a/data/anchore/2021/CVE-2021-28656.json b/data/anchore/2021/CVE-2021-28656.json
@@ -12,10 +12,10 @@
     "affected": [
       {
         "collectionURL": "https://repo.maven.apache.org/maven2",
-        "packageName": "org.apache.zeppelin:zeppelin-web",
         "cpes": [
           "cpe:2.3:a:org.apache.zeppelin:zeppelin-web:*:*:*:*:*:*:*:*"
         ],
+        "packageName": "org.apache.zeppelin:zeppelin-web",
         "product": "Apache Zeppelin",
         "vendor": "Apache Software Foundation",
         "versions": [

diff --git a/data/anchore/2022/CVE-2022-24805.json b/data/anchore/2022/CVE-2022-24805.json
@@ -4,14 +4,14 @@
     "cveId": "CVE-2022-24805",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
-      "https://www.debian.org/security/2022/dsa-5209",
+      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2105238",
+      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
       "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
-      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
+      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
       "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
-      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
-      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html"
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-24806.json b/data/anchore/2022/CVE-2022-24806.json
@@ -4,12 +4,12 @@
     "cveId": "CVE-2022-24806",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
-      "https://www.debian.org/security/2022/dsa-5209",
-      "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
+      "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
+      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
       "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
-      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html"
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-24807.json b/data/anchore/2022/CVE-2022-24807.json
@@ -4,14 +4,14 @@
     "cveId": "CVE-2022-24807",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
+      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2105239",
-      "https://www.debian.org/security/2022/dsa-5209",
+      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
       "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
-      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
+      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
       "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
-      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
-      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html"
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-24808.json b/data/anchore/2022/CVE-2022-24808.json
@@ -4,14 +4,14 @@
     "cveId": "CVE-2022-24808",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
+      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2105240",
-      "https://www.debian.org/security/2022/dsa-5209",
+      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
       "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
-      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
+      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
       "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
-      "https://github.com/net-snmp/net-snmp/commit/67ebb43e9038b2dae6e74ae8838b36fcc10fc937",
-      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html"
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-24809.json b/data/anchore/2022/CVE-2022-24809.json
@@ -4,13 +4,13 @@
     "cveId": "CVE-2022-24809",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
-      "https://www.debian.org/security/2022/dsa-5209",
-      "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
-      "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
+      "https://bugzilla.redhat.com/show_bug.cgi?id=2105242",
+      "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
       "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
-      "https://bugzilla.redhat.com/show_bug.cgi?id=2105242"
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-24810.json b/data/anchore/2022/CVE-2022-24810.json
@@ -4,13 +4,13 @@
     "cveId": "CVE-2022-24810",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://security.gentoo.org/glsa/202210-29",
+      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
       "https://bugzilla.redhat.com/show_bug.cgi?id=2105241",
-      "https://www.debian.org/security/2022/dsa-5209",
       "https://github.com/net-snmp/net-snmp/commit/ce66eb97c17aa9a48bc079be7b65895266fa6775",
-      "https://bugzilla.redhat.com/show_bug.cgi?id=2103225",
+      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html",
       "https://lists.fedoraproject.org/archives/list/[email protected]/message/FX75KKGMO5XMV6JMQZF6KOG3JPFNQBY7/",
-      "https://lists.debian.org/debian-lts-announce/2022/08/msg00020.html"
+      "https://security.gentoo.org/glsa/202210-29",
+      "https://www.debian.org/security/2022/dsa-5209"
     ]
   },
   "adp": {

diff --git a/data/anchore/2022/CVE-2022-34321.json b/data/anchore/2022/CVE-2022-34321.json
@@ -4,19 +4,19 @@
     "cveId": "CVE-2022-34321",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
-      "https://pulsar.apache.org/security/CVE-2022-34321/",
       "http://www.openwall.com/lists/oss-security/2024/03/12/8",
-      "https://lists.apache.org/thread/ods5tq2hpl390hvjnvxv0bcg4rfpgjj8"
+      "https://lists.apache.org/thread/ods5tq2hpl390hvjnvxv0bcg4rfpgjj8",
+      "https://pulsar.apache.org/security/CVE-2022-34321/"
     ]
   },
   "adp": {
     "affected": [
       {
         "collectionURL": "https://repo.maven.apache.org/maven2",
-        "packageName": "org.apache.pulsar:pulsar-proxy",
         "cpes": [
           "cpe:2.3:a:org.apache.pulsar:pulsar-proxy:*:*:*:*:*:*:*:*"
         ],
+        "packageName": "org.apache.pulsar:pulsar-proxy",
         "product": "Apache Pulsar",
         "vendor": "Apache Software Foundation",
         "versions": [

diff --git a/data/anchore/2022/CVE-2022-40211.json b/data/anchore/2022/CVE-2022-40211.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-40211",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/give/wordpress-givewp-plugin-2-25-1-cross-site-scripting-xss-via-render-dropdown-vulnerability?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/b30261e0-1fa1-4794-98f6-851532b7615c?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-44595.json b/data/anchore/2022/CVE-2022-44595.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-44595",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/wp-2fa/wordpress-wp2fa-plugin-2-2-0-broken-authentication-vulnerability?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c51a3f8-dee1-4744-8353-864312c89021?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-44626.json b/data/anchore/2022/CVE-2022-44626.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-44626",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-peaks-plugin-12-1-20-broken-access-control-vulnerability?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/9251afbb-1a6d-40c6-b62e-a8866742f669?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-45349.json b/data/anchore/2022/CVE-2022-45349.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-45349",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-4?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/8ff3b35c-f7e3-4cae-b7f1-1a0930173ac5?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-45351.json b/data/anchore/2022/CVE-2022-45351.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-45351",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-5?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/aa657530-7c85-4399-94bb-feaa7d21a47a?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-45352.json b/data/anchore/2022/CVE-2022-45352.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-45352",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-2?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ec44487-7529-46a8-b2eb-cc5fe0f8f062?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-45356.json b/data/anchore/2022/CVE-2022-45356.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-45356",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/betheme/wordpress-betheme-theme-26-6-1-broken-access-control-vulnerability-3?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/b8eec2f0-1b6f-45cf-8291-019bc1d08f9b?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-45851.json b/data/anchore/2022/CVE-2022-45851.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-45851",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/googleanalytics/wordpress-sharethis-dashboard-for-google-analytics-plugin-3-1-2-broken-access-control-vulnerability?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/4e343489-4969-4a16-9741-34de93c8b06e?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-47151.json b/data/anchore/2022/CVE-2022-47151.json
@@ -2,7 +2,11 @@
   "additionalMetadata": {
     "cna": "patchstack",
     "cveId": "CVE-2022-47151",
-    "reason": "Added CPE configurations because not yet analyzed by NVD."
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-unauthenticated-sql-injection-vulnerability?_s_id=cve",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/89f6f1cd-91ab-416b-b76b-162b3b29d752?source=cve"
+    ]
   },
   "adp": {
     "affected": [

diff --git a/data/anchore/2022/CVE-2022-47894.json b/data/anchore/2022/CVE-2022-47894.json
@@ -4,9 +4,9 @@
     "cveId": "CVE-2022-47894",
     "reason": "Added CPE configurations because not yet analyzed by NVD.",
     "references": [
+      "http://www.openwall.com/lists/oss-security/2024/04/09/4",
       "https://github.com/apache/zeppelin/pull/4302",
-      "https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy",
-      "http://www.openwall.com/lists/oss-security/2024/04/09/4"
+      "https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy"
     ]
   },
   "adp": {