deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1674
Published: 2019-02-28
Description: A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/107184; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj; https://www.exploit-db.com/exploits/46479/
CVE: CVE-2019-6555
Published: 2019-02-28
Description: Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/107087; https://ics-cert.us-cert.gov/advisories/ICSA-19-050-03; http://www.securityfocus.com/bid/107087
CVE: CVE-2019-6547
Published: 2019-02-28
Description: Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/107086; https://ics-cert.us-cert.gov/advisories/ICSA-19-050-02; http://www.securityfocus.com/bid/107086
CVE: CVE-2019-6551
Published: 2019-02-28
Description: Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288, CWE-425
References: http://www.securityfocus.com/bid/107031; https://ics-cert.us-cert.gov/advisories/ICSA-19-045-01; http://www.securityfocus.com/bid/107031
CVE: CVE-2019-9482
Published: 2019-03-01
Description: In MISP 2.4.102, an authenticated user can view sightings that they should not be eligible for. Exploiting this requires access to the event that has received the sighting. The issue affects instances with restrictive sighting settings (event only / sighting reported only).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/MISP/MISP/commit/c69969329d197bcdd04832b03310fa73f4eb7155; https://github.com/MISP/MISP/commit/c69969329d197bcdd04832b03310fa73f4eb7155
CVE: CVE-2019-9483
Published: 2019-03-01
Description: Amazon Ring Doorbell before 3.4.7 mishandles encryption, which allows attackers to obtain audio and video data, or insert spoofed video that does not correspond to the actual person at the door.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-327
References: https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/; https://www.theverge.com/2019/2/27/18243296/ring-doorbell-hacked-fake-images-security-experts; https://dojo.bullguard.com/dojo-by-bullguard/blog/ring/
CVE: CVE-2019-9484
Published: 2019-03-01
Description: The Glen Dimplex Deutschland GmbH implementation of the Carel pCOWeb configuration tool allows remote attackers to obtain access via an HTTP session on port 10000, as demonstrated by reading the modem password (which is 1234), or reconfiguring "party mode" or "vacation mode."
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://medium.com/%40SergiuSechel/insecure-permissions-in-glen-dimplex-deutschland-gmbh-implementation-of-carel-pcoweb-configuration-ca3896f24835; https://medium.com/%40SergiuSechel/insecure-permissions-in-glen-dimplex-deutschland-gmbh-implementation-of-carel-pcoweb-configuration-ca3896f24835
CVE: CVE-2018-20798
Published: 2019-03-01
Description: The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://redmine.pfsense.org/issues/9223; https://redmine.pfsense.org/issues/9223
CVE: CVE-2018-20799
Published: 2019-03-01
Description: In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior does not match the sshguard documentation), which might make it easier for attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
References: https://redmine.pfsense.org/issues/9223; https://redmine.pfsense.org/issues/9223
CVE: CVE-2018-8790
Published: 2019-03-01
Description: Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/107254; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142952; https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.062.17802
CVE: CVE-2019-9543
Published: 2019-03-01
Description: An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-674
References: http://www.securityfocus.com/bid/107238; https://gitlab.freedesktop.org/poppler/poppler/issues/730; https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadgenericbitmap-poppler-0-74-0/
CVE: CVE-2019-9544
Published: 2019-03-01
Description: An issue was discovered in Bento4 1.5.1-628. An out of bounds write occurs in AP4_CttsTableEntry::AP4_CttsTableEntry() located in Core/Ap4Array.h. It can be triggered by sending a crafted file to (for example) the mp42hls binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/axiomatic-systems/Bento4/issues/374; https://research.loginsoft.com/bugs/out-of-bounds-write-in-function-ap4_cttstableentryap4_cttstableentry-bento4-1-5-1-0/; https://github.com/axiomatic-systems/Bento4/issues/374
CVE: CVE-2019-9545
Published: 2019-03-01
Description: An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.
