deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17352
Published: 2019-10-08
Description: In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload any type of file. For example, a .jsp file may be stored and almost immediately deleted, but this deletion step does not occur for certain exceptions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://gitee.com/jfinal/cos/commit/5eb23d6e384abaad19faa7600d14c9a2f525946a; https://gitee.com/jfinal/cos/commit/8d26eec61f0d072a68bf7393cf3a8544a1112130; https://github.com/jfinal/jfinal/issues/171
CVE: CVE-2019-17359
Published: 2019-10-08
Description: The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209%40%3Ccommits.tomee.apache.org%3E; https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d%40%3Ccommits.tomee.apache.org%3E; https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27%40%3Ccommits.tomee.apache.org%3E
CVE: CVE-2018-21024
Published: 2019-10-08
Description: licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2019/10/09/2; https://github.com/centreon/centreon/pull/7085; https://www.openwall.com/lists/oss-security/2019/10/08/1
CVE: CVE-2019-17105
Published: 2019-10-08
Description: The token generator in index.php in Centreon Web before 2.8.27 is predictable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: http://www.openwall.com/lists/oss-security/2019/10/09/2; https://github.com/centreon/centreon/pull/7100; https://www.openwall.com/lists/oss-security/2019/10/08/1
CVE: CVE-2019-17187
Published: 2019-10-08
Description: /var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gist.github.com/ztz472947849/d62e7b6f4831b55c338ef22432eca06d; https://gist.github.com/ztz472947849/d62e7b6f4831b55c338ef22432eca06d
CVE: CVE-2019-17134
Published: 2019-10-08
Description: Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://access.redhat.com/errata/RHSA-2019:3743; https://access.redhat.com/errata/RHSA-2019:3788; https://access.redhat.com/errata/RHSA-2020:0721
CVE: CVE-2019-10215
Published: 2019-10-08
Description: Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html; https://access.redhat.com/errata/RHSA-2019:3771; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10215
CVE: CVE-2019-10756
Published: 2019-10-08
Description: It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://snyk.io/vuln/SNYK-JS-NODEREDDASHBOARD-471939; https://snyk.io/vuln/SNYK-JS-NODEREDDASHBOARD-471939
CVE: CVE-2019-10963
Published: 2019-10-08
Description: Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-321
References: http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html; https://www.us-cert.gov/ics/advisories/icsa-19-274-03; http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html
CVE: CVE-2019-10969
Published: 2019-10-08
Description: Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html; https://www.us-cert.gov/ics/advisories/icsa-19-274-03; http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html
CVE: CVE-2019-14845
Published: 2019-10-08
Description: A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this flaw by launching a man-in-the-middle attack and injecting malicious content.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-494, CWE-494
References: https://access.redhat.com/errata/RHSA-2019:4101; https://access.redhat.com/errata/RHSA-2019:4237; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14845
CVE: CVE-2019-14846
Published: 2019-10-08
Description: In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBUG level. This flaw does not affect Ansible modules, as those are executed in a separate process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-117, CWE-532, CWE-532
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html; https://access.redhat.com/errata/RHSA-2019:3201
CVE: CVE-2019-17186
Published: 2019-10-08
Description: /var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://gist.github.com/ztz472947849/d62e7b6f4831b55c338ef22432eca06d; https://gist.github.com/ztz472947849/d62e7b6f4831b55c338ef22432eca06d
CVE: CVE-2019-0367
Published: 2019-10-08
Description: SAP NetWeaver Process Integration (B2B Toolkit), before versions 1.0 and 2.0, does not perform necessary authorization checks for an authenticated user, allowing the import of B2B table content that leads to Missing Authorization Check.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2805777; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2805777
CVE: CVE-2019-0368
Published: 2019-10-08
Description: SAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2751806; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2751806
CVE: CVE-2019-0369
Published: 2019-10-08
Description: SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2806403; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2806403
CVE: CVE-2019-0370
Published: 2019-10-08
Description: Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-91
References: https://launchpad.support.sap.com/#/notes/2806403; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2806403
CVE: CVE-2019-0374
Published: 2019-10-08
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817945; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2817945
CVE: CVE-2019-0375
Published: 2019-10-08
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the export dialog box of the report name resulting in reflected Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817945; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2817945
CVE: CVE-2019-0376
Published: 2019-10-08
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817945; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2817945
CVE: CVE-2019-0377
Published: 2019-10-08
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the input controls, resulting in Stored Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817945; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2817945
CVE: CVE-2019-0378
Published: 2019-10-08
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before version 4.2, does not sufficiently encode user-controlled inputs and allows an attacker to store malicious scripts in the file name of the background image resulting in Stored Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817945; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2817945
CVE: CVE-2019-0379
Published: 2019-10-08
Description: SAP Process Integration, business-to-business add-on, versions 1.0, 2.0, does not perform authentication check properly when the default security provider is changed to BouncyCastle (BC), leading to Missing Authentication Check
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2826015; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2826015
