deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-17463
Published: 2020-08-13
Description: FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/158840/Fuel-CMS-1.4.7-SQL-Injection.html; https://cwe.mitre.org/data/definitions/89.html; https://getfuelcms.com
CVE: CVE-2020-11733
Published: 2020-08-13
Description: An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. An attacker, who already has access to an SSH restricted shell, can achieve root access via shell metacharacters. The attacker can then, for example, read sensitive files such as appliance admin configuration source code. This affects Spirent TestCenter and Avalanche products which chassis version <= 5.08. The SSH restricted shell is available with default credentials.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4ab; https://github.com/a05110511t/CVE/blob/master/CVE-2020-11733.md; https://gist.github.com/a05110511t/65d07bc776d7c11b4ccf112a09cca4ab
CVE: CVE-2020-13281
Published: 2020-08-13
Description: For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13281.json; https://gitlab.com/gitlab-org/gitlab/-/issues/31564; https://hackerone.com/reports/687730
CVE: CVE-2020-13286
Published: 2020-08-13
Description: For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13286.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215212; https://hackerone.com/reports/855276
CVE: CVE-2020-15925
Published: 2020-08-13
Description: A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.divisionzero.co/2020/08/12/cve-2020-15925/; https://blog.divisionzero.co/2020/08/12/cve-2020-15925/
CVE: CVE-2020-15947
Published: 2020-08-13
Description: A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.divisionzero.co/2020/08/12/cve-2020-15947/; https://blog.divisionzero.co/2020/08/12/cve-2020-15947/
CVE: CVE-2020-14483
Published: 2020-08-13
Description: A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1088
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03; https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03
CVE: CVE-2020-0261
Published: 2020-08-13
Description: In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-146059841
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2020-08-01; https://source.android.com/security/bulletin/pixel/2020-08-01
CVE: CVE-2020-17498
Published: 2020-08-13
Description: In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00038.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16672
CVE: CVE-2020-24330
Published: 2020-08-13
Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2020/08/14/1; https://bugzilla.suse.com/show_bug.cgi?id=1164472; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE: CVE-2020-24331
Published: 2020-08-13
Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file (which contains various settings related to this daemon).
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2020/08/14/1; https://bugzilla.suse.com/show_bug.cgi?id=1164472; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE: CVE-2020-24332
Published: 2020-08-13
Description: An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the creation of the system.data file is prone to symlink attacks. The tss user can be used to create or corrupt existing files, which could possibly lead to a DoS attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2020/08/14/1; https://bugzilla.suse.com/show_bug.cgi?id=1164472; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SSDL7COIFCZQMUBNAASNMKMX7W5JUHRD/
CVE: CVE-2020-24342
Published: 2020-08-13
Description: Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lua-users.org/lists/lua-l/2020-07/msg00052.html; https://github.com/lua/lua/commit/34affe7a63fc5d842580a9f23616d057e17dfe27; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QA5Q5MDQMTGXRQO3PAQ4EZFTYWJXZM5N/
CVE: CVE-2020-24343
Published: 2020-08-13
Description: Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/ccxvii/mujs/issues/136; https://github.com/ccxvii/mujs/issues/136
CVE: CVE-2020-24344
Published: 2020-08-13
Description: JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/jerryscript-project/jerryscript/issues/3976; https://github.com/jerryscript-project/jerryscript/issues/3976
CVE: CVE-2020-24345
Published: 2020-08-13
Description: JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/jerryscript-project/jerryscript/issues/3977; https://github.com/jerryscript-project/jerryscript/issues/3977
CVE: CVE-2020-24346
Published: 2020-08-13
Description: njs through 0.4.3, used in NGINX, has a use-after-free in njs_json_parse_iterator_call in njs_json.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/nginx/njs/issues/325; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/nginx/njs/issues/325
CVE: CVE-2020-24347
Published: 2020-08-13
Description: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/nginx/njs/issues/323; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/nginx/njs/issues/323
CVE: CVE-2020-24348
Published: 2020-08-13
Description: njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/nginx/njs/issues/322; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/nginx/njs/issues/322
CVE: CVE-2020-24349
Published: 2020-08-13
Description: njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://cwe.mitre.org/data/definitions/416.html; https://github.com/nginx/njs/issues/324; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-7360
Published: 2020-08-13
Description: An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticated user to escalate privileges by placing a specially crafted DLL file in the search path. This issue was fixed in version 1.0.7, which was released after April 15, 2020. (Note, the version numbering system changed significantly between version 4.3.15 and version 1.0.7.)
