add: AVE-2008-0003

Author: adysec

vulns/1999/AVE-1999-0025.toml

@@ -1,25 +1,35 @@
+[id]
+ave_id = "AVE-1999-0025"
+cve_id = "CVE-1999-0719"
+aliases = ["CVE-1999-0719"]
+
 [basic]
-description = "Vulnerability identified as CVE-1999-0719. Please refer to vendor advisory for details."
-published = "2026-07-10"
-remediation = "Refer to vendor advisory and upgrade to fixed version."
-score = 5.0
+title = "Gnumeric 电子表格 Guile 插件任意代码执行漏洞"
+description = "Gnumeric 电子表格的 Guile 插件存在任意代码执行漏洞。攻击者可通过特制的电子表格文件触发 Guile 脚本解释器执行任意命令，由于 Guile 作为 GNU 扩展脚本语言在处理恶意构造的文件时可能绕过安全限制执行系统命令，导致目标系统被控制。"
 severity = "MEDIUM"
+score = 4.6
+published = "1999-07-23"
+updated = "2026-06-16"
+remediation = "建议升级 Gnumeric 至修复版本，或禁用 Guile 插件扩展以防止恶意电子表格文件触发任意代码执行。"
 sources = ["redhat"]
-title = "CVE-1999-0719 vulnerability"
-updated = "2026-07-10"
+
+[score]
+cvss_v2 = 4.6
+cvss_v2_vector = "AV:L/AC:L/Au:N/C:P/I:P/A:P"
+
+[affected]
+vendor = "GNOME"
+product = "Gnumeric"
+
+[references]
+nvd = "https://nvd.nist.gov/vuln/detail/CVE-1999-0719"
+other = ["http://www.securityfocus.com/bid/563"]
 
 [exploit]
-exp_urls = []
 poc_urls = []
-
-[id]
-aliases = ["CVE-1999-0719"]
-ave_id = "AVE-1999-0025"
-cve_id = "CVE-1999-0719"
+exp_urls = []
+nuclei_templates = []
 
 [meta]
-collected_at = "2026-07-10T12:38:13.024326272+00:00"
+collected_at = "2026-07-10T12:39:27Z"
 status = "completed"
-
-[references]
-urls = []

vulns/1999/AVE-1999-0213.toml

@@ -0,0 +1,31 @@
+[id]
+ave_id = "AVE-1999-0213"
+cve_id = "CVE-1999-0289"
+aliases = ["CVE-1999-0289"]
+
+[basic]
+title = "Apache HTTP Server for Win32 点号追加路径信息泄露漏洞"
+description = "Apache HTTP Server Windows版本在处理URL时存在路径信息泄露漏洞。当攻击者在请求URL后追加一个点号(.)时，Apache可能绕过访问控制机制，导致受限文件被未经授权访问。此漏洞仅影响Windows平台上的Apache HTTP Server，攻击者可通过网络远程利用，无需身份认证，导致敏感信息泄露。"
+severity = "MEDIUM"
+score = 5.0
+remediation = "升级 Apache HTTP Server 至不受影响的版本，或在服务器配置中对 URL 请求进行规范化处理，过滤并拒绝以点号结尾的请求路径。对于 Windows 平台部署的 Apache 服务，建议使用 URL 重写规则拦截此类畸形请求。"
+sources = ["cve"]
+published = "1999-12-12"
+updated = "2026-06-16"
+
+[affected]
+vendor = "apache"
+product = "http_server"
+
+[exploit]
+poc_urls = []
+exp_urls = []
+nuclei_templates = []
+
+[references]
+nvd = "https://nvd.nist.gov/vuln/detail/CVE-1999-0289"
+other = ["https://www.cve.org/CVERecord?id=CVE-1999-0289"]
+
+[meta]
+collected_at = "2026-07-11T00:00:00Z"
+status = "completed"

vulns/2008/AVE-2008-0003.toml

@@ -1,47 +1,25 @@
-[id]
-ave_id = "AVE-2008-0003"
-cve_id = "CVE-2008-2992"
-aliases = ["CVE-2008-2992"]
-
 [basic]
-title = "Adobe Acrobat/Reader util.printf JavaScript 函数栈缓冲区溢出漏洞"
-description = "Adobe Acrobat 和 Reader 8.1.2 及之前版本中存在栈缓冲区溢出漏洞（CWE-119/CWE-787）。该漏洞源于 util.printf JavaScript 函数在处理特制格式字符串参数时存在输入验证缺陷，攻击者可通过构造恶意 PDF 文件并诱导用户打开，触发栈缓冲区溢出，最终实现远程代码执行。该漏洞已被 CISA 列入已知被利用漏洞目录（KEV），影响范围广泛。"
-severity = "HIGH"
-score = 7.8
-cvss_v3 = "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
-cvss_v2 = "(AV:N/AC:M/Au:N/C:C/I:C/A:C)"
-cvss_v2_score = 9.3
-published = "2008-11-04"
-updated = "2025-02-10"
-sources = ["nvd", "kev", "exploit-db"]
-remediation = "升级 Adobe Acrobat 或 Reader 至 8.1.3 及以上版本，参照 APSB08-19 安全公告安装官方补丁。若无法立即升级，建议禁用浏览器中的 PDF 插件或使用替代 PDF 阅读器。"
-
-[affected]
-vendor = "Adobe"
-product = "Acrobat and Reader"
-
-[references]
-urls = [
-    "https://nvd.nist.gov/vuln/detail/CVE-2008-2992",
-    "http://www.adobe.com/support/security/bulletins/apsb08-19.html",
-    "http://www.coresecurity.com/content/adobe-reader-buffer-overflow",
-    "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2008-2992",
-    "http://www.securityfocus.com/bid/30035",
-    "http://www.zerodayinitiative.com/advisories/ZDI-08-072/",
-    "http://www.kb.cert.org/vuls/id/593409"
-]
+description = ""
+published = ""
+remediation = "Refer to vendor advisory and upgrade to fixed version."
+score = 0.0
+severity = "UNKNOWN"
+sources = ["kev"]
+title = "CVE-2008-2992 漏洞"
+updated = ""
 
 [exploit]
-poc_urls = [
-    "https://www.exploit-db.com/exploits/6994",
-    "https://www.exploit-db.com/exploits/7006"
-]
-exp_urls = [
-    "https://www.exploit-db.com/exploits/7006"
-]
-nuclei_templates = []
+exp_urls = []
+poc_urls = []
+
+[id]
+aliases = ["CVE-2008-2992"]
+ave_id = "AVE-2008-0003"
+cve_id = "CVE-2008-2992"
 
 [meta]
+collected_at = "2026-07-10T22:44:36.492552111+00:00"
 status = "completed"
-collected_at = "2026-07-10T12:52:03.177870032Z"
-authenticity = { confidence = "high", evidence = "CISA KEV confirmed active exploitation, public PoC/EXP available" }
+
+[references]
+urls = []