deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-1801
Published: 2020-04-10
Description: There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en
CVE: CVE-2015-5524
Published: 2020-04-10
Description: An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer overflow in datablock_write because the amount of received data is not validated. The Samsung ID is SVE-2015-4018 (December 2015).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2015-8546
Published: 2020-04-10
Description: An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Galaxy Note5 with the Shannon333 chipset. There is a stack-based buffer overflow in the baseband process that is exploitable for remote code execution via a fake base station. The Samsung ID is SVE-2015-5123 (December 2015).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2015-9546
Published: 2020-04-10
Description: An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather than HTTPS. A man-in-the-middle attacker can modify the client-server data stream to insert directory traversal sequences into an extracted file path. The Samsung ID is SVE-2015-4363 (November 2015).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-22
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2015-9547
Published: 2020-04-10
Description: An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because the READ_LOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding ANR event," or "Crash on an application's native code." The Samsung ID is SVE-2015-2885 (October 2015).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-11002
Published: 2020-04-10
Description: dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the self-validating feature enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution (RCE) vulnerability. If you are using a self-validating bean an upgrade to Dropwizard 1.3.21/2.0.3 or later is strongly recommended. The changes introduced in Dropwizard 1.3.19 and 2.0.2 for CVE-2020-5245 unfortunately did not fix the underlying issue completely. The issue has been fixed in dropwizard-validation 1.3.21 and 2.0.3 or later. We strongly recommend upgrading to one of these versions.
CVSS Score: 8.0 (HIGH)
CWE: CWE-74, CWE-74
References: https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext; https://github.com/dropwizard/dropwizard/commit/d5a512f7abf965275f2a6b913ac4fe778e424242; https://github.com/dropwizard/dropwizard/pull/3208
CVE: CVE-2020-5303
Published: 2020-04-10
Description: Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated (due to duplicate IP or reaching a maximum number of inbound peers), temporary memory spikes can lead to OOM (Out-Of-Memory) exceptions. Additionally, Tendermint does not reclaim activeID of a peer after it's removed in Mempool reactor. This does not happen all the time. It only happens when a connection fails (for any reason) before the Peer is created and added to all reactors. RemovePeer is therefore called before AddPeer, which leads to always growing memory (activeIDs map). The activeIDs map has a maximum size of 65535 and the node will panic if this map reaches the maximum. An attacker can create a lot of connection attempts (exploiting above denial of service), which ultimately will lead to the node panicking. These issues are patched in Tendermint 0.33.3 and 0.32.10.
CVSS Score: 3.1 (LOW)
CWE: CWE-789, CWE-787
References: https://github.com/tendermint/tendermint/commit/e2d6859afd7dba4cf97c7f7d412e7d8fc908d1cd; https://github.com/tendermint/tendermint/security/advisories/GHSA-v24h-pjjv-mcp6; https://hackerone.com/reports/820317
CVE: CVE-2020-5330
Published: 2020-04-10
Description: Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-200
References: http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.html; https://www.dell.com/support/article/en-us/sln320366/dsa-2020-042-dell-emc-networking-security-update-for-an-information-disclosure-vulnerability?lang=en; http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.html
CVE: CVE-2020-5406
Published: 2020-04-10
Description: VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with access to those logs may gain unauthorized access to the database being used by Autoscaling.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://tanzu.vmware.com/security/cve-2020-5406; https://tanzu.vmware.com/security/cve-2020-5406
CVE: CVE-2020-6765
Published: 2020-04-10
Description: D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10165; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10165
CVE: CVE-2020-9056
Published: 2020-04-10
Description: Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user, which could possibly cause website redirection, session hijacking, or information disclosure. This vulnerability has been patched in BuySpeed version 15.3.
