deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10595
Published: 2020-03-31
Description: pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations involving supplemental prompting by a Kerberos library. It may overflow a buffer provided by the underlying Kerberos library by a single '\0' byte if an attacker responds to a prompt with an answer of a carefully chosen length. The effect may range from heap corruption to stack corruption depending on the structure of the underlying Kerberos library, with unknown effects but possibly including code execution. This code path is not used for normal authentication, but only when the Kerberos library does supplemental prompting, such as with PKINIT or when using the non-standard no_prompt PAM configuration option.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2020/03/31/1; https://github.com/rra/pam-krb5/commit/e7879e27a37119fad4faf133a9f70bdcdc75d760; https://lists.debian.org/debian-lts-announce/2020/04/msg00000.html
CVE: CVE-2020-11414
Published: 2020-03-31
Description: An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the uploading file along with a few other parameters. The uploading file location should be inside the directory where the upload handler class is defined. Before 2020.1.330, a crafted web request could result in uploads to arbitrary locations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://docs.telerik.com/devtools/silverlight/controls/radupload/how-to/secure-upload-file-path; https://docs.telerik.com/devtools/silverlight/controls/radupload/how-to/secure-upload-file-path
CVE: CVE-2019-2391
Published: 2020-03-31
Description: Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB Inc. js-bson library version 1.1.3 and prior to.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://github.com/mongodb/js-bson/releases/tag/v1.1.4; https://github.com/mongodb/js-bson/releases/tag/v1.1.4
CVE: CVE-2020-4206
Published: 2020-03-31
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary commands on the system in the context of root user, caused by improper validation of user-supplied input. IBM X-Force ID: 174966.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174966; https://www.ibm.com/support/pages/node/6114130; https://exchange.xforce.ibmcloud.com/vulnerabilities/174966
CVE: CVE-2020-4208
Published: 2020-03-31
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174975.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174975; https://www.ibm.com/support/pages/node/6114130; https://exchange.xforce.ibmcloud.com/vulnerabilities/174975
CVE: CVE-2020-4214
Published: 2020-03-31
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete a directory caused by improper validation of user-supplied input. IBM X-Force ID: 175026.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175026; https://www.ibm.com/support/pages/node/6114130; https://exchange.xforce.ibmcloud.com/vulnerabilities/175026
CVE: CVE-2020-4235
Published: 2020-03-31
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175408.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175408; https://www.ibm.com/support/pages/node/6128931; https://exchange.xforce.ibmcloud.com/vulnerabilities/175408
CVE: CVE-2020-4236
Published: 2020-03-31
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175409; https://www.ibm.com/support/pages/node/6128937; https://exchange.xforce.ibmcloud.com/vulnerabilities/175409
CVE: CVE-2020-4237
Published: 2020-03-31
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175410.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175410; https://www.ibm.com/support/pages/node/6128943; https://exchange.xforce.ibmcloud.com/vulnerabilities/175410
CVE: CVE-2020-4238
Published: 2020-03-31
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175411.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175411; https://www.ibm.com/support/pages/node/6128949; https://exchange.xforce.ibmcloud.com/vulnerabilities/175411
CVE: CVE-2020-4239
Published: 2020-03-31
Description: IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175412.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175412; https://www.ibm.com/support/pages/node/6128955; https://exchange.xforce.ibmcloud.com/vulnerabilities/175412
CVE: CVE-2020-4240
Published: 2020-03-31
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to overwrite or create arbitrary files on the system. IBM X-Force ID: 175417.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175417; https://www.ibm.com/support/pages/node/6116488; https://exchange.xforce.ibmcloud.com/vulnerabilities/175417
CVE: CVE-2020-4241
Published: 2020-03-31
Description: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175418.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175418; https://www.ibm.com/support/pages/node/6114130; https://exchange.xforce.ibmcloud.com/vulnerabilities/175418
CVE: CVE-2020-4242
Published: 2020-03-31
Description: IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 175419.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175419; https://www.ibm.com/support/pages/node/6114130; https://exchange.xforce.ibmcloud.com/vulnerabilities/175419
CVE: CVE-2020-6008
Published: 2020-03-31