CVSS Score: 8.8 (HIGH)
CWE: CWE-674
References: https://gitlab.freedesktop.org/poppler/poppler/issues/731; https://research.loginsoft.com/bugs/recursive-function-call-in-function-jbig2streamreadtextregion-poppler-0-74-0/; https://gitlab.freedesktop.org/poppler/poppler/issues/731
CVE: CVE-2019-9546
Published: 2019-03-01
Description: SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-005.md; https://support.solarwinds.com/SuccessCenter/s/article/CVE-2019-9546-Orion-Platform-Vulnerability; https://support.solarwinds.com/Success_Center/Orion_Platform/Orion_Documentation/Additional_Resources/Orion_Platform_2018-4_Hotfix_2
CVE: CVE-2019-9547
Published: 2019-03-01
Description: In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a circular descriptor chain that would result in a partial denial of service in the SPDK vhost target, because the vhost target did not properly detect such chains.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-834
References: https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143; https://github.com/spdk/spdk/releases/tag/v19.01; https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143
CVE: CVE-2019-8278
Published: 2019-03-02
Description: Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107258; https://scriptinjection.blogspot.com/2019/02/invision-power-board-331-348-stored-xss.html; http://www.securityfocus.com/bid/107258
CVE: CVE-2019-8279
Published: 2019-03-02
Description: Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://scriptinjection.blogspot.com/2019/02/vanilla-forums-25-stored-xss-in-any.html; https://scriptinjection.blogspot.com/2019/02/vanilla-forums-25-stored-xss-in-any.html
CVE: CVE-2019-9549
Published: 2019-03-03
Description: An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a level=1 account, a similar issue to CVE-2018-18935.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/PopojiCMS/PopojiCMS/issues/17; https://github.com/PopojiCMS/PopojiCMS/issues/17
CVE: CVE-2019-9550
Published: 2019-03-03
Description: DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/ShaoGongBra/dhcms/issues/1; https://github.com/ShaoGongBra/dhcms/issues/1
CVE: CVE-2019-9551
Published: 2019-03-04
Description: An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/millken/doyocms/issues/2; https://github.com/millken/doyocms/issues/2
CVE: CVE-2019-9552
Published: 2019-03-04
Description: Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://github.com/lmy[PII_REDACTED]/p2pProject/issues/1; https://github.com/lmy[PII_REDACTED]/p2pProject/issues/1
CVE: CVE-2019-9563
Published: 2019-03-04
Description: In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://git.bluemind.net/bluemind/commit/b11aa12d3c2f4c5dac4f9059f8b6bac1bf873244; https://forum.bluemind.net/viewtopic.php?pid=8049#p8049; https://forum.bluemind.net/viewtopic.php?pid=8054#p8054
CVE: CVE-2019-9565
Published: 2019-03-04
Description: Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occurs because the product attempts to access a share with the PLUG-INS subdomain name; an attacker may be able to use Active Directory Domain Services to register that name.