CVSS Score: 3.9 (LOW)
CWE: CWE-79, CWE-79
References: https://kb.cert.org/vuls/id/660597/; https://support.buyspeed.com/hc/en-us/articles/[PII_REDACTED]31-Buyspeed-15-3-0-Release-Notes; https://kb.cert.org/vuls/id/660597/
CVE: CVE-2020-11647
Published: 2020-04-10
Description: In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16474
CVE: CVE-2020-11694
Published: 2020-04-10
Description: In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-522
References: https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020/; https://gist.github.com/rubyroobs/5d273895512df5b86d5e7e1a703c8028; https://twitter.com/_ruby/status/[PII_REDACTED]90600704
CVE: CVE-2020-11701
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Cross-Site%20Request%20Forgery; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Cross-Site%20Request%20Forgery
CVE: CVE-2020-11702
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collaborate is Stored via the displayname parameter. Deletemultiple is Reflected via the files parameter. Share is Reflected via the target parameter. Share is Stored via the displayname parameter. Waitedit is Reflected via the Host header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Multiple%20Cross-Site-Scripting; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20Multiple%20Cross-Site-Scripting
CVE: CVE-2020-11703
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20HTTP%20Response%20Splitting; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20User%20Interface%20-%20HTTP%20Response%20Splitting
CVE: CVE-2020-11704
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-Scripting; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Multiple%20Cross-Site-Scripting
CVE: CVE-2020-11705
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Authenticated%20Arbitrary%20File%20Overwrite; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Authenticated%20Arbitrary%20File%20Overwrite
CVE: CVE-2020-11706
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Cross-Site-Request-Forgery; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Cross-Site-Request-Forgery
CVE: CVE-2020-11707
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Junction Link in a directory he has full control of, breaking out of the sandbox.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Sandbox%20Escape%20via%20Symlink%20or%20Junction; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Sandbox%20Escape%20via%20Symlink%20or%20Junction
CVE: CVE-2020-11708
Published: 2020-04-12
Description: An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for executing programs when certain events are triggered.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Privilege%20Escalation%20via%20EXECUTE%28%29; https://www.provideserver.com/security/; https://github.com/belong2yourself/vulnerabilities/tree/master/ProVide/Web%20Admin%20Interface%20-%20Privilege%20Escalation%20via%20EXECUTE%28%29
CVE: CVE-2020-11709
Published: 2020-04-12
Description: cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://gist.github.com/shouc/a9330df817128bc4c4132abf3de09495; https://github.com/yhirose/cpp-httplib/issues/425; https://gist.github.com/shouc/a9330df817128bc4c4132abf3de09495
CVE: CVE-2020-11710
Published: 2020-04-12
Description: An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability because it has an inaccurate bug scope and patch links. “1) Inaccurate Bug Scope - The issue scope was on Kong's docker-compose template, and not Kong's docker image itself. In reality, this issue is not associated with any version of the Kong gateway. As such, the description stating ‘An issue was discovered in docker-kong (for Kong) through 2.0.3.’ is incorrect. This issue only occurs if a user decided to spin up Kong via docker-compose without following the security documentation. The docker-compose template is meant for users to quickly get started with Kong, and is meant for development purposes only. 2) Incorrect Patch Links - The CVE currently points to a documentation improvement as a “Patch” link: https://github.com/Kong/docs.konghq.com/commit/d693827c32144943a2f45abc017c1321b33ff611.This link actually points to an improvement Kong Inc made for fool-proofing. However, instructions for how to protect the admin API were already well-documented here: https://docs.konghq.com/2.0.x/secure-admin-api/#network-layer-access-restrictions , which was first published back in 2017 (as shown in this commit: https://github.com/Kong/docs.konghq.com/commit/e99cf875d875dd84fdb751079ac37882c9972949) Lastly, the hyperlink to https://github.com/Kong/kong (an unrelated Github Repo to this issue) on the Hyperlink list does not include any meaningful information on this topic.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/Kong/docker-kong/commit/dfa095cadf7e8309155be51982d8720daf32e31c; https://github.com/Kong/docs.konghq.com/commit/d693827c32144943a2f45abc017c1321b33ff611; https://github.com/Kong/docs.konghq.com/commit/e99cf875d875dd84fdb751079ac37882c9972949
