deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-9390
Published: 2019-09-20
Description: The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://security.szurek.pl/admin-management-xtended-240-privilege-escalation.html; https://wordpress.org/plugins/admin-management-xtended/#developers; https://security.szurek.pl/admin-management-xtended-240-privilege-escalation.html
CVE: CVE-2015-9391
Published: 2019-09-20
Description: The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/yawpp/#developers; https://wpvulndb.com/vulnerabilities/8351; https://wordpress.org/plugins/yawpp/#developers
CVE: CVE-2016-10996
Published: 2019-09-20
Description: The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: http://www.pritect.net/blog/optinmonster-1-1-4-6-security-vulnerability; https://wordpress.org/plugins/optinmonster/#developers; http://www.pritect.net/blog/optinmonster-1-1-4-6-security-vulnerability
CVE: CVE-2016-10997
Published: 2019-09-20
Description: The beauty-premium theme 1.0.8 for WordPress has CSRF with resultant arbitrary file upload in includes/sendmail.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpvulndb.com/vulnerabilities/8412; https://www.exploit-db.com/exploits/39552; https://wpvulndb.com/vulnerabilities/8412
CVE: CVE-2016-10998
Published: 2019-09-20
Description: The ocim-mp3 plugin through 2016-03-07 for WordPress has wp-content/plugins/ocim-mp3/source/pages.php?id= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/8425; https://wpvulndb.com/vulnerabilities/8425
CVE: CVE-2016-10999
Published: 2019-09-20
Description: The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=1771; https://www.vulnerability-lab.com/get_content.php?id=1771
CVE: CVE-2016-11000
Published: 2019-09-20
Description: The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://seclists.org/bugtraq/2016/Feb/183; https://wordpress.org/plugins/wp-ultimate-exporter/#developers; https://seclists.org/bugtraq/2016/Feb/183
CVE: CVE-2016-11001
Published: 2019-09-20
Description: The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/user-submitted-posts/#developers; https://www.securityfocus.com/archive/1/537616/30/0/threaded; https://wordpress.org/plugins/user-submitted-posts/#developers
CVE: CVE-2016-11002
Published: 2019-09-20
Description: The Elegant Themes Extra theme before 1.2.4 for WordPress has privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.pritect.net/blog/elegant-themes-security-vulnerability; https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products; http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE: CVE-2016-11003
Published: 2019-09-20
Description: The Elegant Themes Bloom plugin before 1.1.1 for WordPress has privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.pritect.net/blog/elegant-themes-security-vulnerability; https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products; http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE: CVE-2016-11004
Published: 2019-09-20
Description: The Elegant Themes Monarch plugin before 1.2.7 for WordPress has privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.pritect.net/blog/elegant-themes-security-vulnerability; https://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products; http://www.pritect.net/blog/elegant-themes-security-vulnerability
CVE: CVE-2016-11005
Published: 2019-09-20
Description: The instalinker plugin before 1.1.2 for WordPress has includes/instalinker-admin-preview.php?client_id= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://rastating.github.io/instalinker-reflected-xss-information-disclosure/; https://wordpress.org/plugins/instalinker/#developers; https://rastating.github.io/instalinker-reflected-xss-information-disclosure/
CVE: CVE-2016-11006
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11007
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11008
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11009
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11010
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11011
Published: 2019-09-20
Description: The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities; https://wordpress.org/plugins/wp-invoice/#developers; https://wpvulndb.com/vulnerabilities/8378
CVE: CVE-2016-11012
Published: 2019-09-20
Description: The sola-support-tickets plugin before 3.13 for WordPress has incorrect access control for /wp-admin with resultant XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/sola-support-tickets/#developers; https://wpvulndb.com/vulnerabilities/8389; https://wordpress.org/plugins/sola-support-tickets/#developers
CVE: CVE-2016-11013
Published: 2019-09-20
Description: The wp-listings plugin before 2.0.2 for WordPress has includes/views/single-listing.php XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/agentevolution/wp-listings/pull/52; https://wordpress.org/plugins/wp-listings/#developers; https://github.com/agentevolution/wp-listings/pull/52
