deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25259
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses XML deserialization libraries in an unsafe manner.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://seclists.org/fulldisclosure/2020/Sep/22; https://seclists.org/fulldisclosure/2020/Sep/22
CVE: CVE-2020-25260
Published: 2020-09-11
Description: An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows remote attackers to execute arbitrary code because of unsafe JSON deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://seclists.org/fulldisclosure/2020/Sep/22; https://seclists.org/fulldisclosure/2020/Sep/22
CVE: CVE-2019-20917
Published: 2020-09-11
Description: An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://docs.inspircd.org/security/2019-02/; https://github.com/inspircd/inspircd/commit/2cc35d8625b7ea5cbd1d1ebb116aff86c5280162; https://github.com/inspircd/inspircd/commit/8745660fcdac7c1b80c94cfc0ff60928cd4dd4b7
CVE: CVE-2019-20918
Published: 2020-09-11
Description: An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user able to fully connect to a server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://docs.inspircd.org/security/2019-01/; https://github.com/inspircd/inspircd/commit/7b47de3c194f239c5fea09a0e49696c9af017d51; https://github.com/inspircd/inspircd/commit/bcd65de1ec4bb71591ae417fee649d7ecd37cd57
CVE: CVE-2020-25269
Published: 2020-09-11
Description: An issue was discovered in InspIRCd 2 before 2.0.29 and 3 before 3.6.0. The pgsql module contains a use after free vulnerability. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd server by any user able to connect to a server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://docs.inspircd.org/security/2020-01/; https://github.com/inspircd/inspircd/compare/426d1c8...b3f1db9; https://github.com/inspircd/inspircd/compare/v2.0.28...07d7dea
CVE: CVE-2020-24164
Published: 2020-09-11
Description: A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker to create a malicious payload that, when deserialized, will allow arbitrary code to be executed. This occurs because there is automatic use of the Java Serializable interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://github.com/ptaoussanis/nippy/issues/130; https://github.com/ptaoussanis/nippy/issues/130
CVE: CVE-2020-16214
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the 
software saves user-provided information into a comma-separated value 
(CSV) file, but it does not neutralize or incorrectly neutralizes 
special elements that could be interpreted as a command when the file is
 opened by spreadsheet software.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1236
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16218
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the 
software does not neutralize or incorrectly neutralizes 
user-controllable input before it is placed in output that is then used 
as a webpage and served to other users. Successful exploitation could 
lead to unauthorized access to patient data via a read-only web 
application.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16222
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and 
PerformanceBridge Focal Point Version A.01, when an actor claims to have
 a given identity, the software does not prove or insufficiently proves 
the claim is correct.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16228
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions C.02 and C.03, 
PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors 
MX100, MX400-MX550, MX750, MX850, and IntelliVue X3 Versions N and 
prior, the software does not check or incorrectly checks the revocation 
status of a certificate, which may cause it to use a compromised 
certificate.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-299
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-11991
Published: 2020-09-11
Description: When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be used to access any file on the server system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://lists.apache.org/thread.html/r77add973ea521185e1a90aca00ba9dae7caa8d8b944d92421702bb54%40%3Cusers.cocoon.apache.org%3E; https://lists.apache.org/thread.html/r77add973ea521185e1a90aca00ba9dae7caa8d8b944d92421702bb54%40%3Cusers.cocoon.apache.org%3E
CVE: CVE-2020-14096
Published: 2020-09-11
Description: Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=19&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=19&locale=en
CVE: CVE-2020-14100
Published: 2020-09-11
Description: In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=20&locale=en; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=20&locale=en
CVE: CVE-2020-15802
Published: 2020-09-11
Description: Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace a bonding already established on the opposing transport, BR/EDR or LE, potentially overwriting an authenticated key with an unauthenticated key, or a key with greater entropy with one with less.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://gizmodo.com/bluetooth-unveils-its-latest-security-issue-with-no-se[PII_REDACTED]; https://www.bluetooth.com/learn-about-bluetooth/bluetooth-technology/bluetooth-security/blurtooth/; https://www.kb.cert.org/vuls/id/589825
CVE: CVE-2020-16212
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. The application on the surveillance station operates in kiosk mode, which is vulnerable to local breakouts that could allow an attacker with physical access to escape the restricted environment with limited privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16216
Published: 2020-09-11
Description: In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, 
MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, 
the product receives input or data but does not validate or incorrectly 
validates that the input has the properties required to process the data
 safely and correctly, which can induce a denial-of-service condition 
through a system restart.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16220
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions C.02, C.03, 
PerformanceBridge Focal Point Version A.01, the product receives input 
that is expected to be well-formed (i.e., to comply with a certain 
syntax) but it does not validate or incorrectly validates that the input
 complies with the syntax, causing the certificate enrollment service to
 crash. It does not impact monitoring but prevents new devices from 
enrolling.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1286
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-16224
Published: 2020-09-11
Description: In Patient Information Center iX (PICiX) Versions C.02, C.03, the 
software parses a formatted message or structure but does not handle or 
incorrectly handles a length field that is inconsistent with the actual 
length of the associated data, causing the application on the 
surveillance station to restart.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-130
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01; https://www.philips.com/productsecurity; https://us-cert.cisa.gov/ics/advisories/icsma-20-254-01
CVE: CVE-2020-9239
Published: 2020-09-11
