enrich records 2024-05-30

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 30, 2024 · f06d23e · f06d23e
1 parent a721fde
commit f06d23e
Show file tree

Hide file tree

Showing 30 changed files with 901 additions and 6 deletions.
diff --git a/data/anchore/2023/CVE-2023-6743.json b/data/anchore/2023/CVE-2023-6743.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "wordfence",
+    "cveId": "CVE-2023-6743",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_output.class.php#L1765",
+      "https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/provider/core/plugins/unlimited_elements/elementor/elementor_widget.class.php#L3948",
+      "https://plugins.trac.wordpress.org/changeset/3010986/unlimited-elements-for-elementor#file6",
+      "https://plugins.trac.wordpress.org/changeset/3015166/unlimited-elements-for-elementor",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/25f71a19-85b1-4bc9-b193-d9de2eba81ee?source=cve"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://wordpress.org/plugins",
+        "cpes": [
+          "cpe:2.3:a:unlimited-elements:unlimited_elements_for_elementor_\\(free_widgets\\,_addons\\,_templates\\):*:*:*:*:*:wordpress:*:*"
+        ],
+        "packageName": "unlimited-elements-for-elementor",
+        "product": "Unlimited Elements For Elementor (Free Widgets, Addons, Templates)",
+        "vendor": "unitecms",
+        "versions": [
+          {
+            "lessThan": "1.5.91",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-20923.json b/data/anchore/2024/CVE-2024-20923.json
@@ -76,14 +76,14 @@
       },
       {
         "collectionURL": "https://repo.maven.apache.org/maven2",
-        "packageName": "org.openjfx:javafx-graphics",
         "cpes": [
           "cpe:2.3:a:oracle:openjfx:*:*:*:*:*:*:*:*",
           "cpe:2.3:a:openjdk:jfx:*:*:*:*:*:*:*:*",
           "cpe:2.3:a:org.openjfx:javafx-graphics:*:*:*:*:*:*:*:*"
         ],
-        "repo": "https://github.com/openjdk/jfx",
+        "packageName": "org.openjfx:javafx-graphics",
         "product": "OpenJFX",
+        "repo": "https://github.com/openjdk/jfx",
         "vendor": "Oracle Corporation",
         "versions": [
           {

diff --git a/data/anchore/2024/CVE-2024-20925.json b/data/anchore/2024/CVE-2024-20925.json
@@ -76,14 +76,14 @@
       },
       {
         "collectionURL": "https://repo.maven.apache.org/maven2",
-        "packageName": "org.openjfx:javafx-media",
         "cpes": [
           "cpe:2.3:a:oracle:openjfx:*:*:*:*:*:*:*:*",
           "cpe:2.3:a:openjdk:jfx:*:*:*:*:*:*:*:*",
           "cpe:2.3:a:org.openjfx:javafx-media:*:*:*:*:*:*:*:*"
         ],
-        "repo": "https://github.com/openjdk/jfx",
+        "packageName": "org.openjfx:javafx-media",
         "product": "OpenJFX",
+        "repo": "https://github.com/openjdk/jfx",
         "vendor": "Oracle Corporation",
         "versions": [
           {

diff --git a/data/anchore/2024/CVE-2024-3050.json b/data/anchore/2024/CVE-2024-3050.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "wpscan",
+    "cveId": "CVE-2024-3050",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://wpscan.com/vulnerability/04c1581e-fd36-49d4-8463-b49915d4b1ac/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://wordpress.org/plugins",
+        "cpes": [
+          "cpe:2.3:a:geminilabs:site_reviews:*:*:*:*:*:wordpress:*:*"
+        ],
+        "packageName": "site-reviews",
+        "product": "Site Reviews",
+        "versions": [
+          {
+            "lessThan": "7.0.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-31356.json b/data/anchore/2024/CVE-2024-31356.json
@@ -21,7 +21,7 @@
         "vendor": "Solwin Infotech",
         "versions": [
           {
-            "lessThanOrEqual": "1.8",
+            "lessThan": "2.0",
             "status": "affected",
             "version": "0",
             "versionType": "custom"

