deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15533
Published: 2020-10-01
Description: In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com; https://www.manageengine.com/products/applications_manager/issues.html#v14750; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15533.html
CVE: CVE-2020-15663
Published: 2020-10-01
Description: If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to a previous version which would have allowed exploitation of an older bug and arbitrary code execution with System Privileges. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, and Firefox ESR < 78.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1643199; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://www.mozilla.org/security/advisories/mfsa2020-37/
CVE: CVE-2020-15664
Published: 2020-10-01
Description: By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1658214; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://www.mozilla.org/security/advisories/mfsa2020-37/
CVE: CVE-2020-15665
Published: 2020-10-01
Description: Firefox did not reset the address bar after the beforeunload dialog was shown if the user chose to remain on the page. This could have resulted in an incorrect URL being shown when used in conjunction with other unexpected browser behaviors. This vulnerability affects Firefox < 80.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1651636; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://bugzilla.mozilla.org/show_bug.cgi?id=1651636
CVE: CVE-2020-15666
Published: 2020-10-01
Description: When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess disclosure and can lead to inferring login status to services or device discovery on a local network among other attacks. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-209
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1450853; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://www.mozilla.org/security/advisories/mfsa2020-39/
CVE: CVE-2020-15667
Published: 2020-10-01
Description: When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controlled signing key. This vulnerability affects Firefox < 80.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1653371; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://bugzilla.mozilla.org/show_bug.cgi?id=1653371
CVE: CVE-2020-15668
Published: 2020-10-01
Description: A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox < 80 and Firefox for Android < 80.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-667
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1651520; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://www.mozilla.org/security/advisories/mfsa2020-39/
CVE: CVE-2020-15669
Published: 2020-10-01
Description: When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1656957; https://www.mozilla.org/security/advisories/mfsa2020-37/; https://www.mozilla.org/security/advisories/mfsa2020-40/
CVE: CVE-2020-15670
Published: 2020-10-01
Description: Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 80, Firefox ESR < 78.2, Thunderbird < 78.2, and Firefox for Android < 80.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-416, CWE-617
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1651001%2C1653626%2C1656957; https://www.mozilla.org/security/advisories/mfsa2020-36/; https://www.mozilla.org/security/advisories/mfsa2020-38/
CVE: CVE-2020-15671
Published: 2020-10-01
Description: When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.
CVSS Score: 3.1 (LOW)
CWE: CWE-200, CWE-362
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1653862; https://www.mozilla.org/security/advisories/mfsa2020-39/; https://bugzilla.mozilla.org/show_bug.cgi?id=1653862
CVE: CVE-2020-15673
Published: 2020-10-01
Description: Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1648493%2C1660800
CVE: CVE-2020-15674
Published: 2020-10-01
Description: Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81.
CVSS Score: 8.8 (HIGH)
CWE: CWE-667, CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1656063%2C1656064%2C1656067%2C1660293; https://www.mozilla.org/security/advisories/mfsa2020-42/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1656063%2C1656064%2C1656067%2C1660293
CVE: CVE-2020-15675
Published: 2020-10-01
Description: When processing surfaces, the lifetime may outlive a persistent buffer leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 81.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1654211; https://www.mozilla.org/security/advisories/mfsa2020-42/; https://bugzilla.mozilla.org/show_bug.cgi?id=1654211
CVE: CVE-2020-15676
Published: 2020-10-01
Description: Firefox sometimes ran the onload handler for SVG elements that the DOM sanitizer decided to remove, resulting in JavaScript being executed after pasting attacker-controlled data into a contenteditable element. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1646140
CVE: CVE-2020-15677
Published: 2020-10-01
Description: By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site (the one suffering from the open redirect) rather than the site the file was actually downloaded from. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1641487
CVE: CVE-2020-15678
Published: 2020-10-01
Description: When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1660211
CVE: CVE-2020-11979
Published: 2020-10-01
Description: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-379
References: https://github.com/gradle/gradle/security/advisories/GHSA-j45w-qrgf-25vm; https://lists.apache.org/thread.html/r107ea1b1a7a214bc72fe1a04207546ccef542146ae22952e1013b5cc%40%3Cdev.creadur.apache.org%3E; https://lists.apache.org/thread.html/r1dc8518dc99c42ecca5ff82d0d2de64cd5d3a4fa691eb9ee0304781e%40%3Cdev.creadur.apache.org%3E
CVE: CVE-2020-13940
Published: 2020-10-01
Description: In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://nifi.apache.org/security#CVE-2020-13940; https://nifi.apache.org/security#CVE-2020-13940
CVE: CVE-2020-14223
Published: 2020-10-01
Description: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645
CVE: CVE-2020-5387
Published: 2020-10-01
Description: Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed.
