deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27658
Published: 2020-10-29
Description: Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1004, CWE-732
References: https://www.synology.com/security/advisory/Synology_SA_20_14; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1086; https://www.synology.com/security/advisory/Synology_SA_20_14
CVE: CVE-2020-25516
Published: 2020-10-29
Description: WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0781; https://github.com/piuppi/Proof-of-Concepts/blob/main/WSO2/CVE-2020-25516.md; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0781
CVE: CVE-2020-21266
Published: 2020-10-29
Description: Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.broadleafcommerce.com/docs/core/5.1/release-notes/5.1.15-ga; https://www.broadleafcommerce.com/docs/core/5.1/release-notes/5.1.15-ga
CVE: CVE-2020-5937
Published: 2020-10-29
Description: On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4 (L4) behavioral denial-of-service (DoS) traffic.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K58290051; https://support.f5.com/csp/article/K58290051
CVE: CVE-2020-5938
Published: 2020-10-29
Description: On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length than the BIG-IP configuration would otherwise allow.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://support.f5.com/csp/article/K76610106; https://support.f5.com/csp/article/K76610106
CVE: CVE-2020-7384
Published: 2020-10-29
Description: Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine.
CVSS Score: 7.0 (HIGH)
CWE: CWE-77, CWE-77
References: http://packetstormsecurity.com/files/160004/Rapid7-Metasploit-Framework-msfvenom-APK-Template-Command-Injection.html; http://packetstormsecurity.com/files/161200/Metasploit-Framework-6.0.11-Command-Injection.html; https://github.com/rapid7/metasploit-framework/pull/14288
CVE: CVE-2019-4547
Published: 2020-10-29
Description: IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 165949.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165949; https://www.ibm.com/support/pages/node/6356607; https://exchange.xforce.ibmcloud.com/vulnerabilities/165949
CVE: CVE-2019-4563
Published: 2020-10-29
Description: IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 166624.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/166624; https://www.ibm.com/support/pages/node/6356607; https://exchange.xforce.ibmcloud.com/vulnerabilities/166624
CVE: CVE-2020-27993
Published: 2020-10-29
Description: Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/48920; https://www.exploit-db.com/exploits/48920
CVE: CVE-2020-4721
Published: 2020-10-29
Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187868.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187868; https://www.ibm.com/support/pages/node/6356497; https://exchange.xforce.ibmcloud.com/vulnerabilities/187868
CVE: CVE-2020-4722
Published: 2020-10-29
Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187870.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187870; https://www.ibm.com/support/pages/node/6356497; https://exchange.xforce.ibmcloud.com/vulnerabilities/187870
CVE: CVE-2020-4723
Published: 2020-10-29
Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 187873.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187873; https://www.ibm.com/support/pages/node/6356497; https://exchange.xforce.ibmcloud.com/vulnerabilities/187873
CVE: CVE-2020-4724
Published: 2020-10-29
Description: IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187874; https://www.ibm.com/support/pages/node/6356497; https://exchange.xforce.ibmcloud.com/vulnerabilities/187874
CVE: CVE-2020-4864
Published: 2020-10-29
Description: IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-290
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190567; https://www.ibm.com/support/pages/node/6356441; https://exchange.xforce.ibmcloud.com/vulnerabilities/190567
CVE: CVE-2020-5931
Published: 2020-10-29
Description: On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with a OneConnect profile may incorrectly handle WebSockets related HTTP response headers, causing TMM to restart.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K25400442; https://support.f5.com/csp/article/K25400442
CVE: CVE-2020-5932
Published: 2020-10-29
Description: On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K12002065; https://support.f5.com/csp/article/K12002065
CVE: CVE-2020-5933
Published: 2020-10-29
Description: On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP compression profile processes compressed HTTP message payloads that require deflation, a Slowloris-style attack can trigger an out-of-memory condition on the BIG-IP system.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K26244025; https://support.f5.com/csp/article/K26244025
CVE: CVE-2020-5934
Published: 2020-10-29
Description: On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logout (SLO) URL are passing through a TCP Keep-Alive connection, traffic to TMM can be disrupted.
CVSS Score: 6.5 (MEDIUM)
References: https://support.f5.com/csp/article/K44808538; https://support.f5.com/csp/article/K44808538
CVE: CVE-2020-5935
Published: 2020-10-29
Description: On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual server associated with an MQTT profile and an iRule performing manipulations on that traffic, TMM may produce a core file.
