deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14861
Published: 2019-07-03
Description: Improper data access control in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows authenticated users to perform a CSV export of the secure hashed passwords of other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://github.com/odoo/odoo/issues/32506; https://github.com/odoo/odoo/issues/32506
CVE: CVE-2018-14862
Published: 2019-07-03
Description: Incorrect access control in the mail templating system in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier allows authenticated internal users to delete arbitrary menuitems via a crafted RPC request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://github.com/odoo/odoo/issues/32504; https://github.com/odoo/odoo/issues/32504
CVE: CVE-2018-14863
Published: 2019-07-03
Description: Incorrect access control in the RPC framework in Odoo Community 8.0 through 11.0 and Odoo Enterprise 9.0 through 11.0 allows authenticated users to call private functions via RPC.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://github.com/odoo/odoo/issues/32508; https://github.com/odoo/odoo/issues/32508
CVE: CVE-2018-14864
Published: 2019-07-03
Description: Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web script via a crafted attachment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/odoo/odoo/issues/32502; https://github.com/odoo/odoo/issues/32502
CVE: CVE-2018-14865
Published: 2019-07-03
Description: Report engine in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier does not use secure options when passing documents to wkhtmltopdf, which allows remote attackers to read local files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/odoo/odoo/issues/32501; https://github.com/odoo/odoo/issues/32501
CVE: CVE-2019-10100
Published: 2019-07-03
Description: In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-10104
Published: 2019-07-03
Description: In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-12847
Published: 2019-07-03
Description: In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-12850
Published: 2019-07-03
Description: A query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-12851
Published: 2019-07-03
Description: A CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49852.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-12866
Published: 2019-07-03
Description: An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-12867
Published: 2019-07-03
Description: Certain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-5051
Published: 2019-07-03
Description: An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-390, CWE-755, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
CVE: CVE-2019-5052
Published: 2019-07-03
Description: An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
CVE: CVE-2019-5600
Published: 2019-07-03
Description: In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the implementation, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.html; https://security.FreeBSD.org/advisories/FreeBSD-SA-19:09.iconv.asc; http://packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.html
CVE: CVE-2019-5601
Published: 2019-07-03
Description: In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html; https://security.FreeBSD.org/advisories/FreeBSD-SA-19:10.ufs.asc; http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html
CVE: CVE-2019-5602
Published: 2019-07-03
Description: In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-863
References: http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html; https://security.FreeBSD.org/advisories/FreeBSD-SA-19:11.cd_ioctl.asc; http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html
CVE: CVE-2019-6632
Published: 2019-07-03
Description: On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to encrypted configuration and/or UCS files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330
References: http://www.securityfocus.com/bid/109112; https://support.f5.com/csp/article/K01413496; http://www.securityfocus.com/bid/109112
CVE: CVE-2019-6634
Published: 2019-07-03
Description: On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any role.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/109104; https://support.f5.com/csp/article/K64855220; http://www.securityfocus.com/bid/109104
CVE: CVE-2019-6635
Published: 2019-07-03
Description: On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, when the BIG-IP system is licensed for Appliance mode, a user with either the Administrator or the Resource Administrator role can bypass Appliance mode restrictions.
CVSS Score: 4.4 (MEDIUM)
References: http://www.securityfocus.com/bid/109098; https://support.f5.com/csp/article/K11330536; https://support.f5.com/csp/article/K11330536?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-6636
Published: 2019-07-03
Description: On BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a stored cross-site scripting vulnerability in AFM feed list. In the worst case, an attacker can store a CSRF which results in code execution as the admin user. The level of user role which can perform this attack are resource administrator and administrator.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79, CWE-352
References: http://www.securityfocus.com/bid/109108; https://support.f5.com/csp/article/K68151373; http://www.securityfocus.com/bid/109108
CVE: CVE-2019-6637
Published: 2019-07-03
Description: On BIG-IP (ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results in the Linux kernel triggering OOM killer on arbitrary processes. The attack requires an authenticated user with role of "Guest" or greater privilege. Note: "No Access" cannot login so technically it's a role but a user with this access role cannot perform the attack.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/109091; https://support.f5.com/csp/article/K29149494; http://www.securityfocus.com/bid/109091
CVE: CVE-2019-6638
Published: 2019-07-03
Description: On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/109106; https://support.f5.com/csp/article/K67825238; https://support.f5.com/csp/article/K67825238?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-6639
Published: 2019-07-03
Description: On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting (XSS) issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109064; https://support.f5.com/csp/article/K61002104; http://www.securityfocus.com/bid/109064
CVE: CVE-2019-6640
Published: 2019-07-03
Description: On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP exposes sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is inserted into various profile types and accessed using SNMPv2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/109089; https://support.f5.com/csp/article/K40443301; https://support.f5.com/csp/article/K40443301?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-6641
Published: 2019-07-03
Description: On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash. The attack can only come from an authenticated user; all roles are capable of performing the attack. Unauthenticated users cannot perform this attack.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/109060; https://support.f5.com/csp/article/K22384173; https://support.f5.com/csp/article/K22384173?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-9186
Published: 2019-07-03
Description: In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost interface). This issue has been fixed in the following versions: 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-9823
Published: 2019-07-03
Description: In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312, CWE-522
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-9872
Published: 2019-07-03
Description: In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize IDE settings using a public repository, these credentials were published to this repository. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8.
CVSS Score: 8.1 (HIGH)
CWE: CWE-312, CWE-522
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2019-9873
Published: 2019-07-03
Description: In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312, CWE-522
References: https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/; https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/
CVE: CVE-2017-13719
Published: 2019-07-03
Description: The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encoded in the Authorization HTTP header. However, a missing length check in the code allows an attacker to send a string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 is dissected using the binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that has many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM little-endian format. The function at address 00415364 in IDA Pro starts the HTTP authentication process. This function calls another function at sub_ 0042CCA0 at address 0041549C. This function performs a strchr operation after base64 decoding the credentials, and stores the result on the stack, which results in a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8
CVE: CVE-2017-8226
Published: 2019-07-03
Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that sets up the default credentials on the device. If one opens this binary in IDA-pro, one will notice that this follows a ARM little endian format. The function sub_3DB2FC in IDA pro is identified to be setting up the values at address 0x003DB5A6. The sub_5C057C then sets this value and adds it to the Configuration files in /mnt/mtd/Config/Account1 file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8
CVE: CVE-2017-8227
Published: 2019-07-03
Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification (which is supported by the same binary) then there is no account lockout or timeout executed. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the ONVIF specification. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 00671618 in IDA pro is parses the WSSE security token header. The sub_ 603D8 then performs the authentication check and if it is incorrect passes to the function sub_59F4C which prints the value "Sender not authorized."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8
CVE: CVE-2017-8228
Published: 2019-07-03
Description: Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the serial number of the camera. This can allow an attacker who knows the serial number to easily add another user's camera to an attacker's cloud account and control it completely. This is possible in case of any camera that is currently not a part of an Amcrest cloud account or has been removed from the user's cloud account. Also, another requirement for a successful attack is that the user should have rebooted the camera in the last two hours. However, both of these conditions are very likely for new cameras that are sold over the Internet at many ecommerce websites or vendors that sell the Amcrest products. The successful attack results in an attacker being able to completely control the camera which includes being able to view and listen on what the camera can see, being able to change the motion detection settings and also be able to turn the camera off without the user being aware of it. Note: The same attack can be executed using the Amcrest Cloud mobile application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8