CVSS Score: 9.1 (CRITICAL)
References: https://gosecure.net/2019/02/20/abusing-unsafe-defaults-in-active-directory/; https://www.druide.com/en/news/security-improvement-antidote-windows; https://gosecure.net/2019/02/20/abusing-unsafe-defaults-in-active-directory/
CVE: CVE-2019-9566
Published: 2019-03-04
Description: FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.iwantacve.cn/index.php/archives/127/; http://www.iwantacve.cn/index.php/archives/127/
CVE: CVE-2019-9567
Published: 2019-03-04
Description: The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.openwall.net/full-disclosure/2019/02/05/4; https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/; https://wordpress.org/plugins/forminator/#developers
CVE: CVE-2019-9568
Published: 2019-03-04
Description: The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://lists.openwall.net/full-disclosure/2019/02/05/4; https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/; https://wordpress.org/plugins/forminator/#developers
CVE: CVE-2019-6206
Published: 2019-03-04
Description: An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106687; https://support.apple.com/HT209443; http://www.securityfocus.com/bid/106687
CVE: CVE-2019-6235
Published: 2019-03-04
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106724; https://support.apple.com/HT209443; https://support.apple.com/HT209446
CVE: CVE-2017-15515
Published: 2019-03-04
Description: NetApp SnapCenter Server prior to 4.0 is susceptible to cross site scripting vulnerability that could allow a privileged user to inject arbitrary scripts into the custom secondary policy label field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107272; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.securityfocus.com/bid/107272
CVE: CVE-2018-5482
Published: 2019-03-04
Description: NetApp SnapCenter Server prior to 4.1 does not set the secure flag for a sensitive cookie in an HTTPS session which can allow the transmission of the cookie in plain text over an unencrypted channel.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: http://www.securityfocus.com/bid/107274; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.securityfocus.com/bid/107274
CVE: CVE-2019-9570
Published: 2019-03-05
Description: An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/11; https://github.com/yzmcms/yzmcms/issues/11
CVE: CVE-2019-9572
Published: 2019-03-05
Description: SchoolCMS version 2.3.1 allows file upload via the theme upload feature at admin.php?m=admin&c=theme&a=upload by using the .zip extension along with the _Static substring, changing the Content-Type to application/zip, and placing PHP code after the ZIP header. This ultimately allows execution of arbitrary PHP code in Public\Home\1_Static.php because of mishandling in the Application\Admin\Controller\ThemeController.class.php Upload() function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/PearlyNautilus/Security-Code-Review/issues/3; https://github.com/PearlyNautilus/Security-Code-Review/issues/3
CVE: CVE-2018-15361
Published: 2019-03-05
Description: UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-124, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-003-ultravnc-buffer-underwrite/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8258
Published: 2019-03-05
Description: UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-004-ultravnc-heap-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8259
Published: 2019-03-05
Description: UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1199.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665, CWE-401
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8260
Published: 2019-03-05
Description: UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC client RRE decoder code, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8261
Published: 2019-03-05
Description: UltraVNC revision 1199 has a out-of-bounds read vulnerability in VNC code inside client CoRRE decoder, caused by multiplication overflow. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1200.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8262
Published: 2019-03-05
Description: UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1204.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8263
Published: 2019-03-05
Description: UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. User interaction is required to trigger this vulnerability. This vulnerability has been fixed in revision 1206.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2018-19636
Published: 2019-03-05
Description: Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges
CVSS Score: 7.3 (HIGH)
CWE: CWE-306, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html; https://bugzilla.suse.com/show_bug.cgi?id=1117751; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE: CVE-2018-19637
Published: 2019-03-05
Description: Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection
CVSS Score: 2.8 (LOW)
CWE: CWE-377, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html; https://bugzilla.suse.com/show_bug.cgi?id=1117776; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE: CVE-2018-19638
Published: 2019-03-05
Description: In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
CVSS Score: 2.2 (LOW)
CWE: CWE-377, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html; https://bugzilla.suse.com/show_bug.cgi?id=1118460; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE: CVE-2018-19639
Published: 2019-03-05
Description: If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html; https://bugzilla.suse.com/show_bug.cgi?id=1118462; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE: CVE-2018-19640
Published: 2019-03-05
Description: If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-377, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html; https://bugzilla.suse.com/show_bug.cgi?id=1118463; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html
CVE: CVE-2019-6200
Published: 2019-03-05
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106694; https://support.apple.com/HT209443; https://support.apple.com/HT209446
CVE: CVE-2019-6202
Published: 2019-03-05
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106697; https://support.apple.com/HT209443; https://support.apple.com/HT209446
CVE: CVE-2019-6205
Published: 2019-03-05
Description: A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/156051/XNU-vm_map_copy-Insufficient-Fix.html; http://www.securityfocus.com/bid/106695; https://support.apple.com/HT209443