migrate apache records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 17, 2024 · ef84cdd · ef84cdd
1 parent e553f0d
commit ef84cdd
Show file tree

Hide file tree

Showing 83 changed files with 3,325 additions and 0 deletions.
diff --git a/data/anchore/2021/CVE-2021-28656.json b/data/anchore/2021/CVE-2021-28656.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2021-28656",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/04/09/3",
+      "https://lists.apache.org/thread/dttzkkv4qyn1rq2fdv1r94otb1osxztc"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "packageName": "org.apache.zeppelin:zeppelin-web",
+        "cpes": [
+          "cpe:2.3:a:org.apache.zeppelin:zeppelin-web:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Apache Zeppelin",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThanOrEqual": "0.9.0",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2022/CVE-2022-34321.json b/data/anchore/2022/CVE-2022-34321.json
@@ -0,0 +1,55 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2022-34321",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://pulsar.apache.org/security/CVE-2022-34321/",
+      "http://www.openwall.com/lists/oss-security/2024/03/12/8",
+      "https://lists.apache.org/thread/ods5tq2hpl390hvjnvxv0bcg4rfpgjj8"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "packageName": "org.apache.pulsar:pulsar-proxy",
+        "cpes": [
+          "cpe:2.3:a:org.apache.pulsar:pulsar-proxy:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Apache Pulsar",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "2.10.6",
+            "status": "affected",
+            "version": "2.6.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "2.11.3",
+            "status": "affected",
+            "version": "2.11.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.0.2",
+            "status": "affected",
+            "version": "3.0.0",
+            "versionType": "semver"
+          },
+          {
+            "lessThan": "3.1.1",
+            "status": "affected",
+            "version": "3.1.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2022/CVE-2022-47894.json b/data/anchore/2022/CVE-2022-47894.json
@@ -0,0 +1,37 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2022-47894",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/apache/zeppelin/pull/4302",
+      "https://lists.apache.org/thread/csf4k73kkn3nx58pm0p2qrylbox4fvyy",
+      "http://www.openwall.com/lists/oss-security/2024/04/09/4"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "cpes": [
+          "cpe:2.3:a:org.apache.zeppelin:sap:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "org.apache.zeppelin:sap",
+        "product": "Apache Zeppelin SAP",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "0.11.0",
+            "status": "affected",
+            "version": "0.8.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-35701.json b/data/anchore/2023/CVE-2023-35701.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-35701",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/05/03/3",
+      "https://lists.apache.org/thread/7zcv6l63spl4r66xwz5jv9rtrg2opx81"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "cpes": [
+          "cpe:2.3:a:org.apache.hive:hive-jdbc:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "org.apache.hive:hive-jdbc",
+        "product": "Apache Hive",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "4.0.0",
+            "status": "affected",
+            "version": "4.0.0-alpha-1",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-38709.json b/data/anchore/2023/CVE-2023-38709.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-38709",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/04/04/3",
+      "https://httpd.apache.org/security/vulnerabilities_24.html",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/",
+      "https://lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/",
+      "https://security.netapp.com/advisory/ntap-20240415-0013/"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Apache HTTP Server",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "2.4.59",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-41313.json b/data/anchore/2023/CVE-2023-41313.json
@@ -0,0 +1,34 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-41313",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95",
+      "http://www.openwall.com/lists/oss-security/2024/03/10/2"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Apache Doris",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "1.2.8",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-49109.json b/data/anchore/2023/CVE-2023-49109.json
@@ -0,0 +1,39 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-49109",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "http://www.openwall.com/lists/oss-security/2024/02/20/4",
+      "https://lists.apache.org/thread/6kgsl93vtqlbdk6otttl0d8wmlspk0m5",
+      "https://lists.apache.org/thread/5b6yq2gov0fsy9x5dkvo8ws4rr45vkn8",
+      "https://github.com/apache/dolphinscheduler/pull/14991"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "packageName": " org.apache.dolphinscheduler:dolphinscheduler",
+        "cpes": [
+          "cpe:2.3:a:apache:dolphinscheduler:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:org.apache.dolphinscheduler:dolphinscheduler:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Apache DolphinScheduler",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "3.2.1",
+            "status": "affected",
+            "version": "3.0.0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-49250.json b/data/anchore/2023/CVE-2023-49250.json
@@ -0,0 +1,37 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-49250",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://lists.apache.org/thread/wgs2jvhbmq8xnd6rmg0ymz73nyj7b3qn",
+      "https://github.com/apache/dolphinscheduler/pull/15288",
+      "http://www.openwall.com/lists/oss-security/2024/02/20/1"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "cpes": [
+          "cpe:2.3:a:org.apache.dolphinscheduler:dolphinscheduler-common:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "org.apache.dolphinscheduler:dolphinscheduler-common",
+        "product": "Apache DolphinScheduler",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "3.2.1",
+            "status": "affected",
+            "version": "0",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2023/CVE-2023-50270.json b/data/anchore/2023/CVE-2023-50270.json
@@ -0,0 +1,38 @@
+{
+  "additionalMetadata": {
+    "cna": "apache",
+    "cveId": "CVE-2023-50270",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://github.com/apache/dolphinscheduler/pull/15219",
+      "https://lists.apache.org/thread/94prw8hyk60vvw7s6cs3tr708qzqlwl6",
+      "https://lists.apache.org/thread/lmnf21obyos920dnvbfpwq29c1sd2r9r",
+      "https://www.openwall.com/lists/oss-security/2024/02/20/3"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "collectionURL": "https://repo.maven.apache.org/maven2",
+        "cpes": [
+          "cpe:2.3:a:org.apache.dolphinscheduler:dolphinscheduler-api:*:*:*:*:*:*:*:*"
+        ],
+        "packageName": "org.apache.dolphinscheduler:dolphinscheduler-api",
+        "product": "Apache DolphinScheduler",
+        "vendor": "Apache Software Foundation",
+        "versions": [
+          {
+            "lessThan": "3.2.1",
+            "status": "affected",
+            "version": "1.3.8",
+            "versionType": "semver"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}