deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12419
Published: 2019-11-06
Description: Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the supplied clientId parameter in the request. If a malicious client was able to somehow steal an authorization code issued to another client, then they could exploit this vulnerability to obtain an access token for the other client.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://cxf.apache.org/security-advisories.data/CVE-2019-12419.txt.asc; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E; https://lists.apache.org/thread.html/r861eb1a9e0250e9150215b17f0263edf62becd5e20fc96251cff59f6%40%3Cdev.cxf.apache.org%3E
CVE: CVE-2019-18411
Published: 2019-11-06
Description: Zoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information page. Users who are attacked with this vulnerability will be forced to modify their enrolled information, such as email and mobile phone, unintentionally. Attackers could use the reset password function and control the system to send the authentication code back to the channel that the attackers own.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/aliceicl/e32fb4a17277c7db9e0256185ac03dae; https://gist.github.com/aliceicl/e32fb4a17277c7db9e0256185ac03dae
CVE: CVE-2019-16400
Published: 2019-11-06
Description: Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow attackers to send AT commands over Bluetooth, resulting in several Denial of Service (DoS) attacks.
CVSS Score: 6.5 (MEDIUM)
References: https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210; https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210
CVE: CVE-2019-16401
Published: 2019-11-06
Description: Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number: R16NW.G955USQU5CRG3, Baseband Vendor: Qualcomm Snapdragon 835, Baseband: G955USQU5CRG3), Samsung Galaxy S3 (Android version: 4.3, Build Number: JSS15J.I9300XXUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: I9300XXUGNA8), and Samsung Galaxy Note 2 (Android version: 4.3, Build Number: JSS15J.I9300XUGND5, Baseband Vendor: Samsung Exynos 4412, Baseband: N7100DDUFND1) devices allow injection of AT+CIMI and AT+CGSN over Bluetooth, leaking sensitive information such as IMSI, IMEI, call status, call setup stage, internet service status, signal strength, current roaming status, battery level, and call held status.
CVSS Score: 6.5 (MEDIUM)
References: https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210; https://www.openconf.org/acsac2019/modules/request.php?module=oc_program&action=summary.php&id=210
CVE: CVE-2019-15003
Published: 2019-11-07
Description: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via authorization bypass. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/155214/Jira-Service-Desk-Server-Data-Center-Path-Traversal.html; https://jira.atlassian.com/browse/JSDSERVER-6590; https://seclists.org/bugtraq/2019/Nov/9
CVE: CVE-2019-15004
Published: 2019-11-07
Description: The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via a path traversal vulnerability. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/155214/Jira-Service-Desk-Server-Data-Center-Path-Traversal.html; https://jira.atlassian.com/browse/JSDSERVER-6589; https://seclists.org/bugtraq/2019/Nov/9
CVE: CVE-2019-18804
Published: 2019-11-07
Description: DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html; https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md
CVE: CVE-2019-18805
Published: 2019-11-07
Description: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html; https://access.redhat.com/errata/RHSA-2020:0740
CVE: CVE-2019-12331
Published: 2019-11-07
Description: PHPOffice PhpSpreadsheet before 1.8.0 has an XXE issue. The XmlScanner decodes the sheet1.xml from an .xlsx to utf-8 if something else than UTF-8 is declared in the header. This was a security measurement to prevent CVE-2018-19277 but the fix is not sufficient. By double-encoding the the xml payload to utf-7 it is possible to bypass the check for the string ‚<!ENTITY‘ and thus allowing for an xml external entity processing (XXE) attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://github.com/PHPOffice/PhpSpreadsheet/blob/master/CHANGELOG.md#180---2019-07-01; https://herolab.usd.de/security-advisories/usd-2019-0046/; https://github.com/PHPOffice/PhpSpreadsheet/blob/master/CHANGELOG.md#180---2019-07-01
CVE: CVE-2019-16873
Published: 2019-11-07
Description: Portainer before 1.22.1 has XSS (issue 1 of 2).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/zeroday/FG-VD-19-118; https://fortiguard.com/zeroday/FG-VD-19-118
CVE: CVE-2019-16874
Published: 2019-11-07
Description: Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).
CVSS Score: 6.5 (MEDIUM)
References: https://fortiguard.com/zeroday/FG-VD-19-121; https://fortiguard.com/zeroday/FG-VD-19-121
CVE: CVE-2019-6337
Published: 2019-11-07
Description: For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
CVSS Score: 5.2 (MEDIUM)
References: https://support.hp.com/us-en/document/c06458150; https://support.hp.com/us-en/document/c06458150
CVE: CVE-2019-16872
Published: 2019-11-07
Description: Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).
CVSS Score: 9.9 (CRITICAL)
References: https://fortiguard.com/zeroday/FG-VD-19-120; https://fortiguard.com/zeroday/FG-VD-19-120
CVE: CVE-2019-16876
Published: 2019-11-07
Description: Portainer before 1.22.1 allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://fortiguard.com/zeroday/FG-VD-19-123; https://fortiguard.com/zeroday/FG-VD-19-123
CVE: CVE-2019-16877
Published: 2019-11-07
Description: Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).
