deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15389
Published: 2020-06-29
Description: jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/uclouvain/openjpeg/issues/1261; https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html; https://pastebin.com/4sDKQ7U8
CVE: CVE-2020-15393
Published: 2020-06-29
Description: In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=831eebad70a25f55b5745453ac252d4afe997187
CVE: CVE-2019-20415
Published: 2020-06-30
Description: Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-70849; https://jira.atlassian.com/browse/JRASERVER-70849
CVE: CVE-2019-20416
Published: 2020-06-30
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-70856; https://jira.atlassian.com/browse/JRASERVER-70856
CVE: CVE-2017-18922
Published: 2020-06-30
Description: It was discovered that websockets.c in LibVNCServer prior to 0.9.12 did not properly decode certain WebSocket frames. A malicious attacker could exploit this by sending specially crafted WebSocket frames to a server, causing a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00033.html
CVE: CVE-2020-15395
Published: 2020-06-30
Description: In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQJCEQRRPTN5CY5URDFTEJU3A2VKLNBA/; https://mediaarea.net/en/MediaInfo; https://sourceforge.net/p/mediainfo/bugs/1127/
CVE: CVE-2020-5580
Published: 2020-06-30
Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspecified vectors.
CVSS Score: 8.1 (HIGH)
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36391; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5581
Published: 2020-06-30
Description: Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36393; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5582
Published: 2020-06-30
Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36455/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5583
Published: 2020-06-30
Description: Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36408/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5584
Published: 2020-06-30
Description: Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36433/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5585
Published: 2020-06-30
Description: Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36432/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5586
Published: 2020-06-30
Description: Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36453/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5587
Published: 2020-06-30
Description: Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36409/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5588
Published: 2020-06-30
Description: Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN55497111/index.html; https://kb.cybozu.support/article/36410/; https://jvn.jp/en/jp/JVN55497111/index.html
CVE: CVE-2020-5601
Published: 2020-06-30
Description: Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://jvn.jp/en/jp/JVN40039627/index.html; https://www.e-tax.nta.go.jp/topics/topics_200618.htm; https://jvn.jp/en/jp/JVN40039627/index.html
CVE: CVE-2020-5602
Published: 2020-06-30
Description: Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://jvn.jp/en/vu/JVNVU90307594/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf; https://jvn.jp/en/vu/JVNVU90307594/index.html
CVE: CVE-2020-5603
Published: 2020-06-30
Description: Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software (CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit (EM Configurator) Ver. 1.010L and earlier, GT Designer3 (GOT2000) Ver. 1.221F and earlier, GX LogViewer Ver. 1.96A and earlier, GX Works2 Ver. 1.586L and earlier, GX Works3 Ver. 1.058L and earlier, M_CommDTM-HART Ver. 1.00A, M_CommDTM-IO-Link Ver. 1.02C and earlier, MELFA-Works Ver. 4.3 and earlier, MELSEC-L Flexible High-Speed I/O Control Module Configuration Tool Ver.1.004E and earlier, MELSOFT FieldDeviceConfigurator Ver. 1.03D and earlier, MELSOFT iQ AppPortal Ver. 1.11M and earlier, MELSOFT Navigator Ver. 2.58L and earlier, MI Configurator Ver. 1.003D and earlier, Motion Control Setting Ver. 1.005F and earlier, MR Configurator2 Ver. 1.72A and earlier, MT Works2 Ver. 1.156N and earlier, RT ToolBox2 Ver. 3.72A and earlier, and RT ToolBox3 Ver. 1.50C and earlier) allows an attacker to cause a denial of service (DoS) condition attacks via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://jvn.jp/en/vu/JVNVU90307594/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-004_en.pdf; https://jvn.jp/en/vu/JVNVU90307594/index.html
CVE: CVE-2019-20893
Published: 2020-06-30
Description: An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim's machine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/BlastsMods/JoinPartyRCE; https://github.com/BlastsMods/JoinPartyRCE
CVE: CVE-2020-15396
Published: 2020-06-30
Description: In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html
CVE: CVE-2020-15397
Published: 2020-06-30
Description: HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html
CVE: CVE-2020-15400
Published: 2020-06-30
Description: CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://bakery.cakephp.org/2020/04/18/cakephp_406_released.html; https://bakery.cakephp.org/2020/04/18/cakephp_406_released.html
CVE: CVE-2020-15401
Published: 2020-06-30
Description: IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://daniels-it-blog.blogspot.com/2020/06/when-your-anti-virus-turns-against-you.html; http://daniels-it-blog.blogspot.com/2020/06/when-your-anti-virus-turns-against-you.html
CVE: CVE-2019-19161
Published: 2020-06-30
Description: CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.
CVSS Score: 7.2 (HIGH)
CWE: CWE-426
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479; https://www.tobesoft.com/Index.do; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479
CVE: CVE-2019-19163
Published: 2020-06-30
Description: A Vulnerability in the firmware of COMMAX WallPad(CDP-1020MB) allow an unauthenticated adjacent attacker to execute arbitrary code, because of a using the old version of MySQL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.commax.com/index.php?cate1=10&cate2=21&cate3=23&nnum=2016; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35477; https://www.commax.com/index.php?cate1=10&cate2=21&cate3=23&nnum=2016
CVE: CVE-2020-15411
Published: 2020-06-30
Description: An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP/commit/d14ce7de709cdde3ecc9433e38e14c682894e88a; https://github.com/MISP/MISP/commit/d14ce7de709cdde3ecc9433e38e14c682894e88a
CVE: CVE-2020-15412
Published: 2020-06-30
Description: An issue was discovered in MISP 2.4.128. app/Controller/EventsController.php lacks an event ACL check before proceeding to allow a user to send an event contact form.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/MISP/MISP/commit/b0be3b07fee2ab9bf1869ef81a7f24f58bd687ef; https://github.com/MISP/MISP/commit/b0be3b07fee2ab9bf1869ef81a7f24f58bd687ef
CVE: CVE-2020-15415
Published: 2020-06-30
Description: On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/CLP-team/Vigor-Commond-Injection; https://www.draytek.com/about/security-advisory; https://github.com/CLP-team/Vigor-Commond-Injection
CVE: CVE-2020-7816
Published: 2020-06-30
Description: A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.
