alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2019-14591 (published 2019-11-14)
Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel, netapp
Affected products: cloud_backup, data_availability_services, graphics_driver, solidfire_baseboard_management_controller, solidfire_baseboard_management_controller_firmware, steelstore_cloud_integrated_storage
CVE-2019-14596 (published 2020-01-17)
Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: chipset_inf_utility
CVE-2019-14598 (published 2020-02-13)
Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: intel, netapp
Affected products: converged_security_management_engine_firmware, steelstore_cloud_integrated_storage
CVE-2019-14599 (published 2019-12-16)
Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: intel
Affected products: control_center-i
CVE-2019-1460 (published 2020-01-24)
A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook for Android Spoofing Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)
Affected vendors: microsoft
Affected products: outlook
CVE-2019-14600 (published 2020-01-17)
Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: snmp_subagent_stand-alone
CVE-2019-14601 (published 2020-01-17)
Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: raid_web_console_3
CVE-2019-14602 (published 2019-11-14)
Improper permissions in the installer for the Nuvoton* CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel, microsoft
Affected products: nuvoton_consumer_infrared, windows
CVE-2019-14603 (published 2019-12-16)
Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: quartus_prime
CVE-2019-14604 (published 2019-12-16)
Null pointer dereference in the FPGA kernel driver for Intel(R) Quartus(R) Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: intel
Affected products: quartus_prime
CVE-2019-14605 (published 2019-12-16)
Improper permissions in the installer for the Intel(R) SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: setup_and_configuration_software_platform_discovery_utility
CVE-2019-14607 (published 2019-12-16)
Improper conditions check in multiple Intel® Processors may allow an authenticated user to potentially enable partial escalation of privilege, denial of service and/or information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Weakness: CWE-754
Affected vendors: intel
Affected products: core_i3-1000g1, core_i3-1000g1_firmware, core_i3-1000g4, core_i3-1000g4_firmware, core_i3-1005g1, core_i3-1005g1_firmware, core_i3-10110u, core_i3-10110u_firmware, core_i3-10110y, core_i3-10110y_firmware, core_i3-6006u, core_i3-6006u_firmware, core_i3-6098p, core_i3-6098p_firmware, core_i3-6100, core_i3-6100_firmware, core_i3-6100e, core_i3-6100e_firmware, core_i3-6100h, core_i3-6100h_firmware, core_i3-6100t, core_i3-6100t_firmware, core_i3-6100te, core_i3-6100te_firmware, core_i3-6100u
CVE-2019-14608 (published 2019-12-16)
Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: cd1iv128mk, cd1iv128mk_firmware, cd1m3128mk, cd1m3128mk_firmware, cd1p64gk, cd1p64gk_firmware, d34010wyb, d34010wyb_firmware, de3815tybe, de3815tybe_firmware, nuc6cays, nuc6cays_firmware, nuc6i5syh, nuc6i5syh_firmware, nuc6i7kyk, nuc6i7kyk_firmware, nuc7cjyh, nuc7cjyh_firmware, nuc7i3dnhe, nuc7i3dnhe_firmware, nuc7i5dnke, nuc7i5dnke_firmware, nuc7i7dnke, nuc7i7dnke_firmware, nuc8i3cysm
CVE-2019-14609 (published 2019-12-16)
Improper input validation in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: cd1iv128mk, cd1iv128mk_firmware, cd1m3128mk, cd1m3128mk_firmware, cd1p64gk, cd1p64gk_firmware, d34010wyb, d34010wyb_firmware, de3815tybe, de3815tybe_firmware, nuc6cays, nuc6cays_firmware, nuc6i5syh, nuc6i5syh_firmware, nuc6i7kyk, nuc6i7kyk_firmware, nuc7cjyh, nuc7cjyh_firmware, nuc7i3dnhe, nuc7i3dnhe_firmware, nuc7i5dnke, nuc7i5dnke_firmware, nuc7i7dnke, nuc7i7dnke_firmware, nuc8i3cysm
CVE-2019-1461 (published 2019-12-10)
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Affected vendors: microsoft
Affected products: office, office_365_proplus, word
CVE-2019-14610 (published 2019-12-16)
Improper access control in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: cd1iv128mk, cd1iv128mk_firmware, cd1m3128mk, cd1m3128mk_firmware, cd1p64gk, cd1p64gk_firmware, d34010wyb, d34010wyb_firmware, de3815tybe, de3815tybe_firmware, nuc6cays, nuc6cays_firmware, nuc6i5syh, nuc6i5syh_firmware, nuc6i7kyk, nuc6i7kyk_firmware, nuc7cjyh, nuc7cjyh_firmware, nuc7i3dnhe, nuc7i3dnhe_firmware, nuc7i5dnke, nuc7i5dnke_firmware, nuc7i7dnke, nuc7i7dnke_firmware, nuc8i3cysm