Description: Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en
CVE: CVE-2018-19946
Published: 2020-09-11
Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-295, CWE-297, CWE-295
References: https://www.qnap.com/zh-tw/security-advisory/qsa-20-05; https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE: CVE-2018-19947
Published: 2020-09-11
Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-209, CWE-210, CWE-209
References: https://www.qnap.com/zh-tw/security-advisory/qsa-20-05; https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE: CVE-2018-19948
Published: 2020-09-11
Description: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF) vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
CVSS Score: 2.0 (LOW)
CWE: CWE-352, CWE-352
References: https://www.qnap.com/zh-tw/security-advisory/qsa-20-05; https://www.qnap.com/zh-tw/security-advisory/qsa-20-05
CVE: CVE-2020-15166
Published: 2020-09-11
Description: In ZeroMQ before version 4.3.3, there is a denial-of-service vulnerability. Users with TCP transport public endpoints, even with CURVE/ZAP enabled, are impacted. If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them. This is patched in version 4.3.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/zeromq/libzmq/pull/3913; https://github.com/zeromq/libzmq/pull/3973; https://github.com/zeromq/libzmq/security/advisories/GHSA-25wp-cf8g-938m
CVE: CVE-2020-15169
Published: 2020-09-11
Description: In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default (not found) value of the `t` and `translate` helpers could be susceptible to XSS attacks. When an HTML-unsafe string is passed as the default for a missing translation key named html or ending in _html, the default string is incorrectly marked as HTML-safe and not escaped. This is patched in versions 6.0.3.3 and 5.2.4.4. A workaround without upgrading is proposed in the source advisory.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/rails/rails/security/advisories/GHSA-cfjv-5498-mph5; https://lists.debian.org/debian-lts-announce/2020/10/msg00015.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB/
CVE: CVE-2020-25276
Published: 2020-09-11
Description: An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnerability can only affect a system that has EST configured, uses client certificates to authenticate enrollment, and has had such a certificate revoked. This certificate needs to belong to a role that is authorized to enroll new end entities. (To completely mitigate this problem prior to upgrade, remove any revoked client certificates from their respective roles.)
CVSS Score: 7.3 (HIGH)
CWE: CWE-295
References: https://support.primekey.com/news/posts/ejbca-security-advisory-revocation-check-not-performed-on-est-client-certificate; https://support.primekey.com/news/posts/ejbca-security-advisory-revocation-check-not-performed-on-est-client-certificate
CVE: CVE-2020-0648
Published: 2020-09-11
Description: <p>An elevation of privilege vulnerability exists when the Windows RSoP Service Application improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how the Windows RSoP Service Application handles memory.</p>
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0648; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0648
CVE: CVE-2020-0664
Published: 2020-09-11
Description: <p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.</p>
<p>To exploit this condition, an authenticated attacker would need to send a specially crafted request to the AD|DNS service. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.</p>
<p>The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.</p>
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0664; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0664
CVE: CVE-2020-0718
Published: 2020-09-11
Description: <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account</p>
<p>To exploit the vulnerability, an authenticated attacker could send malicious requests to an Active Directory integrated DNS (ADIDNS) server.</p>
<p>The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.</p>
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0718; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0718
CVE: CVE-2020-0761
Published: 2020-09-11
Description: <p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account</p>
<p>To exploit the vulnerability, an authenticated attacker could send malicious requests to an Active Directory integrated DNS (ADIDNS) server.</p>
<p>The update addresses the vulnerability by correcting how Active Directory integrated DNS (ADIDNS) handles objects in memory.</p>
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0761; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0761
CVE: CVE-2020-0766
Published: 2020-09-11
Description: <p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how the Microsoft Store Runtime handles memory.</p>
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0766; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0766
CVE: CVE-2020-0782
Published: 2020-09-11
Description: <p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The security update addresses the vulnerability by addressing how the Windows Cryptographic Catalog Services handle objects in memory.</p>
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0782; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0782
CVE: CVE-2020-0790
Published: 2020-09-11
Description: <p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.</p>
<p>This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability (such as a remote code execution vulnerability or another elevation of privilege vulnerability) that is capable of leveraging the elevated privileges when code execution is attempted.</p>
<p>The security update addresses the vulnerability by ensuring splwow64.exe properly handles these calls..</p>
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0790; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0790
CVE: CVE-2020-0805
Published: 2020-09-11
Description: <p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could delete a targeted file they would not have permissions to.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by correcting how Windows Projected Filesystem handle file redirections.</p>
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0805; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0805
CVE: CVE-2020-0836
Published: 2020-09-11
Description: <p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become nonresponsive.</p>
<p>To exploit the vulnerability, an authenticated attacker could send malicious DNS queries to a target, resulting in a denial of service.</p>
<p>The update addresses the vulnerability by correcting how Windows DNS processes queries.</p>
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0836; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0836
CVE: CVE-2020-0837
Published: 2020-09-11
Description: <p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.</p>
<p>To exploit this vulnerability, an attacker could send a specially crafted authentication request.</p>
<p>This security update corrects how ADFS handles multi-factor authentication requests.</p>
CVSS Score: 5.0 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837