Description: LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://wordpress.org/plugins/lifterlms/#developers; https://wordpress.org/plugins/lifterlms/#developers
CVE: CVE-2019-14880
Published: 2020-03-31
Description: A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email address changes require additional verification during sign-up to reduce the risk of account compromise.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14880; https://moodle.org/security/; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14880
CVE: CVE-2019-10180
Published: 2020-03-31
Description: A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS) did not properly sanitize several parameters stored for the tokens, possibly resulting in a Stored Cross Site Scripting (XSS) vulnerability. An attacker able to modify the parameters of any token could use this flaw to trick an authenticated user into executing arbitrary JavaScript code.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10180; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10180
CVE: CVE-2019-14905
Published: 2020-03-31
Description: A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS command injections. This could result in a loss of confidentiality of the system among other issues.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20, CWE-73, CWE-668
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html; https://access.redhat.com/errata/RHSA-2020:0216
CVE: CVE-2020-11441
Published: 2020-03-31
Description: phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://github.com/phpmyadmin/phpmyadmin/issues/16056; https://github.com/phpmyadmin/phpmyadmin/issues/16056
CVE: CVE-2020-1712
Published: 2020-03-31
Description: A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712; https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89ed54; https://github.com/systemd/systemd/commit/[PII_REDACTED]28e8aa3da9f26a4487dc254f4b7abb
CVE: CVE-2019-13495
Published: 2020-03-31
Description: In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues allows remote authenticated users to inject arbitrary web script via an rpSys.html Name or Location field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/leona4040/6541e3b11da6ea7675d0498d0db98832; https://gist.github.com/leona4040/6541e3b11da6ea7675d0498d0db98832
CVE: CVE-2020-5291
Published: 2020-03-31
Description: Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be used to gain root permissions. Note that this only affects the combination of bubblewrap in setuid mode (which is typically used when unprivileged user namespaces are not supported) and the support of unprivileged user namespaces. Known to be affected are: * Debian testing/unstable, if unprivileged user namespaces enabled (not default) * Debian buster-backports, if unprivileged user namespaces enabled (not default) * Arch if using `linux-hardened`, if unprivileged user namespaces enabled (not default) * Centos 7 flatpak COPR, if unprivileged user namespaces enabled (not default) This has been fixed in the 0.4.1 release, and all affected users should update.
CVSS Score: 7.2 (HIGH)
CWE: CWE-648, CWE-269
References: https://github.com/containers/bubblewrap/commit/1f7e2ad948c051054b683461885a0215f1806240; https://github.com/containers/bubblewrap/security/advisories/GHSA-j2qp-rvxj-43vj; https://github.com/containers/bubblewrap/commit/1f7e2ad948c051054b683461885a0215f1806240
CVE: CVE-2020-5292
Published: 2020-03-31
Description: Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/attackers can execute arbitrary SQL queries negatively affecting the confidentiality, integrity, and availability of the site. Attackers can exfiltrate data like the users' and administrators' password hashes, modify data, or drop tables. The unescaped parameter is "searchUsers" when sending a POST request to "/tickets/showKanban" with a valid session. In the code, the parameter is named "users" in class.tickets.php. This issue is fixed in versions 2.0.15 and 2.1.0 beta 3.
CVSS Score: 8.7 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Leantime/leantime/commit/af0807f0b2c4c3c914b93f1c5d940e6b875f231f; https://github.com/Leantime/leantime/pull/181; https://github.com/Leantime/leantime/security/advisories/GHSA-ww6x-rhvp-55hp
CVE: CVE-2020-7009
Published: 2020-03-31
Description: Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266, CWE-269
References: https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.elastic.co/community/security/
CVE: CVE-2020-10696
Published: 2020-03-31
Description: A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/security/cve/cve-2020-10696; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10696; https://github.com/containers/buildah/pull/2245
CVE: CVE-2020-5344
Published: 2020-03-31
Description: Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.
CVSS Score: 7.0 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.dell.com/support/article/en-us/sln320717/dsa-2020-063-idrac-buffer-overflow-vulnerability?lang=en; https://www.dell.com/support/article/en-us/sln320717/dsa-2020-063-idrac-buffer-overflow-vulnerability?lang=en
CVE: CVE-2020-11445
Published: 2020-04-01
Description: TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.
