Questions tagged [cve]
Common Vulnerabilities and Exposures (CVE) is a dictionary to describe known vulnerabilities.
160
questions
1
vote
1answer
64 views
Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?
I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
0
votes
0answers
26 views
How long it takes to receive CVE-ID from cve.mitre.org?
I had applied for CVE ID at https://cveform.mitre.org/.
I did followed their guidelines, and did exactly as their instructions said (didn't add PGP key as it seems optional). It's been 2 month since ...
1
vote
1answer
70 views
API to Get CVE Info [closed]
I'm working on a project that uses an API which gives back CVE IDs. We need to programmatically fetch details about those CVEs. The main thing we need is the CVSS v2 base vector (e.g. AV:A/AC:H/Au:M/C:...
1
vote
0answers
46 views
CVE vulnerable apps repository [closed]
According to your experience, do you know if a repository of vulnerable apps indexed by CVE exists?
Exploit-DB offers vulnerable apps, i.e. for:
https://www.exploit-db.com/exploits/46962
it is ...
0
votes
1answer
461 views
Dealing with OpenSSH CVE-2019-6109, CVE-2019-6110 & CVE-2019-6111 on CentOS 6
How are you dealing with the OpenSSH vulnerabilities CVE-2019-6109, CVE-2019-6110 & CVE-2019-6111 on CentOS 6 in a PCI server? OpenSSH doesn't seem to have a fix for this yet, but it fails ...
0
votes
1answer
219 views
nvd json database without vendor and product info
I'm trying to parse nvd databases from nvd vulnerabilities feeds https://nvd.nist.gov/vuln/data-feeds#JSON_FEED
I see many entries, where vendor product information is not filled in (cve->affects->...
3
votes
1answer
88 views
How to request CVE if CNA didn't provide an answer
A couple of weeks ago I have found a vulnerability in a product. I have contacted them reporting it a week ago and also to get the CVE.
I didn't receive any answer from the mailing list and I would ...
58
votes
6answers
7k views
Should we release the security issues we found in our product as CVE or we can just update those on weekly release notes?
We are a vendor providing a product that is being used in enterprises. We know that those companies having periodic CVE scans on products they are using part of their vulnerability management process. ...
2
votes
2answers
2k views
How do the CVE-2018-10562 and CVE-2018-10561 exploits work?
https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/
Firstly, the use of 'GPON' I find misleading because this vulnerability is to do with the routers and webservers and not the access ...
0
votes
1answer
63 views
Is CVE2012-5373 fixed in OpenJDK7?
Can anyone please tell me if CVE2012-5373 is fixed in OpenJDK7? I have searched for the fix details, but I couldn't find any.
9
votes
1answer
217 views
What is the reason for the increase of CVEs since 2017?
According to CVEdetails.com, there were 6447 CVEs in 2016.
In 2017 there were 14714 CVEs. That's 128% more than in 2016.
Further, in 2018 it became even more with 16555 CVEs. A single peak in one year ...
0
votes
1answer
94 views
Can a CVE be removed from NVD database?
Normally, CVEs are added to the NVD CVE database and never removed. But can a CVE ID just disappear from the database after being there for a while? (Maybe because the entry was a complete mistake, or ...
0
votes
0answers
21 views
What is the proper procedure for a ATM security disclosure? [duplicate]
I've discovered a possible security vulnerability in a line of ATMs. What is the ethical notification protocol? How long does one wait after notifying the company before making a public disclosure?
1
vote
2answers
84 views
Risk and probability from CVE
How can I find risk and probability from CVE (https://cve.mitre.org/)? I read an article and it says (pg 14),
The cost is derived from the attack tree, and risk and probability are
based on CVE
...
1
vote
1answer
118 views
Exploit database for NVD vulnerabilities [closed]
I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
0
votes
2answers
59 views
Can Netsparker detect a CVE in an open source library packaged in a WebPack bundle?
In a recent Netsparker scan, a CVE against an open source JavaScript library was reported (as expected). I'm trying to understand exactly how Netsparker determines:
1. Which JS library is being used,...
2
votes
1answer
55 views
Given a list of components and versions, how can I check if any of them have known vulnerabilities?
In this case, I have a list of names and versions, but not access to any source code or binaries. E.g.
ComponentA 2.6.6
ComponentB 1.1
ComponentC 0.12
The list is more than 300 components long, so ...
