deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0027
Published: 2020-02-13
Description: In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144040966
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-0028
Published: 2020-02-13
Description: In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-122652057
CVSS Score: 6.5 (MEDIUM)
References: https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c[PII_REDACTED]3d6206fe%40%3Cissues.karaf.apache.org%3E; https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013%40%3Cissues.karaf.apache.org%3E; https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab[PII_REDACTED]b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E
CVE: CVE-2020-0030
Published: 2020-02-13
Description: In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/2020-02-01; https://source.android.com/security/bulletin/2020-02-01
CVE: CVE-2020-3720
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3721
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3722
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3723
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3724
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3725
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3726
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3727
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3728
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3729
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3730
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3731
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3732
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3733
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3734
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3735
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3736
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3737
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3738
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3739
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2020-3740
Published: 2020-02-13
Description: Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb20-04.html; https://helpx.adobe.com/security/products/framemaker/apsb20-04.html
CVE: CVE-2019-18791
Published: 2020-02-13
Description: Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://support.lexmark.com/alerts/; http://support.lexmark.com/index?page=content&id=TE933&modifiedDate=02/04/20&actp=LIST_RECENT&userlocale=EN_US&locale=en; http://support.lexmark.com/alerts/
CVE: CVE-2019-4592
Published: 2020-02-13
Description: IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITM monitoring server possibly leading to an effective denial of service or disabling of the monitoring server. IBM X-Force ID: 167647.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/167647; https://www.ibm.com/support/pages/node/2278617; https://exchange.xforce.ibmcloud.com/vulnerabilities/167647
CVE: CVE-2019-4666
Published: 2020-02-13
Description: IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certain secure values in documents. IBM X-Force ID: 171248.
CVSS Score: 2.3 (LOW)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/171248; https://www.ibm.com/support/pages/node/1138576; https://www.ibm.com/support/pages/node/2325141
CVE: CVE-2020-3741
Published: 2020-02-13
Description: Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-08.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-08.html
CVE: CVE-2020-3742
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions, 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3743
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3744
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3745
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3746
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3747
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3748
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3749
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3750
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3751
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3752
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3753
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3754
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3755
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3756
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3757
Published: 2020-02-13
Description: Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://access.redhat.com/errata/RHSA-2020:0513; https://helpx.adobe.com/security/products/flash-player/apsb20-06.html; https://security.gentoo.org/glsa/202003-61
CVE: CVE-2020-3759
Published: 2020-02-13
Description: Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/Digital-Editions/apsb20-07.html; https://helpx.adobe.com/security/products/Digital-Editions/apsb20-07.html
CVE: CVE-2020-3760
Published: 2020-02-13
Description: Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/Digital-Editions/apsb20-07.html; https://helpx.adobe.com/security/products/Digital-Editions/apsb20-07.html
CVE: CVE-2020-3762
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to arbitrary file system write.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-3763
Published: 2020-02-13
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]1 and earlier, 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]8 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to arbitrary file system write.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/acrobat/apsb20-05.html; https://helpx.adobe.com/security/products/acrobat/apsb20-05.html
CVE: CVE-2020-7051
Published: 2020-02-13
Description: Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeover.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-732
References: https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845; https://www.linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity[PII_REDACTED]540054528-dDgg/; https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845
CVE: CVE-2020-8614
Published: 2020-02-13
Description: An issue was discovered on Askey AP4000W TDC_V1.01.003 devices. An attacker can perform Remote Code Execution (RCE) by sending a specially crafted network packer to the bd_svr service listening on TCP port 54188.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://improsec.com/tech-blog/RCE-Askey; https://improsec.com/tech-blog/RCE-Askey
CVE: CVE-2020-8800
Published: 2020-02-13
Description: SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/156321/SuiteCRM-7.11.11-Second-Order-PHP-Object-Injection.html; https://seclists.org/fulldisclosure/2020/Feb/3; https://suitecrm.com
CVE: CVE-2020-8801
Published: 2020-02-13
Description: SuiteCRM through 7.11.11 allows PHAR Deserialization.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/156324/SuiteCRM-7.11.11-Phar-Deserialization.html; http://seclists.org/fulldisclosure/2020/Feb/4; https://suitecrm.com
CVE: CVE-2020-8802
Published: 2020-02-13
Description: SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/156327/SuiteCRM-7.11.11-Bean-Manipulation.html; http://seclists.org/fulldisclosure/2020/Feb/5; https://suitecrm.com
CVE: CVE-2020-8803
Published: 2020-02-13
Description: SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/156329/SuiteCRM-7.11.11-Broken-Access-Control-Local-File-Inclusion.html; http://seclists.org/fulldisclosure/2020/Feb/6; https://suitecrm.com