CVE: CVE-2020-11712
Published: 2020-04-12
Description: Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jenaye/cve/blob/master/readme.MD; https://sourceforge.net/p/openupload/news/; https://sourceforge.net/p/openupload/openupload-code/commit_browser
CVE: CVE-2020-11713
Published: 2020-04-12
Description: wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: https://gist.github.com/pietroborrello/7c5be2d1dc15349c4ffc8671f0aad04f; https://github.com/wolfSSL/wolfssl/pull/2894/; https://gist.github.com/pietroborrello/7c5be2d1dc15349c4ffc8671f0aad04f
CVE: CVE-2020-11714
Published: 2020-04-12
Description: eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/leona4040/PSG-6528VM-xss/blob/master/README.md; https://github.com/leona4040/PSG-6528VM-xss/blob/master/README.md
CVE: CVE-2020-11721
Published: 2020-04-12
Description: load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-824
References: https://github.com/saitoha/libsixel/issues/134; https://github.com/saitoha/libsixel/issues/134
CVE: CVE-2020-11722
Published: 2020-04-12
Description: Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00037.html; https://dpmendenhall.blogspot.com/2020/03/dungeon-crawl-stone-soup.html; https://github.com/crawl/crawl/commit/768f60da87a3fa0b5561da5ade9309577c176d04
CVE: CVE-2020-11724
Published: 2020-04-12
Description: An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://github.com/openresty/lua-nginx-module/commit/9ab38e8ee35fc08a57636b1b6190dca70b0076fa; https://github.com/openresty/openresty/blob/4e8b4c395f842a078e429c80dd063b[PII_REDACTED]/patches/ngx_http_lua-0.10.15-fix_location_capture_content_length_chunked.patch; https://lists.debian.org/debian-lts-announce/2020/07/msg00014.html
CVE: CVE-2020-11725
Published: 2020-04-12
Description: snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding, because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers, SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE, have been designed to misuse the info->owner field in a safe way
CVSS Score: 7.8 (HIGH)
References: https://github.com/torvalds/linux/blob/3b2549a3740efb8af[PII_REDACTED]067d87e466c5b/sound/core/control.c#L1434-L1474; https://lore.kernel.org/alsa-devel/s5h4ktmlfpx.wl-tiwai%40suse.de/; https://twitter.com/yabbadabbadrew/status/[PII_REDACTED]28582400
CVE: CVE-2020-11731
Published: 2020-04-13
Description: The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assistant tabs, which allow remote authenticated users to execute arbitrary JavaScript.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/media-library-assistant/#developers; https://wordpress.org/plugins/media-library-assistant/#developers
CVE: CVE-2020-11732
Published: 2020-04-13
Description: The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.
CVSS Score: 7.5 (HIGH)
References: https://wordpress.org/plugins/media-library-assistant/#developers; https://wordpress.org/plugins/media-library-assistant/#developers
CVE: CVE-2020-1759
Published: 2020-04-13
Description: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-323, CWE-330
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/; https://security.gentoo.org/glsa/202105-39
CVE: CVE-2020-8148
Published: 2020-04-13
Description: UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://community.ui.com/releases/Security-advisory-bulletin-007-007/eb639fa0-68ad-4bf5-9663-3b760eb2f93a; https://hackerone.com/reports/802079; https://community.ui.com/releases/Security-advisory-bulletin-007-007/eb639fa0-68ad-4bf5-9663-3b760eb2f93a
CVE: CVE-2020-11673
Published: 2020-04-13
Description: An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://gist.github.com/pak0s/05a0e517aeff4b1422d1a93f59718459; https://wordpress.org/plugins/poll-wp/#developers; https://gist.github.com/pak0s/05a0e517aeff4b1422d1a93f59718459
CVE: CVE-2020-9478
Published: 2020-04-13
Description: An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.rubrik.com; https://www.rubrik.com/en/advisories/rbk20200316s0012; https://www.rubrik.com
CVE: CVE-2020-8430
Published: 2020-04-13
Description: Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://advisories.stormshield.eu/2020-001/; https://www.digitemis.com/2020/02/24/digitemis-decouvre-une-vulnerabilite-au-sein-dun-produit-stormshield-cve-2020-8430/; https://www.digitemis.com/category/blog/actualite/