Add CWE names to existing advisories

Author: TristanCacqueray

README.md

@@ -34,7 +34,8 @@ id = "HSEC-0000-0000"
 date = 2021-01-31
 
 # Optional: Classification of the advisory with respect to the Common Weakness Enumeration.
-cwe = [820]
+# Get number and names from https://cwe.mitre.org/, or look at the Security.CWE.Data module.
+cwe = ["820: Missing Synchronization"]
 
 # Arbitrary keywords.  We recommend to include keywords relating
 # to the protocols, data formats or services pertaining to the

advisories/hackage/aeson/HSEC-2023-0001.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0001"
-cwe = ["Use of Weak Hash", "Uncontrolled Resource Consumption"]
+cwe = ["328: Use of Weak Hash", "400: Uncontrolled Resource Consumption"]
 keywords = ["json", "dos", "historical"]
 aliases = ["CVE-2022-3433"]
 

advisories/hackage/base/HSEC-2023-0007.md

@@ -1,7 +1,8 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0007"
-cwe = [1284, 789]
+cwe = ["1284: Improper Validation of Specified Quantity in Input",
+       "789: Memory Allocation with Excessive Size Value"]
 keywords = ["toml", "parser", "dos"]
 
 [[affected]]

advisories/hackage/biscuit-haskell/HSEC-2023-0002.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0002"
-cwe = [347]
+cwe = ["347: Improper Verification of Cryptographic Signature"]
 keywords = ["crypto", "historical"]
 aliases = ["CVE-2022-31053"]
 related = ["GHSA-75rw-34q6-72cr"]

advisories/hackage/git-annex/HSEC-2023-0009.md

@@ -1,7 +1,8 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0009"
-cwe = [20, 78]
+cwe = ["20: Improper Input Validation",
+       "78: Improper Neutralization of Special Elements used in an OS Command"]
 keywords = ["ssh", "command-injection", "historical"]
 aliases = ["CVE-2017-12976"]
 related = ["CVE-2017-9800", "CVE-2017-12836", "CVE-2017-1000116", "CVE-2017-1000117"]

advisories/hackage/git-annex/HSEC-2023-0010.md

@@ -1,7 +1,8 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0010"
-cwe = [200, 610]
+cwe = ["200: Exposure of Sensitive Information to an Unauthorized Actor",
+       "610: Externally Controlled Reference to a Resource in Another Sphere"]
 keywords = ["exfiltration", "historical"]
 aliases = ["CVE-2018-10857"]
 

advisories/hackage/git-annex/HSEC-2023-0011.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0011"
-cwe = [200]
+cwe = ["200: Exposure of Sensitive Information to an Unauthorized Actor"]
 keywords = ["exfiltration", "pgp", "historical"]
 aliases = ["CVE-2018-10859"]
 related = ["HSEC-2023-0010", "CVE-2018-10857"]

advisories/hackage/git-annex/HSEC-2023-0012.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0012"
-cwe = [200]
+cwe = ["200: Exposure of Sensitive Information to an Unauthorized Actor"]
 keywords = ["historical"]
 
 [[affected]]

advisories/hackage/git-annex/HSEC-2023-0013.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0013"
-cwe = [312]
+cwe = ["312: Cleartext Storage of Sensitive Information"]
 keywords = ["historical"]
 aliases = ["CVE-2014-6274"]
 

advisories/hackage/hledger-web/HSEC-2023-0008.md

@@ -1,7 +1,7 @@
 ```toml
 [advisory]
 id = "HSEC-2023-0008"
-cwe = [87]
+cwe = ["87: Improper Neutralization of Alternate XSS Syntax"]
 keywords = ["web", "xss", "historical"]
 aliases = ["CVE-2021-46888"]