diff --git a/data/anchore/2024/CVE-2024-32530.json b/data/anchore/2024/CVE-2024-32530.json
@@ -21,7 +21,7 @@
         "vendor": "PressTigers",
         "versions": [
           {
-            "lessThanOrEqual": "1.1.5",
+            "lessThan": "1.1.6",
             "status": "affected",
             "version": "0",
             "versionType": "custom"

diff --git a/data/anchore/2024/CVE-2024-3412.json b/data/anchore/2024/CVE-2024-3412.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "wordfence",
+    "cveId": "CVE-2024-3412",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://plugins.trac.wordpress.org/changeset/3076275/wp-staging/trunk/Framework/Network/AjaxBackupDownloader.php",
+      "https://www.wordfence.com/threat-intel/vulnerabilities/id/8ebb1072-ea05-4914-961d-0d8f20248078?source=cve"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://wordpress.org/plugins",
+        "cpes": [
+          "cpe:2.3:a:wp-staging:wp_staging:*:*:*:*:*:wordpress:*:*"
+        ],
+        "packageName": "wp-staging",
+        "product": "WP STAGING WordPress Backup Plugin – Migration Backup Restore",
+        "vendor": "renehermi",
+        "versions": [
+          {
+            "lessThan": "3.5.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-34715.json b/data/anchore/2024/CVE-2024-34715.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "github_m",
+    "cveId": "CVE-2024-34715",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://docs.sqlalchemy.org/en/14/core/engines.html#escaping-special-characters-such-as-signs-in-passwords",
+      "https://github.com/ethyca/fides/commit/6ab37b1ffe2b1a3bd35b706a82f78e061086141c",
+      "https://github.com/ethyca/fides/security/advisories/GHSA-8cm5-jfj2-26q7",
+      "https://github.com/sqlalchemy/sqlalchemy/discussions/6615"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://pypi.org",
+        "cpes": [
+          "cpe:2.3:a:ethyca:fides:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "ethyca-fides",
+        "product": "fides",
+        "repo": "https://github.com/ethyca/fides",
+        "vendor": "ethyca",
+        "versions": [
+          {
+            "lessThan": "2.37.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "python"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-35221.json b/data/anchore/2024/CVE-2024-35221.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "github_m",
+    "cveId": "CVE-2024-35221",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://en.wikipedia.org/wiki/Billion_laughs_attack",
+      "https://github.com/ruby/ruby/blob/7cf74a2ff28b1b4c26e367d0d67521f7e1fed239/lib/rubygems/safe_yaml.rb#L28",
+      "https://github.com/rubygems/rubygems.org/security/advisories/GHSA-4vc5-whwr-7hh2"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:rubygems:rubygems.org:*:*:*:*:*:*:*:*"        
+        ],
+        "product": "rubygems.org",
+        "repo": "https://github.com/rubygems/rubygems.org",
+        "vendor": "rubygems",
+        "versions": [
+          {
+            "lessThan": "2024-04-12",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-36362.json b/data/anchore/2024/CVE-2024-36362.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "jetbrains",
+    "cveId": "CVE-2024-36362",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.jetbrains.com/privacy-security/issues-fixed/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*"
+        ],
+        "product": "TeamCity",
+        "vendor": "JetBrains",
+        "versions": [
+          {
+            "lessThan": "2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-36363.json b/data/anchore/2024/CVE-2024-36363.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "jetbrains",
+    "cveId": "CVE-2024-36363",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.jetbrains.com/privacy-security/issues-fixed/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*"
+        ],
+        "product": "TeamCity",
+        "vendor": "JetBrains",
+        "versions": [
+          {
+            "lessThan": "2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-36364.json b/data/anchore/2024/CVE-2024-36364.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "jetbrains",
+    "cveId": "CVE-2024-36364",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.jetbrains.com/privacy-security/issues-fixed/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*"
+        ],
+        "product": "TeamCity",
+        "vendor": "JetBrains",
+        "versions": [
+          {
+            "lessThan": "2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-36365.json b/data/anchore/2024/CVE-2024-36365.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "jetbrains",
+    "cveId": "CVE-2024-36365",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.jetbrains.com/privacy-security/issues-fixed/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*"
+        ],
+        "product": "TeamCity",
+        "vendor": "JetBrains",
+        "versions": [
+          {
+            "lessThan": "2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}