diff --git a/http/cves/2018/CVE-2018-0296.yaml b/http/cves/2018/CVE-2018-0296.yaml index 568279c4f6..ef15bcee37 100644 --- a/http/cves/2018/CVE-2018-0296.yaml +++ b/http/cves/2018/CVE-2018-0296.yaml @@ -18,7 +18,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H cvss-score: 7.5 cve-id: CVE-2018-0296 - cwe-id: CWE-22,CWE-20 + cwe-id: CWE-20,CWE-22 epss-score: 0.97359 epss-percentile: 0.99865 cpe: cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* diff --git a/http/cves/2018/CVE-2018-1273.yaml b/http/cves/2018/CVE-2018-1273.yaml index 3bc3fa372a..42122e0004 100644 --- a/http/cves/2018/CVE-2018-1273.yaml +++ b/http/cves/2018/CVE-2018-1273.yaml @@ -22,7 +22,7 @@ info: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2018-1273 - cwe-id: CWE-20,CWE-94 + cwe-id: CWE-94,CWE-20 epss-score: 0.97498 epss-percentile: 0.99973 cpe: cpe:2.3:a:pivotal_software:spring_data_commons:*:*:*:*:*:*:*:* diff --git a/http/cves/2018/CVE-2018-3760.yaml b/http/cves/2018/CVE-2018-3760.yaml index 73b3157ab7..1ca23e294d 100644 --- a/http/cves/2018/CVE-2018-3760.yaml +++ b/http/cves/2018/CVE-2018-3760.yaml @@ -18,7 +18,7 @@ info: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2018-3760 - cwe-id: CWE-200,CWE-22 + cwe-id: CWE-22,CWE-200 epss-score: 0.05013 epss-percentile: 0.91983 cpe: cpe:2.3:a:redhat:cloudforms:4.5:*:*:*:*:*:*:* diff --git a/http/cves/2020/CVE-2020-15227.yaml b/http/cves/2020/CVE-2020-15227.yaml index 985403f4af..34b2d307e0 100644 --- a/http/cves/2020/CVE-2020-15227.yaml +++ b/http/cves/2020/CVE-2020-15227.yaml @@ -17,7 +17,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2020-15227 - cwe-id: CWE-74,CWE-94 + cwe-id: CWE-94,CWE-74 epss-score: 0.97307 epss-percentile: 0.99833 cpe: cpe:2.3:a:nette:application:*:*:*:*:*:*:*:* diff --git a/http/cves/2020/CVE-2020-17518.yaml b/http/cves/2020/CVE-2020-17518.yaml index e185c80755..b366be714d 100644 --- a/http/cves/2020/CVE-2020-17518.yaml +++ b/http/cves/2020/CVE-2020-17518.yaml @@ -18,7 +18,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N cvss-score: 7.5 cve-id: CVE-2020-17518 - cwe-id: CWE-22,CWE-23 + cwe-id: CWE-23,CWE-22 epss-score: 0.97459 epss-percentile: 0.99948 cpe: cpe:2.3:a:apache:flink:*:*:*:*:*:*:*:* diff --git a/http/cves/2020/CVE-2020-5405.yaml b/http/cves/2020/CVE-2020-5405.yaml index dafa0d38dd..f284b9fd1a 100644 --- a/http/cves/2020/CVE-2020-5405.yaml +++ b/http/cves/2020/CVE-2020-5405.yaml @@ -14,7 +14,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N cvss-score: 6.5 cve-id: CVE-2020-5405 - cwe-id: CWE-23,CWE-22 + cwe-id: CWE-22,CWE-23 epss-score: 0.00258 epss-percentile: 0.63404 cpe: cpe:2.3:a:vmware:spring_cloud_config:*:*:*:*:*:*:*:* diff --git a/http/cves/2021/CVE-2021-25033.yaml b/http/cves/2021/CVE-2021-25033.yaml index dd13770762..49ac138be1 100644 --- a/http/cves/2021/CVE-2021-25033.yaml +++ b/http/cves/2021/CVE-2021-25033.yaml @@ -36,4 +36,5 @@ http: part: header regex: - '(?m)^(?:Location\s*?:\s*?)(?:https?:\/\/|\/\/|\/\\\\|\/\\)(?:[a-zA-Z0-9\-_\.@]*)interact\.sh\/?(\/|[^.].*)?$' # https://regex101.com/r/L403F0/1 -# digest: 4a0a004730450220371f27b072e07848d8d63e93e6dd32d2ebf784afb289109d676e7bf0f4df7f61022100d6b1d6f8bccca5fa3551a5d1033cea27d9b0166193ce2bb320b89ec225489a7c:922c64590222798bb761d5b6d8e72950 \ No newline at end of file + +# digest: 4a0a004730450220371f27b072e07848d8d63e93e6dd32d2ebf784afb289109d676e7bf0f4df7f61022100d6b1d6f8bccca5fa3551a5d1033cea27d9b0166193ce2bb320b89ec225489a7c:922c64590222798bb761d5b6d8e72950 diff --git a/http/cves/2021/CVE-2021-32820.yaml b/http/cves/2021/CVE-2021-32820.yaml index 27e5bd16dd..bf14cb2f75 100644 --- a/http/cves/2021/CVE-2021-32820.yaml +++ b/http/cves/2021/CVE-2021-32820.yaml @@ -17,7 +17,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N cvss-score: 8.6 cve-id: CVE-2021-32820 - cwe-id: CWE-94,CWE-200 + cwe-id: CWE-200,CWE-94 epss-score: 0.00929 epss-percentile: 0.81279 cpe: cpe:2.3:a:express_handlebars_project:express_handlebars:*:*:*:*:*:node.js:*:* diff --git