Questions tagged [cve]

Common Vulnerabilities and Exposures (CVE) is a dictionary to describe known vulnerabilities.

Filter by
Sorted by
Tagged with
1
vote
0answers
36 views

How do I sort a large number of security vulnerabilities (CVEs) by severity? [closed]

During the course of my work, I was enumerating about 14 IPs and now my next task is manual checking each of the 500+ CVEs I found. I would like to sort them by severity and automate this as much as ...
0
votes
0answers
36 views

Telerik cve only find key?

I found that a website is using a version of telerik web ui that may be vulnerable to cve-2017-9248. However when i use the python script with command `python script.py -k https://www.website.com/...
0
votes
0answers
42 views

How to remediate a CVE or find a work around before the patch is released?

I was going through set of security vulnerabilities reported in Oracle Critical Patch Update. I want to find out the standard process followed by developers/security people to mitigate these kind of ...
0
votes
0answers
52 views

Is there a way to map each CVE to a technique/tactic in the mitre ATT&CK matrix?

The only 'solution' I thought of is linking a CVE to a CWE and then to a CAPEC (Method found in this link: How to find CAPEC items related to a CVE) but I am unable to get from a CAPEC attack pattern ...
9
votes
1answer
203 views

How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?

What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (...
3
votes
2answers
2k views

Does CVE-2020-0601 (CRYPT32.DLL critical exploit) affect Windows 7 and is there a patch to fix it?

I'm getting conflicting reports. Search in Google: "windows 7" fix CVE-2020-0601 The top result (from PCWorld) claims that "contrary to earlier rumors, it does not affect Windows 7". Scrolling down ...
0
votes
1answer
44 views

Difference between CVE and OSVDB?

Can someone explain the differences between a CVE and an OSVDB identifier? Both seem to serve the purpose of uniquely identifying a vulnerability or an expose, however not every OSVDB entry also has a ...
0
votes
0answers
28 views

Find which image has CVE package fixes

I have a handful of google container images that are flagging musl vulns. Example: gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.13 https://console.cloud.google.com/gcr/images/google-...
0
votes
0answers
40 views

Exploitation differences between Docker and VirtualBox for CVE-2010-4221

I am currently working on a research project where I analyze exploits in different virtualized environments. As an example I picked ProFTPd v1.3.3c which has a remote code execution vulnerability. I ...
2
votes
0answers
57 views

Are there any JRE/JDK exploits that do not require the presence of applets or plugins?

For triggering a Java exploit should applets be enabled in the user's machine? That is, in a drive by download scenario, can just visiting a malicious URL trigger an exploit/cve on the user's pc due ...
0
votes
2answers
90 views

How Vulnerability scanners assign CVE codes to Vulnerability found

I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.
0
votes
0answers
32 views

Telerik Script not working correctly?

I found that a website is using a version of telerik web ui that may be vulnerable to cve-2017-9248. However when i use the python script with command python script.py -k https://www.website.com/...
1
vote
0answers
63 views

Why does CVE-2019-2130 show up in Ubuntu and NodeJS?

In the NVD report for CVE-2019-2130 it shows that the products that are affected are only Android, and the links found in the Mitre page of the CVE lead only to an Android report of the CVE. This is ...
0
votes
2answers
92 views

Can I trust that the Java CVE's contain only the affected versions?

When looking at the Oracle Java JRE vulnerability list on cvedetails, they list the affected versions in the text, and usually also in a table below the description. However, I'm not confident that ...
0
votes
0answers
32 views

Security bug in wildfly-security-manager

I have a question to this Common Vulnerabilities and Exposures about wildfly-security-manager: CVE-2019-14843 Does this security flaw imply an attacker could break into the wildfly server, or does it ...
0
votes
3answers
141 views

How to scan a list of RPM files for publicly declared (CVE) vulnerabilities?

Couldn't find a reliable tool to scan a list of CentOS or RHEL RPM files for vulnerabilities (e.g. list CVEs found for each file). The goal is to scan the RPM files for vulnerabilities before they ...
1
vote
1answer
140 views

Is the most recent version of ojdbc7 still vulnerable to CVE-2016-3506?