1
vote
2answers
77 views
Microsoft Windows CVEs?
I know sites like cvedetails and exploit-db feature Windows 10 specific CVEs. But doesnt microsoft.com have a list (or feed) of vulnerability advisories and recently disclosed CVEs? I checked their ...
0
votes
1answer
759 views
What would be the impact of a CVE-2015-9251 vulnerability?
I've seen that in jQuery versions older than jQuery 3 there is the CVE-2015-9251 vulnerability which can result in cross-site scripting. Is this a limited vulnerability? What could be its possible ...
0
votes
0answers
45 views
Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?
One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don't really understand why would they refuse to ...
2
votes
1answer
531 views
What *actually* is a Java applets vulnerability?
When we say that Java applets are vulnerable, what exactly do we mean? A vulnerability in the underlying jre? In the browser? In the "applet" component?
what exactly is exploited?
1
vote
2answers
566 views
How to discover known vulnerabilities (CVEs) in Go executables? [closed]
Tools that discover CVEs need to create software bill-of-material. In many cases it can be done simply by inspecting files on the target system e.g. RPM or NPM index.
Would it be possible to do ...
0
votes
2answers
727 views
SambaCry CVE-2017-7494 returns “Exploit completed, but no session was created”
I am using this exploit on msfconsole to exploit a VM with samba and the configuration is as follows:
Module options (exploit/linux/samba/sambacry)
Payload options (linux/x64/meterpreter/reverse_tcp)
...
0
votes
1answer
109 views
Categorizing CVE product name
I'm looking for a way to categorize CVE product names by operating system, application etc. Is there any dataset available to deal with this? https://www.cvedetails.com offers these categories for ...
1
vote
0answers
72 views
OWASP scan on SQL Server Compact Edition
On running a dependency check on my projects library, the tool reported multiple vulnerabilities in System.Data.SqlServerCe.dll, and CVE-2012-1856 with the highest score of 9.3
The version of the ...
2
votes
1answer
162 views
Why doesn't the official CVE database list the names of the reporters?
Why does neither MITRE nor NVD list out the name(s) of the reporter(s) of a CVE? e.g. for CVE-2018-1123, neither MITRE, nor NVD gives credit to reporters. However, for some CVEs, SecurityFocus does ...
0
votes
1answer
74 views
Is it safe to install MS17-010 unpatched OS as guest on patched host?
For example, these are unpatched old OS.
Windows 98
Windows 98 SE
Windows ME
Windows NT 4.0
Windows 2000
Given that SMBv1 is not disabled on host but already patched.
Is the unpatched guest OS ...
1
vote
1answer
188 views
NVD: How to query without false positives when CPE Entries are not filled in for many CVEs?
So my naive approach was to query NVD for CPE URIs of software products I use.
Unfortunately I notice a lot of entries don't have CPE entries. (e.g. for 2016 there are currently 1332 without CPE URI)...
3
votes
1answer
167 views
Is there a security tracker aggregated file for Ubuntu server like Debian has?
Debian has a JSON file containing all CVE<->Fixed package versions map.
Link: https://security-tracker.debian.org/tracker/data/json
Does Ubuntu have something similar?
3
votes
1answer
158 views
How to find CAPEC items related to a CVE
Vulnerabilities with a CVE usually also have a CWE associated with them, but almost never CAPEC. CWE's site also only very rarely points to related CAPEC items.
Is there a way to find a CVE's ...
1
vote
0answers
88 views
Misunderstanding regarding CVE [closed]
I was learning about CVE and went through this :
... if you own a security tool whose reports contain references to CVE
IDs, you may then access fix information in a separate database that
is ...
0
votes
1answer
277 views
What is the attack vector for CVE-2018-3639 Speculative Store Bypass?
We use Web Application deployed on a CentOS server.
Can the attack will be performed via a browser?
Or the attacker need a physical access to the CentOS server?
I cannot understand the attack vector ...
3
votes
3answers
274 views
Has Firefox become bugless or where are the Firefox CVEs for 2017? [closed]
Through 2016 Firefox had about the same number (or same order of magnitude) of new issues listed as every other browser. Around 100-250.
2017 lists only a single issue
https://www.cvedetails.com/...