CVSS Score: 5.9 (MEDIUM)
References: https://support.f5.com/csp/article/K62830532; https://support.f5.com/csp/article/K62830532
CVE: CVE-2020-5936
Published: 2020-10-29
Description: On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel (TMM) process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://support.f5.com/csp/article/K44020030; https://support.f5.com/csp/article/K44020030
CVE: CVE-2020-25780
Published: 2020-10-29
Description: In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a log file can instead view a file outside of the log-files folder.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://kb.commvault.com/article/63264; http://kb.commvault.com/article/63264
CVE: CVE-2020-27744
Published: 2020-10-29
Description: An issue was discovered on Western Digital My Cloud NAS devices before 5.04.114. They allow remote code execution with resultant escalation of privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.comparitech.com/blog/information-security/security-vulnerabilities-80000-devices-update-now/; https://www.westerndigital.com/support/productsecurity/wdc-20007-my-cloud-firmware-version-5-04-114; https://www.comparitech.com/blog/information-security/security-vulnerabilities-80000-devices-update-now/
CVE: CVE-2020-27995
Published: 2020-10-29
Description: SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/products/applications_manager/issues.html#v14560; https://www.manageengine.com/products/applications_manager/issues.html#v14560
CVE: CVE-2020-27747
Published: 2020-10-29
Description: An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator (4 digits), a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As result, remote attacker retrieves all passwords from another systems, available for affected account.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-307
References: https://github.com/jet-pentest/CVE-2020-27747; https://www.clickstudios.com.au/; https://github.com/jet-pentest/CVE-2020-27747
CVE: CVE-2020-27996
Published: 2020-10-29
Description: An issue was discovered in SmartStoreNET before 4.0.1. It does not properly consider the need for a CustomModelPartAttribute decoration in certain ModelBase.CustomProperties situations.
CVSS Score: 8.8 (HIGH)
References: https://github.com/smartstore/SmartStoreNET/commit/8702c6140f4fc91956ef35dba12d24492fb3f768; https://github.com/smartstore/SmartStoreNET/compare/4.0.0...4.0.1; https://securitylab.github.com/advisories/GHSL-2020-138-139-SmartstoreAG-SmartStoreNET
CVE: CVE-2020-27998
Published: 2020-10-29
Description: An issue was discovered in FastReport before 2020.4.0. It lacks a ScriptSecurity feature and therefore may mishandle (for example) GetType, typeof, TypeOf, DllImport, LoadLibrary, and GetProcAddress.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/FastReports/FastReport/compare/v2020.3.0...v2020.4.0; https://github.com/FastReports/FastReport/pull/206; https://opensource.fast-report.com/2020/09/report-script-security.html
CVE: CVE-2020-27886
Published: 2020-10-29
Description: An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the username_available function of the includes/functions.php file (which is called by login.php).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso; https://github.com/EyesOfNetworkCommunity/eonweb/issues/76; https://www.eyesofnetwork.com/en
CVE: CVE-2020-27887
Published: 2020-10-29
Description: An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso; https://github.com/EyesOfNetworkCommunity/eonweb/issues/76; https://www.eyesofnetwork.com/en
CVE: CVE-2020-14323
Published: 2020-10-29
Description: A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-170, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html; https://bugzilla.redhat.com/show_bug.cgi?id=1891685
CVE: CVE-2020-25646
Published: 2020-10-29
Description: A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confidentiality
CVSS Score: 7.5 (HIGH)
CWE: CWE-117, CWE-116
References: https://github.com/ansible-collections/community.crypto/commit/233d1afc296f6770e905a1785ee2f35af7605e43; https://github.com/ansible-collections/community.crypto/commit/233d1afc296f6770e905a1785ee2f35af7605e43
CVE: CVE-2020-26205
Published: 2020-10-29
Description: Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machine_list view.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://github.com/salopensource/sal/commit/145bb72daf8460bdedbbc9fb708d346283e7a568; https://github.com/salopensource/sal/pull/405; https://github.com/salopensource/sal/commit/145bb72daf8460bdedbbc9fb708d346283e7a568
CVE: CVE-2020-27885
Published: 2020-10-29
Description: Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim while the hacker maintains access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.wso2.com/display/Security/2020+Advisories; https://www.rodrigofavarini.com.br/cybersecurity/multiple-xss-on-api-manager-3-1-0/; https://docs.wso2.com/display/Security/2020+Advisories
CVE: CVE-2020-27014
Published: 2020-10-30
Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains a race condition vulnerability in the Web Threat Protection Blocklist component, that if exploited, could allow an attacker to case a kernel panic or crash.\n\n\r\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09974; https://www.zerodayinitiative.com/advisories/ZDI-20-1285/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09974
CVE: CVE-2020-27015
Published: 2020-10-30
Description: Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-209
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09975; https://www.zerodayinitiative.com/advisories/ZDI-20-1286/; https://helpcenter.trendmicro.com/en-us/article/TMKA-09975
CVE: CVE-2020-7759
Published: 2020-10-30
Description: The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a specifically-crafted input in the relationIds parameter as demonstrated by the following request: http://vulnerable.pimcore.example/admin/classificationstore/relations?relationIds=[{"keyId"%3a"''","groupId"%3a"'asd'))+or+1%3d1+union+(select+1,2,3,4,5,6,name,8,password,'',11,12,'',14+from+users)+--+"}]
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/pimcore/pimcore/pull/7315; https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1017405; https://github.com/pimcore/pimcore/pull/7315
CVE: CVE-2020-7760
Published: 2020-10-30
Description: This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/codemirror/CodeMirror/commit/55d[PII_REDACTED]c9231ffdf555ae[PII_REDACTED]bbb; https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMARMOTTAWEBJARS-1024450; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1024449
CVE: CVE-2020-4584
Published: 2020-10-30
Description: IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184574.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184574; https://www.ibm.com/support/pages/node/6357065; https://exchange.xforce.ibmcloud.com/vulnerabilities/184574
CVE: CVE-2020-4588
Published: 2020-10-30
Description: IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184579; https://www.ibm.com/support/pages/node/6357037; https://exchange.xforce.ibmcloud.com/vulnerabilities/184579
CVE: CVE-2020-7373
Published: 2020-10-30
Description: vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is the preferred CVE ID to track this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/; https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4445227-vbulletin-5-6-0-5-6-1-5-6-2-security-patch; https://github.com/rapid7/metasploit-framework/pull/13970
CVE: CVE-2020-15277
Published: 2020-10-30
Description: baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://basercms.net/security/20201029; https://github.com/baserproject/basercms/commit/bb027c3967b0430adcff2d2fedbc23d39077563b; https://github.com/baserproject/basercms/security/advisories/GHSA-6fmv-q269-55cw
CVE: CVE-2020-15273
Published: 2020-10-30
Description: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit feed settings, Edit widget area, Sub site new registration, New category registration. Arbitrary JavaScript may be executed by entering specific characters in the account that can access the file upload function category list, subsite setting list, widget area edit, and feed list on the management screen. The issue was introduced in version 4.0.0. It is fixed in version 4.4.1.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/baserproject/basercms/commit/b70474ef9dcee6ad[PII_REDACTED]625dc7ca9041a1; https://github.com/baserproject/basercms/security/advisories/GHSA-wpww-4jf4-4hx8; https://packagist.org/packages/baserproject/basercms
CVE: CVE-2020-15276
Published: 2020-10-30
Description: baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-79
References: https://basercms.net/security/20201029; https://github.com/baserproject/basercms/commit/d14f506385f21d67d5ff3462f204d4c2321b7c54; https://github.com/baserproject/basercms/security/advisories/GHSA-fw5q-j9p4-3vxg
CVE: CVE-2020-5991
Published: 2020-10-30
Description: NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5094; https://nvidia.custhelp.com/app/answers/detail/a_id/5094
CVE: CVE-2020-15703
Published: 2020-10-31
Description: There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an unprivileged user can check for the existence of any files on the system as root.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://ubuntu.com/security/notices/USN-4537-1; https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html; https://ubuntu.com/security/notices/USN-4537-1
CVE: CVE-2020-5425
Published: 2020-10-31
Description: Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the SSO operator dashboard at the same time, with the same username, from two different identity providers, one can acquire the token of the other and thus operate with their permissions. Note: Foundation may be vulnerable only if: 1) The system zone is set up to use a SAML identity provider 2) There are internal users that have the same username as users in the external SAML provider 3) Those duplicate-named users have the scope to access the SSO operator dashboard 4) The vulnerability doesn't appear with LDAP because of chained authentication.
CVSS Score: 7.9 (HIGH)
CWE: CWE-287, CWE-287
References: https://tanzu.vmware.com/security/cve-2020-5425; https://tanzu.vmware.com/security/cve-2020-5425