CVSS Score: 5.3 (MEDIUM)
References: https://www.cnvd.org.cn/flaw/show/1916613; https://www.cnvd.org.cn/flaw/show/1916613
CVE: CVE-2020-7064
Published: 2020-04-01
Description: In PHP versions 7.2.x below 7.2.9, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while parsing EXIF data with exif_read_data() function, it is possible for malicious data to cause PHP to read one byte of uninitialized memory. This could potentially lead to information disclosure or crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html; https://bugs.php.net/bug.php?id=79282; https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html
CVE: CVE-2020-7065
Published: 2020-04-01
Description: In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mb_strtolower() function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-121, CWE-787
References: https://bugs.php.net/bug.php?id=79371; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://usn.ubuntu.com/4330-1/
CVE: CVE-2020-7066
Published: 2020-04-01
Description: In PHP versions 7.2.x below 7.2.29, 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using get_headers() with user-supplied URL, if the URL contains zero (\0) character, the URL will be silently truncated at it. This may cause some software to make incorrect assumptions about the target of the get_headers() and possibly send some information to a wrong server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-170
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00025.html; https://bugs.php.net/bug.php?id=79329; https://lists.debian.org/debian-lts-announce/2020/04/msg00021.html
CVE: CVE-2020-7263
Published: 2020-04-01
Description: Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264, CWE-732
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10314; https://kc.mcafee.com/corporate/index?page=content&id=SB10314
CVE: CVE-2020-5548
Published: 2020-04-01
Description: Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN38732359.html; https://jvn.jp/en/jp/JVN38732359/index.html; http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN38732359.html
CVE: CVE-2020-5391
Published: 2020-04-01
Description: Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0; https://github.com/auth0/wp-auth0/releases; https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE: CVE-2020-5392
Published: 2020-04-01
Description: A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0; https://github.com/auth0/wp-auth0/releases; https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE: CVE-2020-6753
Published: 2020-04-01
Description: The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0; https://github.com/auth0/wp-auth0/releases; https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE: CVE-2020-7947
Published: 2020-04-01
Description: An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with this is that the data isn't sanitized, and no input validation is performed, before the exporting of the user data. This can lead to (at least) CSV injection if a crafted Excel document is uploaded.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://auth0.com/docs/cms/wordpress; https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0; https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE: CVE-2020-7948
Published: 2020-04-01
Description: An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can perform an insecure direct object reference.
CVSS Score: 8.8 (HIGH)
References: https://auth0.com/docs/cms/wordpress; https://auth0.com/docs/security/bulletins/2020-03-31_wpauth0; https://github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6v
CVE: CVE-2020-10231
Published: 2020-04-01
Description: TP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3.0_Build_180105, NC230 through 1.3.0_Build_171205, NC250 through 1.3.0_Build_171205, NC260 through 1.5.1_Build_190805, and NC450 through 1.5.0_Build_181022 devices allow a remote NULL Pointer Dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://packetstormsecurity.com/files/157048/TP-LINK-Cloud-Cameras-NCXXX-Remote-NULL-Pointer-Dereference.html; http://seclists.org/fulldisclosure/2020/Apr/5; http://seclists.org/fulldisclosure/2020/Mar/54
CVE: CVE-2020-11449
Published: 2020-04-01
Description: An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://github.com/RioIsDown/TC7337; https://github.com/RioIsDown/TC7337
CVE: CVE-2020-11455
Published: 2020-04-01
Description: LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/157112/LimeSurvey-4.1.11-Path-Traversal.html; https://github.com/LimeSurvey/LimeSurvey/commit/daf50ebb16574badfb7ae0b8526ddc5871378f1b; https://www.exploit-db.com/exploits/48297
CVE: CVE-2020-11456
Published: 2020-04-01
Description: LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/157114/LimeSurvey-4.1.11-Cross-Site-Scripting.html; https://github.com/LimeSurvey/LimeSurvey/commit/04b118acce2a74306f365ef329cbe00efc399b26; https://www.exploit-db.com/exploits/48289
CVE: CVE-2020-11457
Published: 2020-04-01
Description: pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/157104/pfSense-2.4.4-P3-User-Manager-Cross-Site-Scripting.html; https://github.com/pfsense/pfsense/commit/3c1e53dabe966f27c9097a5a923e77f49ae5fffa; https://www.exploit-db.com/exploits/48300