CVSS Score: 2.3 (LOW)
CWE: CWE-755, CWE-755
References: https://www.dell.com/support/article/SLN322626; https://www.dell.com/support/article/SLN322626
CVE: CVE-2020-5784
Published: 2020-10-01
Description: Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbitrary URLs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-5785
Published: 2020-10-01
Description: Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-5786
Published: 2020-10-01
Description: Cross-site request forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-5787
Published: 2020-10-01
Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-5788
Published: 2020-10-01
Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-5789
Published: 2020-10-01
Description: Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2020-57; https://www.tenable.com/security/research/tra-2020-57
CVE: CVE-2020-9486
Published: 2020-10-01
Description: In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON was printed, potentially containing sensitive values in plaintext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://nifi.apache.org/security#CVE-2020-9486; https://nifi.apache.org/security#CVE-2020-9486
CVE: CVE-2020-9487
Published: 2020-10-01
Description: In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to use the token to access the content. An unauthenticated user could repeatedly request download tokens, preventing legitimate users from requesting download tokens.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://nifi.apache.org/security#CVE-2020-9487; https://nifi.apache.org/security#CVE-2020-9487
CVE: CVE-2020-9491
Published: 2020-10-01
Description: In Apache NiFi 1.2.0 to 1.11.4, the NiFi UI and API were protected by mandating TLS v1.2, as well as listening connections established by processors like ListenHTTP, HandleHttpRequest, etc. However intracluster communication such as cluster request replication, Site-to-Site, and load balanced queues continued to support TLS v1.0 or v1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://lists.apache.org/thread.html/r2d9c21f9ec35d66f2bb42f8abe876dabd786166b6284e9a33582c718%40%3Ccommits.nifi.apache.org%3E; https://lists.apache.org/thread.html/re48582efe2ac973f8cff55c8b346825cb491c71935e15ab2d61ef3bf%40%3Ccommits.nifi.apache.org%3E; https://nifi.apache.org/security#CVE-2020-9491
CVE: CVE-2020-26511
Published: 2020-10-02
Description: The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/changeset/2388992/; https://wordpress.org/plugins/wpo365-login/#developers; https://wpvulndb.com/vulnerabilities/10418
CVE: CVE-2020-26518
Published: 2020-10-02
Description: Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_generator.php session_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained; https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained
CVE: CVE-2020-26519
Published: 2020-10-02
Description: Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=af1e390a2c7abceb32676ec684cd1dbb92907ce8; https://bugs.ghostscript.com/show_bug.cgi?id=702937; https://lists.debian.org/debian-lts-announce/2021/03/msg00012.html
CVE: CVE-2020-26523
Published: 2020-10-02
Description: Froala Editor before 3.2.2 allows XSS via pasted content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://froala.com/wysiwyg-editor/changelog/; https://froala.com/wysiwyg-editor/changelog/
CVE: CVE-2020-26524
Published: 2020-10-02
Description: CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/lukaszstu/filecloud-UE-CVE-2020-26524/blob/main/README.md; https://www.filecloud.com/releasenotes/; https://www.getfilecloud.com/releasenotes/
CVE: CVE-2020-26534
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26535
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation (and read access violation).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26536
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26537
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26538
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26539
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2020-26540
Published: 2020-10-02
Description: An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mechanism is not applied to code signing, code injection (or an information leak) can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2019-19199
Published: 2020-10-02
Description: REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.
CVSS Score: 7.4 (HIGH)
CWE: CWE-613
References: http://seclists.org/fulldisclosure/2020/Sep/49; https://www.reddoxx.com/en/products/archiving/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-049.txt
CVE: CVE-2020-12123
Published: 2020-10-02
Description: CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If a user is authenticated in the router portal, then this attack will work.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://cerne.xyz/bugs/CVE-2020-12123; https://www.wavlink.com/en_us/product/WL-WN530H4.html; https://cerne.xyz/bugs/CVE-2020-12123
CVE: CVE-2020-12124
Published: 2020-10-02
Description: A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://cerne.xyz/bugs/CVE-2020-12124; https://www.wavlink.com/en_us/product/WL-WN530H4.html; https://cerne.xyz/bugs/CVE-2020-12124
CVE: CVE-2020-12125
Published: 2020-10-02
Description: A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine instructions as root without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://cerne.xyz/bugs/CVE-2020-12125; https://www.wavlink.com/en_us/product/WL-WN530H4.html; https://cerne.xyz/bugs/CVE-2020-12125
CVE: CVE-2020-12126
Published: 2020-10-02
Description: Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause denial of service via an unauthenticated endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://cerne.xyz/bugs/CVE-2020-12126; https://www.wavlink.com/en_us/product/WL-WN530H4.html; https://cerne.xyz/bugs/CVE-2020-12126
CVE: CVE-2020-12127
Published: 2020-10-02
Description: An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings, including cleartext login details, DNS settings, and other sensitive information without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://cerne.xyz/bugs/CVE-2020-12127; https://www.wavlink.com/en_us/product/WL-WN530H4.html; https://cerne.xyz/bugs/CVE-2020-12127
CVE: CVE-2020-13168
Published: 2020-10-02
Description: SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lodestone-security/CVEs/tree/master/CVE-2020-13168; https://www.sysaid.com/product/on-premise/latest-release; https://github.com/lodestone-security/CVEs/tree/master/CVE-2020-13168