CVE-2019-14611 (published 2019-12-16)
Integer overflow in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: intel
Affected products: cd1iv128mk, cd1iv128mk_firmware, cd1m3128mk, cd1m3128mk_firmware, cd1p64gk, cd1p64gk_firmware, d34010wyb, d34010wyb_firmware, de3815tybe, de3815tybe_firmware, nuc6cays, nuc6cays_firmware, nuc6i5syh, nuc6i5syh_firmware, nuc6i7kyk, nuc6i7kyk_firmware, nuc7cjyh, nuc7cjyh_firmware, nuc7i3dnhe, nuc7i3dnhe_firmware, nuc7i5dnke, nuc7i5dnke_firmware, nuc7i7dnke, nuc7i7dnke_firmware, nuc8i3cysm
CVE-2019-14612 (published 2019-12-16)
Out of bounds write in firmware for Intel(R) NUC(R) may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: cd1iv128mk, cd1iv128mk_firmware, cd1m3128mk, cd1m3128mk_firmware, cd1p64gk, cd1p64gk_firmware, d34010wyb, d34010wyb_firmware, de3815tybe, de3815tybe_firmware, nuc6cays, nuc6cays_firmware, nuc6i5syh, nuc6i5syh_firmware, nuc6i7kyk, nuc6i7kyk_firmware, nuc7cjyh, nuc7cjyh_firmware, nuc7i3dnhe, nuc7i3dnhe_firmware, nuc7i5dnke, nuc7i5dnke_firmware, nuc7i7dnke, nuc7i7dnke_firmware, nuc8i3cysm
CVE-2019-14613 (published 2020-01-17)
Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: vtune_profiler
CVE-2019-14615 (published 2020-01-17)
Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected vendors: canonical, intel
Affected products: atom_e3805, atom_e3805_firmware, atom_e3815, atom_e3815_firmware, atom_e3825, atom_e3825_firmware, atom_e3826, atom_e3826_firmware, atom_e3827, atom_e3827_firmware, atom_e3845, atom_e3845_firmware, atom_e620, atom_e620_firmware, atom_e620t, atom_e620t_firmware, atom_e640, atom_e640_firmware, atom_e640t, atom_e640t_firmware, atom_e660, atom_e660_firmware, atom_e660t, atom_e660t_firmware, atom_e680
CVE-2019-1462 (published 2019-12-10)
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-908
Affected vendors: microsoft
Affected products: office, office_365_proplus, powerpoint
CVE-2019-14620 (published 2020-08-13)
Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable denial of service via adjacent access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: ac_3165, ac_3165_firmware, ac_3168, ac_3168_firmware, ac_7265, ac_7265_firmware, ac_8260, ac_8260_firmware, ac_8265, ac_8265_firmware, ac_9260, ac_9260_firmware, ac_9461, ac_9461_firmware, ac_9462, ac_9462_firmware, ac_9560, ac_9560_firmware, ax200, ax200_firmware, ax201, ax201_firmware
CVE-2019-14625 (published 2020-03-12)
Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: field_programmable_gate_array_programmable_acceleration_card_n3000, field_programmable_gate_array_programmable_acceleration_card_n3000_firmware
CVE-2019-14626 (published 2020-03-12)
Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: field_programmable_gate_array_programmable_acceleration_card_n3000, field_programmable_gate_array_programmable_acceleration_card_n3000_firmware
CVE-2019-14629 (published 2020-01-17)
Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-732
Affected vendors: intel
Affected products: data_analytics_acceleration_library
CVE-2019-1463 (published 2019-12-10)
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: microsoft
Affected products: office, office_365_proplus
CVE-2019-14630 (published 2020-08-13)
Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: dsl3310_thunderbolt, dsl3310_thunderbolt_firmware, dsl3510_thunderbolt, dsl3510_thunderbolt_firmware, dsl4410_thunderbolt, dsl4410_thunderbolt_firmware, dsl4510_thunderbolt, dsl4510_thunderbolt_firmware, dsl5320_thunderbolt_2, dsl5320_thunderbolt_2_firmware, dsl5520_thunderbolt_2, dsl5520_thunderbolt_2_firmware, dsl6340_thunderbolt_3, dsl6340_thunderbolt_3_firmware, dsl6540_thunderbolt_3, dsl6540_thunderbolt_3_firmware, jhl6240_thunderbolt_3, jhl6240_thunderbolt_3_firmware, jhl6340_thunderbolt_3, jhl6340_thunderbolt_3_firmware, jhl6540_thunderbolt_3, jhl6540_thunderbolt_3_firmware, jhl7340_thunderbolt_3, jhl7340_thunderbolt_3_firmware, jhl7540_thunderbolt_3
CVE-2019-1464 (published 2019-12-10)
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: microsoft
Affected products: excel, office, office_365_proplus