CVSS Score: 7.0 (HIGH)
CWE: CWE-125
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35483; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35483
CVE: CVE-2020-14956
Published: 2020-06-30
Description: In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.arswp.com/; https://github.com/y5s5k5/CVE-2020-14957-CVE-2020-14956; http://www.arswp.com/
CVE: CVE-2020-14957
Published: 2020-06-30
Description: In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.arswp.com/; https://github.com/y5s5k5/CVE-2020-14957-CVE-2020-14956; http://www.arswp.com/
CVE: CVE-2020-9483
Published: 2020-06-30
Description: **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which allows to access unpexcted data. Apache SkyWalking 6.0.0 to 6.6.0, 7.0.0 H2/MySQL/TiDB storage implementations don't use the appropriate way to set SQL parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/apache/skywalking/pull/4639; https://github.com/apache/skywalking/pull/4639
CVE: CVE-2020-15084
Published: 2020-06-30
Description: In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this vulnerability if all of the following conditions apply: - You are using express-jwt - You do not have **algorithms** configured in your express-jwt configuration. - You are using libraries such as jwks-rsa as the **secret**. You can fix this by specifying **algorithms** in the express-jwt configuration. See linked GHSA for example. This is also fixed in version 6.0.0.
CVSS Score: 7.7 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/auth0/express-jwt/commit/7ecab5f8f0cab5297c2b863596566eb0c019cdef; https://github.com/auth0/express-jwt/security/advisories/GHSA-6g6m-m6h5-w9gf; https://github.com/auth0/express-jwt/commit/7ecab5f8f0cab5297c2b863596566eb0c019cdef
CVE: CVE-2020-4044
Published: 2020-06-30
Description: The xrdp-sesman service before version 0.9.13.1 can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them to capture any user credentials that are submitted to XRDP and approve or reject arbitrary login credentials. For xorgxrdp sessions in particular, this allows an unauthorized user to hijack an existing session. This is a buffer overflow attack, so there may be a risk of arbitrary code execution as well.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00037.html; https://github.com/neutrinolabs/xrdp/commit/0c791d073d0eb344ee7aaafd221513dc9226762c
CVE: CVE-2020-13095
Published: 2020-06-30
Description: Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://obdev.at/cve/2020-13095-t46oXJJOwz.html; https://obdev.at/cve/2020-13095-t46oXJJOwz.html
CVE: CVE-2020-15085
Published: 2020-06-30
Description: In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0 persisted the cache even after the user logged out. This is fixed in version 2.10.3. A workaround is to manually clear application data (browser's local storage) after logging into Saleor Storefront.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-312
References: https://github.com/mirumee/saleor-storefront/blob/master/CHANGELOG.md#2103; https://github.com/mirumee/saleor-storefront/commit/7c331e1be805022c9a7be719bd69d050b2577458; https://github.com/mirumee/saleor-storefront/security/advisories/GHSA-4279-h39w-2jqm
CVE: CVE-2020-15087
Published: 2020-06-30
Description: In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication, as these installations are inherently insecure. This only affects Presto server installations. This does NOT affect clients such as the CLI or JDBC driver. This vulnerability has been fixed in version 337. Additionally, this issue can be mitigated by blocking network access to internal APIs on the coordinator and workers.
CVSS Score: 7.4 (HIGH)
CWE: CWE-285
References: https://github.com/prestosql/presto/security/advisories/GHSA-f6pc-crhh-cp96; https://trino.io/docs/current/release/release-337.html#security-changes; https://github.com/prestosql/presto/security/advisories/GHSA-f6pc-crhh-cp96
CVE: CVE-2020-14482
Published: 2020-06-30
Description: Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Opening a specially crafted project file may overflow the heap, which may allow remote code execution, disclosure/modification of information, or cause the application to crash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-20-182-01; https://www.us-cert.gov/ics/advisories/icsa-20-182-01
CVE: CVE-2020-15049
Published: 2020-06-30
Description: An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace character prefix to the length field-value.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-444
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html; http://www.squid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patch
CVE: CVE-2020-15307
Published: 2020-06-30
Description: Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by leveraging the ability to create a custom field with a crafted field name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-stored-xss.html?nc=1; https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-stored-xss.html?nc=1
CVE: CVE-2020-14058
Published: 2020-06-30
Description: An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid and the default certificate validation helper are vulnerable to a Denial of Service when opening a TLS connection to an attacker-controlled server for HTTPS. This occurs because unrecognized error values are mapped to NULL, but later code expects that each error value is mapped to a valid error string.
CVSS Score: 7.5 (HIGH)
References: http://www.squid-cache.org/Advisories/SQUID-2020_6.txt; http://www.squid-cache.org/Versions/v4/changesets/squid-4-93f5fda134a2a010b84ffedbe833d670e63ba4be.patch; http://www.squid-cache.org/Versions/v5/changesets/squid-5-c6d1a4f6a2cbebceebc8a3fcd8f539ceb7b7f723.patch
CVE: CVE-2020-14059
Published: 2020-06-30
Description: An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-662
References: http://www.squid-cache.org/Advisories/SQUID-2020_5.txt; http://www.squid-cache.org/Versions/v5/changesets/squid-5-7a5af8db8e0377c06ed9ffbdcb1334389c7cd8ab.patch; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/