Looking at the Oracle security advisory page here: https://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Oracle in 2016 disclosed vulnerabilites in their OJDBC7 versions 12.1.0....
6
votes
2answers
190 views

Can A chain of exploits count as a CVE?

If there are multiple exploits, each not accomplishing anything significant on their own (but are still technically exploits), but when used together in an exploit chain can achieve a meaningful ...
1
vote
1answer
102 views

What does “Obtaining a CVE” mean

I've have seen the term around and I mostly get that it is referred to when someone reports a vulnerability to Mitre. But what does this mean practically? Are you listed somewhere as the reporter? ...
0
votes
1answer
185 views

Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?

I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
3
votes
1answer
129 views

How long it takes to receive CVE-ID from cve.mitre.org?

I had applied for CVE ID at https://cveform.mitre.org/. I did followed their guidelines, and did exactly as their instructions said (didn't add PGP key as it seems optional). It's been 2 month since ...
1
vote
1answer
622 views

API to Get CVE Info [closed]

I'm working on a project that uses an API which gives back CVE IDs. We need to programmatically fetch details about those CVEs. The main thing we need is the CVSS v2 base vector (e.g. AV:A/AC:H/Au:M/C:...
1
vote
0answers
57 views

CVE vulnerable apps repository [closed]

According to your experience, do you know if a repository of vulnerable apps indexed by CVE exists? Exploit-DB offers vulnerable apps, i.e. for: https://www.exploit-db.com/exploits/46962 it is ...
0
votes
1answer
947 views

Dealing with OpenSSH CVE-2019-6109, CVE-2019-6110 & CVE-2019-6111 on CentOS 6

How are you dealing with the OpenSSH vulnerabilities CVE-2019-6109, CVE-2019-6110 & CVE-2019-6111 on CentOS 6 in a PCI server? OpenSSH doesn't seem to have a fix for this yet, but it fails ...
1
vote
1answer
491 views

nvd json database without vendor and product info

I'm trying to parse nvd databases from nvd vulnerabilities feeds https://nvd.nist.gov/vuln/data-feeds#JSON_FEED I see many entries, where vendor product information is not filled in (cve->affects->...
3
votes
1answer
103 views

How to request CVE if CNA didn't provide an answer

A couple of weeks ago I have found a vulnerability in a product. I have contacted them reporting it a week ago and also to get the CVE. I didn't receive any answer from the mailing list and I would ...
57
votes
6answers
8k views

Should we release the security issues we found in our product as CVE or we can just update those on weekly release notes?

We are a vendor providing a product that is being used in enterprises. We know that those companies having periodic CVE scans on products they are using part of their vulnerability management process. ...
2
votes
2answers
3k views

How do the CVE-2018-10562 and CVE-2018-10561 exploits work?

https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/ Firstly, the use of 'GPON' I find misleading because this vulnerability is to do with the routers and webservers and not the access ...
0
votes
1answer
65 views

Is CVE2012-5373 fixed in OpenJDK7?

Can anyone please tell me if CVE2012-5373 is fixed in OpenJDK7? I have searched for the fix details, but I couldn't find any.
9
votes
1answer
262 views

What is the reason for the increase of CVEs since 2017?

According to CVEdetails.com, there were 6447 CVEs in 2016. In 2017 there were 14714 CVEs. That's 128% more than in 2016. Further, in 2018 it became even more with 16555 CVEs. A single peak in one year ...
0
votes
1answer
114 views

Can a CVE be removed from NVD database?

Normally, CVEs are added to the NVD CVE database and never removed. But can a CVE ID just disappear from the database after being there for a while? (Maybe because the entry was a complete mistake, or ...
1
vote
2answers
101 views

Risk and probability from CVE

How can I find risk and probability from CVE (https://cve.mitre.org/)? I read an article and it says (pg 14), The cost is derived from the attack tree, and risk and probability are based on CVE ...
1
vote
1answer
148 views

Exploit database for NVD vulnerabilities [closed]

I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
0
votes
2answers
62 views

Can Netsparker detect a CVE in an open source library packaged in a WebPack bundle?

