convert remaining misc records - batch 1

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 21, 2024 · 85fb8ae · 85fb8ae
1 parent 4c6db5e
commit 85fb8ae
Show file tree

Hide file tree

Showing 40 changed files with 1,709 additions and 0 deletions.
diff --git a/data/anchore/2014/CVE-2014-125111.json b/data/anchore/2014/CVE-2014-125111.json
@@ -0,0 +1,35 @@
+{
+  "additionalMetadata": {
+    "cna": "vuldb",
+    "cveId": "CVE-2014-125111",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://vuldb.com/?ctiid.259628",
+      "https://github.com/wp-plugins/wp-insert/commit/a07b7b08084b9b85859f3968ce7fde0fd1fcbba3",
+      "https://vuldb.com/?id.259628"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:smartlogix:wp-insert:*:*:*:*:*:wordpress:*:*"
+        ],
+        "product": "Wp-Insert",
+        "vendor": "namithjawahar",
+        "versions": [
+          {
+            "lessThan": "2.0.9",
+            "status": "affected",
+            "version": "2.0.0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2022/CVE-2022-28224.json b/data/anchore/2022/CVE-2022-28224.json
@@ -0,0 +1,67 @@
+{
+  "additionalMetadata": {
+    "cna": "tigera",
+    "cveId": "CVE-2022-28224",
+    "reason": "Correcting CPE configurations for the Calico open source product to be application type rather than os.  It seems the NVD folks got confused by the name calico_os and though it was an operating system.  Also adds in the `projectcalico:calico` version of the CPE as that also has been used to refer to the Calico OSS product",
+    "references": [
+      "https://www.tigera.io/security-bulletins-tta-2022-001/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:tigera:calico_enterprise:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Calico Enterprise",
+        "vendor": "Tigera",
+        "versions": [
+          {
+            "lessThan": "3.12.1",
+            "status": "affected",
+            "version": "3.12",
+            "versionType": "custom"
+          },
+          {
+            "lessThan": "3.11.4",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:tigera:calico_os:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Calico",
+        "vendor": "Project Calico",
+        "versions": [
+          {
+            "lessThan": "3.22.2",
+            "status": "affected",
+            "version": "3.22",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.21.5",
+            "status": "affected",
+            "version": "3.21",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.20.5",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2022/CVE-2022-32257.json b/data/anchore/2022/CVE-2022-32257.json
@@ -0,0 +1,33 @@
+{
+  "additionalMetadata": {
+    "cna": "siemens",
+    "cveId": "CVE-2022-32257",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://cert-portal.siemens.com/productcert/html/ssa-576771.html"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*"
+        ],
+        "product": "SINEMA Remote Connect Server",
+        "vendor": "Siemens",
+        "versions": [
+          {
+            "lessThan": "3.2",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2016.json b/data/anchore/2024/CVE-2024-2016.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "vuldb",
+    "cveId": "CVE-2024-2016",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://gist.github.com/L1nyz-tel/e3ee6f3401a9d1c580be1a9b4a8afab5",
+      "https://vuldb.com/?ctiid.255270",
+      "https://vuldb.com/?id.255270"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:zhicms:zhicms:*:*:*:*:*:*:*:*"
+        ],
+        "product": "ZhiCms",
+        "vendor": "n/a",
+        "versions": [
+          {
+            "status": "affected",
+            "version": "4.0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2021.json b/data/anchore/2024/CVE-2024-2021.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "vuldb",
+    "cveId": "CVE-2024-2021",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://vuldb.com/?ctiid.255300",
+      "https://github.com/dtxharry/cve/blob/main/cve.md",
+      "https://vuldb.com/?id.255300"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:netentsec:application_security_gateway:*:*:*:*:*:*:*:*"
+        ],
+        "product": "NS-ASG Application Security Gateway",
+        "vendor": "Netentsec",
+        "versions": [
+          {
+            "status": "affected",
+            "version": "6.3",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2074.json b/data/anchore/2024/CVE-2024-2074.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "vuldb",
+    "cveId": "CVE-2024-2074",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/yuziiiiiiiiii/CVE-SQL/blob/main/cve.md",
+      "https://vuldb.com/?ctiid.255389",
+      "https://vuldb.com/?id.255389"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:mini:mini-tmall:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Mini-Tmall",
+        "vendor": "n/a",
+        "versions": [
+          {
+            "status": "affected",
+            "version": "20231017",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}