a/http/cves/2021/CVE-2021-38540.yaml b/http/cves/2021/CVE-2021-38540.yaml index be6e9093ee..9a029403de 100644 --- a/http/cves/2021/CVE-2021-38540.yaml +++ b/http/cves/2021/CVE-2021-38540.yaml @@ -14,7 +14,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2021-38540 - cwe-id: CWE-269,CWE-306 + cwe-id: CWE-306,CWE-269 epss-score: 0.00588 epss-percentile: 0.759 cpe: cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:* diff --git a/http/cves/2021/CVE-2021-39144.yaml b/http/cves/2021/CVE-2021-39144.yaml index bf93a17176..82430f15f3 100644 --- a/http/cves/2021/CVE-2021-39144.yaml +++ b/http/cves/2021/CVE-2021-39144.yaml @@ -18,7 +18,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H cvss-score: 8.5 cve-id: CVE-2021-39144 - cwe-id: CWE-306,CWE-502 + cwe-id: CWE-502,CWE-306 epss-score: 0.96508 epss-percentile: 0.99453 cpe: cpe:2.3:a:xstream_project:xstream:*:*:*:*:*:*:*:* diff --git a/http/cves/2022/CVE-2022-0482.yaml b/http/cves/2022/CVE-2022-0482.yaml index 62c0c5e8d1..bf7c3bc27b 100644 --- a/http/cves/2022/CVE-2022-0482.yaml +++ b/http/cves/2022/CVE-2022-0482.yaml @@ -18,7 +18,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N cvss-score: 9.1 cve-id: CVE-2022-0482 - cwe-id: CWE-359,CWE-863 + cwe-id: CWE-863,CWE-359 epss-score: 0.06254 epss-percentile: 0.92812 cpe: cpe:2.3:a:easyappointments:easyappointments:*:*:*:*:*:wordpress:*:* diff --git a/http/cves/2022/CVE-2022-1329.yaml b/http/cves/2022/CVE-2022-1329.yaml index 2b2b78f362..388ae49117 100644 --- a/http/cves/2022/CVE-2022-1329.yaml +++ b/http/cves/2022/CVE-2022-1329.yaml @@ -16,7 +16,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H cvss-score: 8.8 cve-id: CVE-2022-1329 - cwe-id: CWE-862,CWE-434 + cwe-id: CWE-434,CWE-862 epss-score: 0.96468 epss-percentile: 0.99438 cpe: cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:* diff --git a/http/cves/2022/CVE-2022-1815.yaml b/http/cves/2022/CVE-2022-1815.yaml index df91131b67..c84fa6262d 100644 --- a/http/cves/2022/CVE-2022-1815.yaml +++ b/http/cves/2022/CVE-2022-1815.yaml @@ -17,7 +17,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2022-1815 - cwe-id: CWE-918,CWE-200 + cwe-id: CWE-200,CWE-918 epss-score: 0.00928 epss-percentile: 0.81273 cpe: cpe:2.3:a:diagrams:drawio:*:*:*:*:*:*:*:* diff --git a/http/cves/2022/CVE-2022-22947.yaml b/http/cves/2022/CVE-2022-22947.yaml index 2331ef620a..303037b4a4 100644 --- a/http/cves/2022/CVE-2022-22947.yaml +++ b/http/cves/2022/CVE-2022-22947.yaml @@ -17,7 +17,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cvss-score: 10 cve-id: CVE-2022-22947 - cwe-id: CWE-917,CWE-94 + cwe-id: CWE-94,CWE-917 epss-score: 0.97481 epss-percentile: 0.99964 cpe: cpe:2.3:a:vmware:spring_cloud_gateway:*:*:*:*:*:*:*:* diff --git a/http/cves/2022/CVE-2022-24900.yaml b/http/cves/2022/CVE-2022-24900.yaml index dc698d34b1..6aab40ab58 100644 --- a/http/cves/2022/CVE-2022-24900.yaml +++ b/http/cves/2022/CVE-2022-24900.yaml @@ -17,7 +17,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N cvss-score: 8.6 cve-id: CVE-2022-24900 - cwe-id: CWE-22,CWE-668 + cwe-id: CWE-668,CWE-22 epss-score: 0.01655 epss-percentile: 0.8621 cpe: cpe:2.3:a:piano_led_visualizer_project:piano_led_visualizer:*:*:*:*:*:*:*:* diff --git a/http/cves/2022/CVE-2022-3242.yaml b/http/cves/2022/CVE-2022-3242.yaml index ce795c84de..04706f2f88 100644 --- a/http/cves/2022/CVE-2022-3242.yaml +++ b/http/cves/2022/CVE-2022-3242.yaml @@ -15,7 +15,7 @@ info: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2022-3242 - cwe-id: CWE-79,CWE-94 + cwe-id: CWE-94,CWE-79 epss-score: 0.02392 epss-percentile: 0.88709 cpe: cpe:2.3:a:microweber:microweber:*:*:*:*:*:*:*:* diff --git a/http/default-logins/dell/dell-dpi-default-login.yaml b/http/default-logins/dell/dell-dpi-default-login.yaml index 297a9c05bf..ec2e850a68 100644 --- a/http/default-logins/dell/dell-dpi-default-login.yaml +++ b/http/default-logins/dell/dell-dpi-default-login.yaml @@ -45,4 +45,5 @@ http: - '!contains(body_1, "/index.html")' - 'contains_any(tolower(body_1), "