0
votes
0answers
38 views
looking for computer readable lists of CVE to package name sources [duplicate]
Redhat has a very nice xml containing all known CVEs and the package version they are fixed in (https://www.redhat.com/security/data/metrics/rpm-to-cve.xml).
I would like to know if any other Linux ...
1
vote
1answer
109 views
Why is CVE-2017-5461 rated Critical with CVSS Score 9.8?
A while ago I came across this CVE-2017-5461, which is rated 9.8 both on NVD and Redhat Portal, with a CVSS base string of
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
for those who is not very ...
0
votes
2answers
149 views
Is there a CVE or CVSS for enumeration of ports?
Lets say that there is a company which does not have a firewall and it is possible to perform an enumeration of ports and services.
Could it be considered a vulnerability if it provides ...
0
votes
0answers
163 views
Why does Ubuntu deem 16.04 un-affected by CVE-2017-16995(Kernel Privilege Escalation) while it's not?
In both current OVAL definition and CVE Tracker, it says for Ubuntu 16.04
While related to the CVE in some way, the 'linux' package in xenial is
not affected.
But I have tested many kernel ...
3
votes
1answer
45 views
CVE Description - Does impacted supported version mean specific version and older?
I needed guidance on how to interpret
Supported versions that are affected are Java SE:
6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit:
R28.3.16.
The above phrase is from CVE-...
0
votes
1answer
271 views
Is INTEL-SA-00075 Detection and Mitigation Tool enough to mitigate IntelME attacks
Is that tool enough to mitigate/protect againts IntelME vulnerability?
https://downloadcenter.intel.com/download/26755?v=t
If it's not enough I more I can do to protect againts IntelME attacks ?
2
votes
1answer
131 views
Are CVEs and EDBs normally hard to reproduce? [closed]
For a while I've played around with reproducing vulnerabilities reported in websites such as Exploit-DB (EDB) as a learning experience. However, I often find cases which I just can't get to work. In ...
8
votes
1answer
258 views
Is there a documented process for official information release for embargoed vulnerabilities in the CVE system?
Is there a documented process for official information release for embargoed vulnerabilities in the Common Vulnerabilities and Exposures (CVE) system?
If such a process exists, how does it address ...
2
votes
1answer
216 views
List of CVE resolved in OpenJDK build
What is the list of the CVE resolved in OpenJDK build that published in https://github.com/ojdkbuild/ojdkbuild/releases?
For example in this build:
https://github.com/ojdkbuild/ojdkbuild/releases/tag/...
3
votes
3answers
595 views
How to get vulnerabilites by product name and version
I have a list of software installed on workstations which contains product name and version, for example my list contains Mysql Workbench 6.3.8. Searching in CVE Details I found out that this software ...
6
votes
0answers
348 views
Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?
Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
3
votes
2answers
893 views
CVE submission process?
I have two questions regarding going through the process to requesting and getting a CVE ID for a vulnerability.
Should I contact the Vendor first and wait to see if they acknowledge the ...
12
votes
2answers
329 views
Why the big jump in CVE-2017 numbering?
Can anyone explain, why the numbering from this years CVE entries jumped from CVE-2017-15xxx to CVE-2017-1000xxx?
What about entries with the numbering sequence CVE-2017-16xxx, CVE-2017-17xxx, and so ...
1
vote
1answer
51 views
Can CVSS score be different from that calculated from vector
In most databases, there two fields: CVSS vector and CVSS score. It's logical that if we calculate score from vector, it's supposed to be equal to the score field.
But, can it be manually 'tuned' and ...
0
votes
2answers
61 views
Does CVEs reported in a Java Update applies also to previous updates?
If my application uses JRE 1.8.0_6, that have currently 3 CVEs reported, all later updates' CVEs sums up to 216, and 34 CVEs reported in JRE 1.8.0 in general, what is the number of vulnerabilities my ...
0
votes
1answer
78 views
Are CVE identifiers assigned for proprietary software packages? [duplicate]
If I find a vulnerability while using a proprietary software package can I request a CVE identifier. Or rather vulnerabilities in proprietary software packages are a matter of me reporting issue to ...
5
votes
2answers
320 views
Why are the CVSS scores differ so much between Redhat and NVD page?
take CVE-2016-7872 for example.
in National Vulnerability Database webpage, we can see that the cvss2 and cvss3 score are 9.8 and 10.0 respectively.
but in the redhat security advisory page, they ...