In a recent Netsparker scan, a CVE against an open source JavaScript library was reported (as expected). I'm trying to understand exactly how Netsparker determines: 1. Which JS library is being used,...
2
votes
1answer
57 views

Given a list of components and versions, how can I check if any of them have known vulnerabilities?

In this case, I have a list of names and versions, but not access to any source code or binaries. E.g. ComponentA 2.6.6 ComponentB 1.1 ComponentC 0.12 The list is more than 300 components long, so ...
1
vote
2answers
81 views

Microsoft Windows CVEs?

I know sites like cvedetails and exploit-db feature Windows 10 specific CVEs. But doesnt microsoft.com have a list (or feed) of vulnerability advisories and recently disclosed CVEs? I checked their ...
1
vote
1answer
2k views

What would be the impact of a CVE-2015-9251 vulnerability?

I've seen that in jQuery versions older than jQuery 3 there is the CVE-2015-9251 vulnerability which can result in cross-site scripting. Is this a limited vulnerability? What could be its possible ...
0
votes
0answers
46 views

Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?

One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
2
votes
1answer
878 views

What *actually* is a Java applets vulnerability?

When we say that Java applets are vulnerable, what exactly do we mean? A vulnerability in the underlying jre? In the browser? In the "applet" component? what exactly is exploited?
1
vote
2answers
809 views

How to discover known vulnerabilities (CVEs) in Go executables? [closed]

Tools that discover CVEs need to create software bill-of-material. In many cases it can be done simply by inspecting files on the target system e.g. RPM or NPM index. Would it be possible to do ...
0
votes
2answers
1k views

SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”

I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows: Module options (exploit/linux/samba/sambacry) Payload options (linux/x64/meterpreter/reverse_tcp) ...
0
votes
1answer
158 views

Categorizing CVE product name

I'm looking for a way to categorize CVE product names by operating system, application etc. Is there any dataset available to deal with this? https://www.cvedetails.com offers these categories for ...
1
vote
0answers
81 views

OWASP scan on SQL Server Compact Edition

On running a dependency check on my projects library, the tool reported multiple vulnerabilities in System.Data.SqlServerCe.dll, and CVE-2012-1856 with the highest score of 9.3 The version of the ...
2
votes
1answer
265 views

Why doesn't the official CVE database list the names of the reporters?

Why does neither MITRE nor NVD list out the name(s) of the reporter(s) of a CVE? e.g. for CVE-2018-1123, neither MITRE, nor NVD gives credit to reporters. However, for some CVEs, SecurityFocus does ...
0
votes
1answer
77 views

Is it safe to install MS17-010 unpatched OS as guest on patched host?

For example, these are unpatched old OS. Windows 98 Windows 98 SE Windows ME Windows NT 4.0 Windows 2000 Given that SMBv1 is not disabled on host but already patched. Is the unpatched guest OS ...
1
vote
1answer
258 views

NVD: How to query without false positives when CPE Entries are not filled in for many CVEs?

So my naive approach was to query NVD for CPE URIs of software products I use. Unfortunately I notice a lot of entries don't have CPE entries. (e.g. for 2016 there are currently 1332 without CPE URI)...
3
votes
1answer
220 views

Is there a security tracker aggregated file for Ubuntu server like Debian has?

Debian has a JSON file containing all CVE<->Fixed package versions map. Link: https://security-tracker.debian.org/tracker/data/json Does Ubuntu have something similar?
3
votes
1answer
293 views

How to find CAPEC items related to a CVE

Vulnerabilities with a CVE usually also have a CWE associated with them, but almost never CAPEC. CWE's site also only very rarely points to related CAPEC items. Is there a way to find a CVE's ...
1
vote
0answers
92 views

Misunderstanding regarding CVE [closed]

I was learning about CVE and went through this : ... if you own a security tool whose reports contain references to CVE IDs, you may then access fix information in a separate database that is ...
0
votes
1answer
323 views

What is the attack vector for CVE-2018-3639 Speculative Store Bypass?

We use Web Application deployed on a CentOS server. Can the attack will be performed via a browser? Or the attacker need a physical access to the CentOS server? I cannot understand the attack vector ...