CVSS Score: 7.4 (HIGH)
CWE: CWE-427, CWE-427
References: https://blog.vonahi.io/when-the-path-to-system-is-wide-open/; https://blog.vonahi.io/when-the-path-to-system-is-wide-open/
CVE: CVE-2019-20383
Published: 2020-08-13
Description: ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations involving files and using symbolic links.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf; https://amonitoring.ru/article/abbyy-lpe/; https://support.abbyy.com/hc/en-us/articles/[PII_REDACTED]20-FineReader-15-Change-Log
CVE: CVE-2020-4662
Published: 2020-08-14
Description: IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/186233; https://www.ibm.com/support/pages/node/6259393; https://exchange.xforce.ibmcloud.com/vulnerabilities/186233
CVE: CVE-2019-6112
Published: 2020-08-14
Description: A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter (aka $search_term or the Search field).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/graphpaperpress/Sell-Media/commit/8ac8cebf332e0885863d0a25e16b4b180abedc47#diff-f16fea0a0c8cc36031ec339d02a4fb3b; https://metamorfosec.com/Files/Advisories/METS-2020-001-A_XSS_Vulnerability_in_Sell_Media_Plugin_v2.4.1_for_WordPress.txt; https://github.com/graphpaperpress/Sell-Media/commit/8ac8cebf332e0885863d0a25e16b4b180abedc47#diff-f16fea0a0c8cc36031ec339d02a4fb3b
CVE: CVE-2019-7410
Published: 2020-08-14
Description: There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jberger/Galileo/pull/55/files; https://metacpan.org/changes/distribution/Galileo; https://metamorfosec.com/Files/Advisories/METS-2020-002-A_Stored_XSS_Vulnerability_in_Galileo_CMS_v0.042.txt
CVE: CVE-2020-12648
Published: 2020-08-14
Description: A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web script when configured in classic editing mode.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://labs.bishopfox.com/advisories/tinymce-version-5.2.1; https://labs.bishopfox.com/advisories/tinymce-version-5.2.1
CVE: CVE-2020-16205
Published: 2020-08-14
Description: Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html; https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03; http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
CVE: CVE-2019-19643
Published: 2020-08-14
Description: ise smart connect KNX Vaillant 1.2.839 contain a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://psytester.github.io/CVE-2019-19643/; https://psytester.github.io/CVE-2019-19643/
CVE: CVE-2020-17462
Published: 2020-08-14
Description: CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/48742; https://www.exploit-db.com/exploits/48742
CVE: CVE-2020-7700
Published: 2020-08-14
Description: All versions of phpjs are vulnerable to Prototype Pollution via parse_str.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-PHPJS-598681; https://snyk.io/vuln/SNYK-JS-PHPJS-598681
CVE: CVE-2020-7701
Published: 2020-08-14
Description: madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676; https://snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676
CVE: CVE-2020-9228
Published: 2020-08-14
Description: FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploit this vulnerability to obtain certain information.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fc-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fc-en
CVE: CVE-2020-9229
Published: 2020-08-14
Description: FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploit this vulnerability to obtain certain information.