CVE: CVE-2019-0380
Published: 2019-10-08
Description: Under certain conditions, SAP Landscape Management enterprise edition, before version 3.0, allows custom secure parameters’ default values to be part of the application logs leading to Information Disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-532
References: https://launchpad.support.sap.com/#/notes/2828682; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2828682
CVE: CVE-2019-0381
Published: 2019-10-08
Description: A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0, can result in the inadvertent access of files located in directories outside of the paths specified by the user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: https://launchpad.support.sap.com/#/notes/2792430; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528123050; https://launchpad.support.sap.com/#/notes/2792430
CVE: CVE-2019-10757
Published: 2019-10-08
Description: knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://snyk.io/vuln/SNYK-JS-KNEX-471962; https://snyk.io/vuln/SNYK-JS-KNEX-471962
CVE: CVE-2019-3980
Published: 2019-10-08
Description: The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://www.tenable.com/security/research/tra-2019-43; https://www.tenable.com/security/research/tra-227-43; https://www.tenable.com/security/research/tra-2019-43
CVE: CVE-2019-17362
Published: 2019-10-09
Description: In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00041.html; https://github.com/libtom/libtomcrypt/issues/507
CVE: CVE-2019-17368
Published: 2019-10-09
Description: S-CMS v1.5 has XSS in tpl.php via the member/member_login.php from parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Gitaddy/vluns/blob/master/S-CMS.md; https://github.com/Gitaddy/vluns/blob/master/S-CMS.md
CVE: CVE-2019-17369
Published: 2019-10-09
Description: OTCMS v3.85 has CSRF in the admin/member_deal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Gitaddy/vluns/blob/master/Otcms-CSRF.md; https://github.com/Gitaddy/vluns/blob/master/Otcms-CSRF.md
CVE: CVE-2019-13051
Published: 2019-10-09
Description: Pi-Hole 4.3 allows Command Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/pi-hole/AdminLTE/pull/974; https://github.com/pi-hole/pi-hole/commits/master; https://pi-hole.net/2019/09/21/pi-hole-4-3-2-release-notes/
CVE: CVE-2019-15719
Published: 2019-10-09
Description: Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.
CVSS Score: 8.0 (HIGH)
References: http://packetstormsecurity.com/files/154782/PBS-Professional-19.2.3-Authentication-Bypass.html; https://www.hpcsec.com; https://www.hpcsec.com/2019/10/08/cve-2019-15719/
CVE: CVE-2019-17353
Published: 2019-10-09
Description: An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
CVSS Score: 8.2 (HIGH)
CWE: CWE-306
References: https://github.com/d0x0/D-Link-DIR-615/blob/master/CVE-2019-17353; https://us.dlink.com/en/security-advisory; https://www.dlink.com/en/security-bulletin
CVE: CVE-2019-17354
Published: 2019-10-09
Description: wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify data fields of the page.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-306
References: https://github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354; https://www.zyxel.com/us/en/; https://github.com/d0x0/Zyxel-NBG-418N-v2/blob/master/CVE-2019-17354
CVE: CVE-2019-17370
Published: 2019-10-09
Description: OTCMS v3.85 allows arbitrary PHP Code Execution because admin/sysCheckFile_deal.php blocks "into outfile" in a SELECT statement, but does not block the "into/**/outfile" manipulation. Therefore, the attacker can create a .php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Gitaddy/vluns/blob/master/Otcms-getshell.md; https://github.com/Gitaddy/vluns/blob/master/Otcms-getshell.md
CVE: CVE-2019-17371
Published: 2019-10-09
Description: gif2png 2.5.13 has a memory leak in the writefile function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/glennrp/libpng/issues/307; https://github.com/glennrp/libpng/issues/307#issuecomment-544779431; https://gitlab.com/esr/gif2png/issues/8
CVE: CVE-2019-17372
Published: 2019-10-09
Description: Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md; https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md
CVE: CVE-2019-17373
Published: 2019-10-09
Description: Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_web_interface_exists_authentication_bypass.md; https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_web_interface_exists_authentication_bypass.md
CVE: CVE-2019-17382
Published: 2019-10-09
Description: An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). All created elements (Dashboard/Report/Screen/Map) are accessible by other users and by an admin.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html; https://www.exploit-db.com/exploits/47467; https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
CVE: CVE-2018-5732
Published: 2019-10-09
Description: Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer overflow (and resulting crash) in dhclient by sending a response containing a specially constructed options section. Affects ISC DHCP versions 4.1.0 -> 4.1-ESV-R15, 4.2.0 -> 4.2.8, 4.3.0 -> 4.3.6, 4.4.0
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://kb.isc.org/docs/aa-01565; https://kb.isc.org/docs/aa-01565
CVE: CVE-2018-5743
Published: 2019-10-09
Description: By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://kb.isc.org/docs/cve-2018-5743; https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS; https://www.synology.com/security/advisory/Synology_SA_19_20
CVE: CVE-2018-5744
Published: 2019-10-09
Description: A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://kb.isc.org/docs/cve-2018-5744; https://kb.isc.org/docs/cve-2018-5744
CVE: CVE-2018-5745
Published: 2019-10-09
Description: "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an unsupported algorithm. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-327
References: https://access.redhat.com/errata/RHSA-2019:3552; https://kb.isc.org/docs/cve-2018-5745; https://access.redhat.com/errata/RHSA-2019:3552
CVE: CVE-2019-11212
Published: 2019-10-09
Description: The MDM server component of TIBCO Software Inc's TIBCO MDM contains multiple vulnerabilities that theoretically allow an authenticated user with specific roles to perform cross-site scripting (XSS) attacks. This issue affects TIBCO Software Inc.'s TIBCO MDM version 9.0.1 and prior versions; version 9.1.0.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/10/tibco-security-advisory-october-8-2019-tibco-mdm; http://www.tibco.com/services/support/advisories