CVE: CVE-2019-16642
Published: 2019-09-20
Description: App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yeyinshi/tuzicms/issues/6; https://github.com/yeyinshi/tuzicms/issues/6
CVE: CVE-2015-9392
Published: 2019-09-20
Description: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/bugtraq/2015/Dec/13; https://wordpress.org/plugins/users-ultra/#developers; https://wpvulndb.com/vulnerabilities/8350
CVE: CVE-2015-9393
Published: 2019-09-20
Description: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/users-ultra/#developers; https://wpvulndb.com/vulnerabilities/8350; https://wordpress.org/plugins/users-ultra/#developers
CVE: CVE-2015-9394
Published: 2019-09-20
Description: The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/users-ultra/#developers; https://wpvulndb.com/vulnerabilities/8350; https://wordpress.org/plugins/users-ultra/#developers
CVE: CVE-2015-9395
Published: 2019-09-20
Description: The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://seclists.org/bugtraq/2015/Dec/12; https://wordpress.org/plugins/users-ultra/#developers; https://wpvulndb.com/vulnerabilities/8349/
CVE: CVE-2015-9396
Published: 2019-09-20
Description: The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/auto-thickbox-plus/#developers; https://wpvulndb.com/vulnerabilities/8344; https://wordpress.org/plugins/auto-thickbox-plus/#developers
CVE: CVE-2015-9397
Published: 2019-09-20
Description: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html; https://wordpress.org/plugins/gocodes/#developers; https://wpvulndb.com/vulnerabilities/8322
CVE: CVE-2015-9398
Published: 2019-09-20
Description: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html; https://wordpress.org/plugins/gocodes/#developers; https://wpvulndb.com/vulnerabilities/8322
CVE: CVE-2015-9399
Published: 2019-09-20
Description: The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_468b117b2dc86cb3d2ae4b8c81884a99.html; https://wordpress.org/plugins/wp-stats-dashboard/#developers; https://wpvulndb.com/vulnerabilities/8316
CVE: CVE-2015-9400
Published: 2019-09-20
Description: The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_b31beb377f24e401c9ec44a0f331a174.html; https://wordpress.org/plugins/wordpress-meta-robots/#developers; https://wpvulndb.com/vulnerabilities/8304
CVE: CVE-2015-9401
Published: 2019-09-20
Description: The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_ae9e4b6fefceaebd216ddcf003f88bdd.html; https://wordpress.org/plugins/websimon-tables/#developers; https://wpvulndb.com/vulnerabilities/8293
CVE: CVE-2015-9402
Published: 2019-09-20
Description: The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://seclists.org/bugtraq/2015/Nov/93; https://wordpress.org/plugins/users-ultra/#developers; https://wpvulndb.com/vulnerabilities/8243
CVE: CVE-2015-9403
Published: 2019-09-20
Description: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/134240/; https://wordpress.org/plugins/neuvoo-jobroll/#developers; https://packetstormsecurity.com/files/134240/
CVE: CVE-2015-9404
Published: 2019-09-20
Description: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/134240/; https://wordpress.org/plugins/neuvoo-jobroll/#developers; https://packetstormsecurity.com/files/134240/
CVE: CVE-2015-9405
Published: 2019-09-20
Description: The wp-piwik plugin before 1.0.5 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/braekling/WP-Matomo/commit/5110bfdb437a9f19b185ba8af33776fcb5e19940; https://wordpress.org/plugins/wp-piwik/#developers; https://wpvulndb.com/vulnerabilities/8216
CVE: CVE-2015-9407
Published: 2019-09-20
Description: The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/133593/; https://wordpress.org/plugins/xpinner-lite/#developers; https://wpvulndb.com/vulnerabilities/8194
CVE: CVE-2015-9408
Published: 2019-09-20
Description: The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://packetstormsecurity.com/files/133593/; https://wordpress.org/plugins/xpinner-lite/#developers; https://wpvulndb.com/vulnerabilities/8194
CVE: CVE-2019-16533
Published: 2019-09-20
Description: On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers; https://www.facebook.com/Huang.YuHsiang.Phone/posts/[PII_REDACTED]; https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
CVE: CVE-2019-16534
Published: 2019-09-20
Description: On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers; https://www.facebook.com/Huang.YuHsiang.Phone/posts/[PII_REDACTED]; https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
CVE: CVE-2019-16643
Published: 2019-09-20
Description: An issue was discovered in ZrLog 2.1.1. There is a Stored XSS vulnerability in the article_edit area.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/94fzb/zrlog/issues/54; https://github.com/94fzb/zrlog/issues/54
CVE: CVE-2019-16644
Published: 2019-09-20
Description: App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yeyinshi/tuzicms/issues/6; https://github.com/yeyinshi/tuzicms/issues/6
CVE: CVE-2019-4505
Published: 2019-09-20
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/164364; https://www.ibm.com/support/pages/node/964766; https://exchange.xforce.ibmcloud.com/vulnerabilities/164364
CVE: CVE-2019-4565
Published: 2019-09-20
Description: IBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 166626.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/166626; https://www.ibm.com/support/pages/security-bulletin-ibm-security-key-lifecycle-manager-uses-weak-password-policy-cve-2019-4565; https://exchange.xforce.ibmcloud.com/vulnerabilities/166626
CVE: CVE-2018-11200
Published: 2019-09-20
Description: An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mautic/mautic/releases/tag/2.14.0; https://github.com/mautic/mautic/releases/tag/2.14.0
CVE: CVE-2019-5521
Published: 2019-09-20
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on the host. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-125
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0757; https://www.vmware.com/security/advisories/VMSA-2019-0012.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0757
CVE: CVE-2018-17789
Published: 2019-09-20
Description: Prospecta Master Data Online (MDO) allows CSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/154498/Master-Data-Online-Cross-Site-Request-Forgery-Data-Tampering.html; https://packetstormsecurity.com/files/cve/CVE-2018-17789; http://packetstormsecurity.com/files/154498/Master-Data-Online-Cross-Site-Request-Forgery-Data-Tampering.html
CVE: CVE-2019-11280
Published: 2019-09-20
Description: Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can gain additional privileges by inviting themselves to spaces that they should not have access to.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://pivotal.io/security/cve-2019-11280; https://pivotal.io/security/cve-2019-11280
CVE: CVE-2019-11326
Published: 2019-09-20
Description: An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A guest is allowed to login. Once logged in as a guest, an attacker can browse a URL to read the password of the administrative user. The same procedure allows a regular user to gain administrative privileges. The guest login is possible in the default configuration.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425
References: https://mezdanak.de/2019/06/21/iot-full-disclosure-topcon-positioning-net-g5-receiver/; https://mezdanak.de/2019/06/21/iot-full-disclosure-topcon-positioning-net-g5-receiver/
CVE: CVE-2019-11327
Published: 2019-09-20
Description: An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vulnerability. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's files system.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://mezdanak.de/2019/06/21/iot-full-disclosure-topcon-positioning-net-g5-receiver/; https://mezdanak.de/2019/06/21/iot-full-disclosure-topcon-positioning-net-g5-receiver/
CVE: CVE-2019-14814
Published: 2019-09-20
Description: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE: CVE-2019-14816
Published: 2019-09-20
Description: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE: CVE-2019-16645
Published: 2019-09-20
Description: An issue was discovered in Embedthis GoAhead 2.5.0. Certain pages (such as goform/login and config/log_off_page.htm) create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack.
CVSS Score: 8.6 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/154652/GoAhead-2.5.0-Host-Header-Injection.html; https://github.com/Ramikan/Vulnerabilities/blob/master/GoAhead%20Web%20server%20HTTP%20Header%20Injection; http://packetstormsecurity.com/files/154652/GoAhead-2.5.0-Host-Header-Injection.html
CVE: CVE-2014-10396
Published: 2019-09-20
Description: The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/128186/; https://packetstormsecurity.com/files/128186/
CVE: CVE-2014-10397
Published: 2019-09-20
Description: The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/128188/; https://packetstormsecurity.com/files/128188/
CVE: CVE-2015-9406
Published: 2019-09-20
Description: Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/133778/; https://wpvulndb.com/vulnerabilities/9890; https://packetstormsecurity.com/files/133778/
CVE: CVE-2019-15138
Published: 2019-09-20
Description: The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.npmjs.com/advisories/1095; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-6145
Published: 2019-09-20
Description: Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428
References: https://help.forcepoint.com/security/CVE/CVE-2019-6145.html; https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145; https://help.forcepoint.com/security/CVE/CVE-2019-6145.html
CVE: CVE-2019-6649
Published: 2019-09-20
Description: F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.
CVSS Score: 9.1 (CRITICAL)
References: https://support.f5.com/csp/article/K05123525; https://support.f5.com/csp/article/K05123525