CVSS Score: 4.4 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fc-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200805-01-fc-en
CVE: CVE-2019-5591
Published: 2020-08-14
Description: A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://www.fortiguard.com/psirt/FG-IR-19-037; https://www.fortiguard.com/psirt/FG-IR-19-037; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-5591
CVE: CVE-2020-10055
Published: 2020-08-14
Description: A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) that contains a remote code execution vulnerability if the Advanced Reporting Engine is enabled. The vulnerability could allow a remote unauthenticated attacker to execute arbitrary commands on the server with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://cert-portal.siemens.com/productcert/pdf/ssa-786743.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-20-224-06; https://cert-portal.siemens.com/productcert/pdf/ssa-786743.pdf
CVE: CVE-2020-15781
Published: 2020-08-14
Description: A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30). The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser, these log messages might be interpreted and executed as code by the web application. This Cross-Site-Scripting (XSS) vulnerability might compromize the confidentiality, integrity and availability of the web application.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-370042.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-370042.pdf
CVE: CVE-2020-22720
Published: 2020-08-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-22721
Published: 2020-08-14
Description: A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscellaneous " External Programs by uploading the malicious .exe file to the external program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://syhack.wordpress.com/2020/04/18/pnotes-insecure-file-upload-vulnerability-code-execution/; https://syhack.wordpress.com/2020/04/18/pnotes-insecure-file-upload-vulnerability-code-execution/
CVE: CVE-2020-22722
Published: 2020-08-14
Description: Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing the binary as NT AUTHORITY\SYSTEM in a Windows operating system. For example, an attacker can plant a reverse shell from a low privileged user account and by restarting the computer, the malicious service will be started as NT AUTHORITY\SYSTEM by giving the attacker full system access to the remote PC.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://syhack.wordpress.com/2020/04/21/rapid-scada-local-privilege-escalation-vulnerability/; https://syhack.wordpress.com/2020/04/21/rapid-scada-local-privilege-escalation-vulnerability/
CVE: CVE-2020-7583
Published: 2020-08-14
Description: A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify files that should be protected against writing.
CVSS Score: 7.8 (HIGH)
CWE: CWE-285, CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-388646.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-388646.pdf
CVE: CVE-2020-15141
Published: 2020-08-14
Description: In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.
CVSS Score: 3.0 (LOW)
CWE: CWE-22
References: https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13; https://github.com/triaxtec/openapi-python-client/commit/3e7dfae5d0b3685abf1ede1bc6c086a116ac4746; https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-7wgr-7666-7pwj
CVE: CVE-2020-15142
Published: 2020-08-14
Description: In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13; https://github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a; https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f
CVE: CVE-2020-15145
Published: 2020-08-14
Description: In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. 1. A local regular user may modify the existing `C:\ProgramData\ComposerSetup\bin\composer.bat` in order to get elevated command execution when composer is run by an administrator. 2. A local regular user may create a specially crafted dll in the `C:\ProgramData\ComposerSetup\bin` folder in order to get Local System privileges. See: https://itm4n.github.io/windows-server-netman-dll-hijacking. 3. If the directory of the php.exe selected by the user is not in the system path, it is added without checking that it is admin secured, as per Microsoft guidelines. See: https://msrc-blog.microsoft.com/2018/04/04/triaging-a-dll-planting-vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://github.com/composer/windows-setup/commit/ca9f1435d368e3377e82d60ef0c7b795afa9f804; https://github.com/composer/windows-setup/security/advisories/GHSA-wgrx-r3qv-332c; https://github.com/composer/windows-setup/commit/ca9f1435d368e3377e82d60ef0c7b795afa9f804
CVE: CVE-2020-9708
Published: 2020-08-14
Description: The resolveRepositoryPath function doesn't properly validate user input and a malicious user may traverse to any valid Git repository outside the repoRoot. This issue may lead to unauthorized access of private Git repositories as long as the malicious user knows or brute-forces the location of the repository.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://github.com/adobe/git-server/security/advisories/GHSA-cgj4-x2hh-2x93; https://github.com/adobe/git-server/security/advisories/GHSA-cgj4-x2hh-2x93
CVE: CVE-2020-9767
Published: 2020-08-14
Description: A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.zoom.us/hc/en-us/articles/[PII_REDACTED]92-Security-CVE-2020-9767; https://support.zoom.us/hc/en-us/articles/[PII_REDACTED]92-Security-CVE-2020-9767
CVE: CVE-2015-8032
Published: 2020-08-14
Description: In Textpattern 4.5.7, an unprivileged author can change an article's markup setting.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt; https://github.com/textpattern/textpattern/commit/950d9e0e4ee46efa41e791eac6cd55d2f558c3c9; https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt
CVE: CVE-2015-8033
Published: 2020-08-14
Description: In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-521
References: https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt; https://github.com/textpattern/textpattern/commit/1c09094187b9aeb18f09697bc7d1db12d078ae10; https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt