deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13511
Published: 2020-12-18
Description: An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) using the IRP 0x9c4060d4 gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110
CVE: CVE-2020-13516
Published: 2020-12-18
Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1113; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1113
CVE: CVE-2020-13517
Published: 2020-12-18
Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1114; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1114
CVE: CVE-2020-13518
Published: 2020-12-18
Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1115; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1115
CVE: CVE-2020-13527
Published: 2020-12-18
Description: An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1135
CVE: CVE-2020-13528
Published: 2020-12-18
Description: An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136
CVE: CVE-2020-13931
Published: 2020-12-18
Description: If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port 1099, which does not include authentication. CVE-2020-11969 previously addressed the creation of the JMX management interface, however the incomplete fix did not cover this edge case.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.apache.org/thread.html/r7f98907165b355dc65f28a57f15103a06173ce03261115fa46d569b4%40%3Cdev.tomee.apache.org%3E; https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9%40%3Cdev.tomee.apache.org%3E; https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E
CVE: CVE-2020-14232
Published: 2020-12-18
Description: A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user.
CVSS Score: 8.8 (HIGH)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883
CVE: CVE-2020-27780
Published: 2020-12-18
Description: A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1901094; https://bugzilla.redhat.com/show_bug.cgi?id=1901094
CVE: CVE-2020-28052
Published: 2020-12-18
Description: An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.
CVSS Score: 8.1 (HIGH)
References: https://github.com/bcgit/bc-java/wiki/CVE-2020-28052; https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c[PII_REDACTED]3d6206fe%40%3Cissues.karaf.apache.org%3E; https://lists.apache.org/thread.html/r175f5a25d100dbe2b1bd3459b3ce882a84c3ff91b120ed4ff2d57b53%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2020-7838
Published: 2020-12-18
Description: A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. This issue affects: Smilegate STOVE Client 0.0.4.72.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35851
CVE: CVE-2020-24693
Published: 2020-12-18
Description: The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization.
CVSS Score: 3.3 (LOW)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25606
Published: 2020-12-18
Description: The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25608
Published: 2020-12-18
Description: The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-89
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25609
Published: 2020-12-18
Description: The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to view and modify user data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25610
Published: 2020-12-18
Description: The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control for conference codes.
CVSS Score: 5.3 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25611
Published: 2020-12-18
Description: The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due to improper input validation, aka XSS. Successful exploitation could allow an attacker to view user conference information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-25612
Published: 2020-12-18
Description: The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files due to insufficient access control. Successful exploit could potentially allow an attacker to gain access to sensitive information.
CVSS Score: 4.9 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-27154
Published: 2020-12-18
Description: The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user information and application data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-27340
Published: 2020-12-18
Description: The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control.
CVSS Score: 6.1 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-27639
Published: 2020-12-18
Description: The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.
CVSS Score: 8.1 (HIGH)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-27640
Published: 2020-12-18
Description: The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.
CVSS Score: 8.1 (HIGH)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-35474
Published: 2020-12-18
Description: In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html; https://phabricator.wikimedia.org/T268894
CVE: CVE-2020-35475
Published: 2020-12-18
Description: In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html; https://phabricator.wikimedia.org/T268917
CVE: CVE-2020-35477
Published: 2020-12-18
Description: MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead of the desired behavior in which a revision-deletion form appears).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-670
References: https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html
CVE: CVE-2020-35478
Published: 2020-12-18
Description: MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki 1.33.0 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html; https://phabricator.wikimedia.org/T268938
CVE: CVE-2020-35479
Published: 2020-12-18
Description: MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html
CVE: CVE-2020-35480
Published: 2020-12-18
Description: An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://lists.debian.org/debian-lts-announce/2020/12/msg00034.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/; https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html
CVE: CVE-2019-16955
Published: 2020-12-18
Description: SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/; https://www.esecforte.com/cross-site-scripting-via-file-upload-vulnerability-in-solarwinds-web-help-desk/; https://www.solarwinds.com/free-tools/free-help-desk-software
CVE: CVE-2019-16957
Published: 2020-12-18
Description: SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/; https://www.esecforte.com/cross-site-scripting-vulnerability-in-solarwinds-web-help-desk/; https://www.solarwinds.com/free-tools/free-help-desk-software
CVE: CVE-2020-35548
Published: 2020-12-18
Description: An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (December 2020).
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35549
Published: 2020-12-18
Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SVE-2020-19172 (December 2020).
CVSS Score: 5.5 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35550
Published: 2020-12-18
Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-17888 (December 2020).
CVSS Score: 9.8 (CRITICAL)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35551
Published: 2020-12-18
Description: An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB write operation can be replayed, a related issue to CVE-2020-13799. The Samsung ID is SVE-2020-18100 (December 2020).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-294
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35552
Published: 2020-12-18
Description: An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. Attackers can obtain sensitive location information because the configuration file is incorrect. The Samsung ID is SVE-2020-18678 (December 2020).
CVSS Score: 5.3 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35553
Published: 2020-12-18
Description: An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cause a denial of service (unlock failure) by triggering a power-shortage incident that causes a false-positive attack detection. The Samsung ID is SVE-2020-19678 (December 2020).
CVSS Score: 7.5 (HIGH)
CWE: CWE-920
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-35554
Published: 2020-12-18
Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL error-handler vulnerability. The LG ID is LVE-SMP-200026 (December 2020).
CVSS Score: 7.8 (HIGH)
References: https://lgsecurity.lge.com/; https://lgsecurity.lge.com/
CVE: CVE-2020-35555
Published: 2020-12-18
Description: An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconnection of a call with the cover closed. The LG ID is LVE-SMP-200027 (December 2020).
CVSS Score: 7.8 (HIGH)
References: https://lgsecurity.lge.com/; https://lgsecurity.lge.com/
CVE: CVE-2020-26171
Published: 2020-12-18
Description: In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26172
Published: 2020-12-18
Description: Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is active. The JWT token does not contain an expiration timestamp.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-294
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26173
Published: 2020-12-18
Description: An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authentication is required.
CVSS Score: 3.1 (LOW)
CWE: CWE-306, CWE-639
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26174
Published: 2020-12-18
Description: tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. However, this restriction is enforced in the browser (client-side) and can be circumvented. This allows an attacker to upload any file as an attachment to a workitem.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26175
Published: 2020-12-18
Description: In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26176
Published: 2020-12-18
Description: An issue was discovered in tangro Business Workflow before 1.18.1. No (or broken) access control checks exist on the /api/document/<DocumentID>/attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to gather valid attachment IDs for workitems that do not belong to them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26177
Published: 2020-12-18
Description: In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied client-side. Manipulating any of the greyed-out values in requests to /api/profile is not prohibited server-side.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-669
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-26178
Published: 2020-12-18
Description: In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/; https://www.tangro.de/; https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/
CVE: CVE-2020-25494
Published: 2020-12-18
Description: Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html; https://github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerability; http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html