CVE-2019-1465 (published 2019-12-10)
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466, CVE-2019-1467.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14652 (published 2020-02-13)
explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: amazon
Affected products: aws_javascript_s3_explorer
CVE-2019-14653 (published 2019-08-03)
pandao Editor.md 1.5.0 allows XSS via an attribute of an ABBR or SUP element.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: ipandao
Affected products: editor.md
CVE-2019-14654 (published 2019-08-05)
In Joomla! 3.9.7 and 3.9.8, inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option. In other words, the filter attribute in subform fields allows remote code execution. This is fixed in 3.9.9.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: joomla
Affected products: joomla\!
CVE-2019-14656 (published 2019-10-08)
Yealink phones through 2019-08-04 do not properly check user roles in POST requests. Consequently, the default User account (with a password of user) can make admin requests via HTTP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: yeahlink
Affected products: t49g, t49g_firmware, t58v, t58v_firmware, vp59, vp59_firmware
CVE-2019-14657 (published 2019-10-08)
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitrary code execution as root.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: yeahlink
Affected products: t49g, t49g_firmware, t58v, t58v_firmware, vp59, vp59_firmware
CVE-2019-1466 (published 2019-12-10)
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1467.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14662 (published 2019-08-05)
Brandy 1.20.1 has a stack-based buffer overflow in fileio_openout in fileio.c via crafted BASIC source code.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: brandy_project
Affected products: brandy
CVE-2019-14663 (published 2019-08-05)
Brandy 1.20.1 has a stack-based buffer overflow in fileio_openin in fileio.c via crafted BASIC source code.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: brandy_project
Affected products: brandy
CVE-2019-14664 (published 2019-08-05)
In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, he unknowingly leaks the plaintext of the encrypted message part(s) back to the attacker. This attack variant bypasses protection mechanisms implemented after the "EFAIL" attacks.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-319
Affected vendors: enigmail, fedoraproject
Affected products: enigmail, fedora
CVE-2019-14665 (published 2019-08-05)
Brandy 1.20.1 has a heap-based buffer overflow in define_array in variables.c via crafted BASIC source code.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: brandy_project
Affected products: brandy
CVE-2019-14666 (published 2019-09-25)
GLPI through 9.4.3 is prone to account takeover by abusing the ajax/autocompletion.php autocompletion feature. The lack of correct validation leads to recovery of the token generated via the password reset functionality, and thus an authenticated attacker can set an arbitrary password for any user. This vulnerability can be exploited to take control of admin account. This vulnerability could be also abused to obtain other sensitive fields like API keys or password hashes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-200
Affected vendors: glpi-project
Affected products: glpi
CVE-2019-14667 (published 2019-08-05)
Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-14668 (published 2019-08-05)
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the transaction description field. The JavaScript code is executed during deletion of a transaction link.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-14669 (published 2019-08-05)
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-1467 (published 2019-12-10)
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1465, CVE-2019-1466.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14670 (published 2019-08-05)
Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name field. The JavaScript code is executed during rule-from-bill creation.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-14671 (published 2019-08-05)
Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fints_url to import/job/configuration, and import/create/fints.
Severity: LOW (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-20
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-14672 (published 2019-08-05)
Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability name field. The JavaScript code is executed upon an error condition during a visit to the account show page.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: firefly-iii
Affected products: firefly_iii
CVE-2019-14678 (published 2019-11-14)
SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File Exfiltration, Server Side Request Forgery, and/or Potential Denial of Service attacks. This vulnerability also affects the XMLV2 LIBNAME engine when the AUTOMAP option is used.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-611
Affected vendors: hp, ibm, linux, microsoft, oracle, sas
Affected products: aix, base_sas, hp-ux, linux_kernel, solaris, windows, windows_10, windows_7, windows_8, windows_8.1, windows_server_2012, windows_server_2016, windows_server_2019, xml_mapper, z\/os
CVE-2019-14679 (published 2019-08-08)
core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: reputeinfosystems
Affected products: arprice_lite
CVE-2019-1468 (published 2019-12-10)
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14680 (published 2019-08-08)
The admin-renamer-extended (aka Admin renamer extended) plugin 3.2.1 for WordPress allows wp-admin/plugins.php?page=admin-renamer-extended/admin.php CSRF.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: mijnpress
Affected products: admin-renamer-extended
CVE-2019-14681 (published 2019-08-08)
The Deny All Firewall plugin before 1.1.7 for WordPress allows wp-admin/options-general.php?page=daf_settings&daf_remove=true CSRF.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: deny_all_firewall_project
Affected products: deny_all_firewall
CVE-2019-14682 (published 2019-08-08)
The acf-better-search (aka ACF: Better Search) plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbs_admin_page CSRF.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Weakness: CWE-352
Affected vendors: acf\
Affected products: _better_search_project
CVE-2019-14683 (published 2019-08-08)
The codection "Import users from CSV with meta" plugin before 1.14.2.2 for WordPress allows wp-admin/admin-ajax.php?action=acui_delete_attachment CSRF.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N)
Weakness: CWE-352
Affected vendors: codection
Affected products: import_users_from_csv_with_meta
CVE-2019-14684 (published 2019-08-20)
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14687.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: trendmicro
Affected products: password_manager
CVE-2019-14685 (published 2019-08-21)
A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-428
Affected vendors: microsoft, trendmicro
Affected products: antivirus_\+_security_2019, internet_security_2019, maximum_security_2019, premium_security_2019, windows
CVE-2019-14686 (published 2019-08-21)
A DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of products (v15) Folder Shield component and the standalone Trend Micro Ransom Buster (1.0) tool in which, if exploited, would allow an attacker to load a malicious DLL, leading to elevated privileges.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: microsoft, trendmicro
Affected products: antivirus_\+_security_2019, internet_security_2019, maximum_security_2019, premium_security_2019, ransom_buster, windows
CVE-2019-14687 (published 2019-08-20)
A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service's process. This process is very similar, yet not identical to CVE-2019-14684.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: trendmicro
Affected products: password_manager
CVE-2019-14688 (published 2020-02-20)
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: microsoft, trendmicro
Affected products: control_manager, endpoint_sensor, im_security, mobile_security, officescan, scanmail, security, serverprotect, windows
CVE-2019-1469 (published 2019-12-10)
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_rt_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14690 (published 2019-08-06)
AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14691 (published 2019-08-06)
AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14692 (published 2019-08-06)
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14693 (published 2019-08-08)
Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-611
Affected vendors: zohocorp
Affected products: manageengine_assetexplorer
CVE-2019-14694 (published 2019-08-28)
A use-after-free flaw in the sandbox container implemented in cmdguard.sys in Comodo Antivirus 12.0.0.6870 can be triggered due to a race condition when handling IRP_MJ_CLEANUP requests in the minifilter for directory change notifications. This allows an attacker to cause a denial of service (BSOD) when an executable is run inside the container.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-362
Affected vendors: comodo
Affected products: antivirus
CVE-2019-14695 (published 2019-08-06)
A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via com/libs/Table.php because Subscribers Table ordering is mishandled.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: sygnoos
Affected products: popup_builder
CVE-2019-14696 (published 2019-08-06)
Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-school
Affected products: open-school
CVE-2019-14697 (published 2019-08-06)
musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: musl-libc
Affected products: musl
CVE-2019-14698 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running under the HTTPD web server, a buffer overflow in the param parameter leads to remote code execution in the context of the nobody account.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14699 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can exploit OS Command Injection in the filename parameter for remote code execution as root. This occurs in the Mainproc executable file, which can be run from the HTTPD web server.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-1470 (published 2019-12-10)
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: microsoft
Affected products: windows_10, windows_7, windows_8.1, windows_server_2008, windows_server_2012, windows_server_2016, windows_server_2019
CVE-2019-14700 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. There is disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This occurs because the filename specified in the TZ parameter is accessed with a substantial delay if that file exists.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14701 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read operations on an arbitrary file via Path Traversal in the TZ parameter, but cannot retrieve the data that is read. This causes a denial of service if the filename is, for example, /dev/random.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-22
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14702 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilities exist in 13 forms that are reachable through HTTPD. An attacker can, for example, create an admin account.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14703 (published 2019-08-06)
A CSRF issue was discovered in webparam?user&action=set&param=add in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 to create an admin account.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14704 (published 2019-08-06)
An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the uploadfile field.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14705 (published 2019-08-06)
An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 because any valid cookie can be used to make requests as an admin.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14706 (published 2019-08-06)
A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker without authorization can upload a file to upload.php with a filename longer than 256 bytes. This will be placed in the updownload area. It will not be deleted, because of a buffer overflow in a Bash command string.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14707 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14708 (published 2019-08-06)
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the action parameter leads to remote code execution in the context of the nobody account.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-14709 (published 2019-08-06)
A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-522
Affected vendors: microdigital
Affected products: mdc-n2190v, mdc-n2190v_firmware, mdc-n4090, mdc-n4090_firmware, mdc-n4090w, mdc-n4090w_firmware
CVE-2019-1471 (published 2019-12-10)
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2019-14711 (published 2020-10-23)
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: verifone
Affected products: mx900, mx900_firmware
CVE-2019-14712 (published 2020-10-23)
Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: verifone
Affected products: verix_os, vx520
CVE-2019-14713 (published 2020-10-23)
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: verifone
Affected products: mx900, mx900_firmware
CVE-2019-14715 (published 2020-10-23)
Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: verifone
Affected products: p200, p200_firmware, p400, p400_firmware, vx_805, vx_805_firmware, vx_820, vx_820_firmware
CVE-2019-14716 (published 2020-10-23)
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: verifone
Affected products: verix_os, vx520
CVE-2019-14717 (published 2020-10-23)
Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: verifone
Affected products: verix_os, vx520
CVE-2019-14718 (published 2020-10-23)
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: verifone
Affected products: mx900, mx900_firmware
CVE-2019-14719 (published 2020-10-23)
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: verifone
Affected products: mx900, mx900_firmware
CVE-2019-1472 (published 2019-12-10)
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1474.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: microsoft
Affected products: windows_10, windows_server_2016, windows_server_2019
CVE-2019-14721 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-639
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14722 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14723 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14724 (published 2019-09-11)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-639
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14725 (published 2019-09-11)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-639
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14726 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14727 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14728 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14729 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14730 (published 2019-09-10)
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: control-webpanel
Affected products: webpanel
CVE-2019-14731 (published 2019-08-07)
An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other people's cookies via the Rich Text Box.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: cnezsoft
Affected products: zentao
CVE-2019-14732 (published 2019-08-07)
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14733 (published 2019-08-07)
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14734 (published 2019-08-07)
AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: adplug_project, fedoraproject
Affected products: adplug, fedora
CVE-2019-14737 (published 2019-10-14)
Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: ubisoft
Affected products: uplay