CVSS Score: 8.8 (HIGH)
References: https://fortiguard.com/zeroday/FG-VD-19-124; https://fortiguard.com/zeroday/FG-VD-19-124
CVE: CVE-2019-16878
Published: 2019-11-07
Description: Portainer before 1.22.1 has XSS (issue 2 of 2).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/zeroday/FG-VD-19-119; https://fortiguard.com/zeroday/FG-VD-19-119
CVE: CVE-2019-17222
Published: 2019-11-07
Description: An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial of service (inability to change the configuration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.youtube.com/watch?v=e3sozdDExTM; https://www.youtube.com/watch?v=e3sozdDExTM
CVE: CVE-2019-17604
Published: 2019-11-07
Description: An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://www.eyecomms.com/Products/eyeCMS.html; https://gist.github.com/AhMyth/b0f7e4b8244def8eb8d7d8c61fa6d4e5; http://www.eyecomms.com/Products/eyeCMS.html
CVE: CVE-2019-17605
Published: 2019-11-07
Description: A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: http://www.eyecomms.com/Products/eyeCMS.html; https://gist.github.com/AhMyth/6d9c5e15d943dd092ccca19fca8d5d37; http://www.eyecomms.com/Products/eyeCMS.html
CVE: CVE-2019-18806
Published: 2019-11-07
Description: A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1acb8f2a7a9f10543868ddd737e37424d5c36cf4; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5
CVE: CVE-2019-18807
Published: 2019-11-07
Description: Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=68501df92d116b760777a2cfda314789f926476f; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-18808
Published: 2019-11-07
Description: A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; http://www.openwall.com/lists/oss-security/2021/09/14/1; https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2
CVE: CVE-2019-18809
Published: 2019-11-07
Description: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://github.com/torvalds/linux/commit/2289adbfa559050d2a38bcd9caac1c18b800e928; https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE: CVE-2019-18810
Published: 2019-11-07
Description: A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka CID-a0ecd6fdbf5d.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ecd6fdbf5d648123a7315c695fb6850d702835; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-18811
Published: 2019-11-07
Description: A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/torvalds/linux/commit/45c1380358b12bf2d1db20a5874e9544f56b34ab; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/
CVE: CVE-2019-18812
Published: 2019-11-07
Description: A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/torvalds/linux/commit/c0a333d842ef67ac04adc72ff79dc1ccc3dca4ed; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/
CVE: CVE-2019-18813
Published: 2019-11-07
Description: A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9bbfceea12a8f145097a27d7c7267af25893c060; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://usn.ubuntu.com/4225-1/
CVE: CVE-2019-18814
Published: 2019-11-07
Description: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html; https://lore.kernel.org/patchwork/patch/1142523/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2010-2243
Published: 2019-11-07
Description: A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/current_clocksource results in an OOPS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/security/cve/cve-2010-2243; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ad6759fbf35d104dbf573cd6f4c6784ad6823f7e; https://security-tracker.debian.org/tracker/CVE-2010-2243
CVE: CVE-2011-2353
Published: 2019-11-07
Description: Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://trac.webkit.org/changeset/87959; http://trac.webkit.org/changeset/88197; http://trac.webkit.org/changeset/88813
CVE: CVE-2011-2807
Published: 2019-11-07
Description: Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: http://trac.webkit.org/changeset/40393; https://bugs.chromium.org/p/chromium/issues/detail?id=72908; http://trac.webkit.org/changeset/40393
CVE: CVE-2019-18815
Published: 2019-11-07
Description: PopojiCMS 2.0.1 allows refer= Open Redirection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/PopojiCMS/PopojiCMS/issues/22; https://github.com/PopojiCMS/PopojiCMS/issues/22
CVE: CVE-2019-18816
Published: 2019-11-07
Description: po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PopojiCMS/PopojiCMS/issues/21; https://github.com/PopojiCMS/PopojiCMS/issues/21
CVE: CVE-2010-2250
Published: 2019-11-07
Description: Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2014/02/12/8; https://security-tracker.debian.org/tracker/CVE-2010-2250; https://www.drupal.org/node/731710
CVE: CVE-2011-2336
Published: 2019-11-07
Description: An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: http://trac.webkit.org/changeset/85693; http://trac.webkit.org/changeset/86127; https://bugs.chromium.org/p/chromium/issues/detail?id=82096
CVE: CVE-2011-2337
Published: 2019-11-07
Description: A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: http://trac.webkit.org/changeset/86106; http://trac.webkit.org/changeset/86173; https://bugs.chromium.org/p/chromium/issues/detail?id=82152
CVE: CVE-2012-0049
Published: 2019-11-07
Description: OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: http://security.openttd.org/en/CVE-2012-0049; http://www.debian.org/security/2012/dsa-2524; http://www.openwall.com/lists/oss-security/2012/01/13/9
CVE: CVE-2012-0051
Published: 2019-11-07
Description: Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2012/01/15/11; http://www.openwall.com/lists/oss-security/2012/01/26/7; http://www.openwall.com/lists/oss-security/2012/01/26/8
CVE: CVE-2019-3764
Published: 2019-11-07
Description: Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive information such as password hashes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://www.dell.com/support/article/sln319317/dsa-2019-137-idrac-improper-authorization-vulnerability?lang=en; https://www.dell.com/support/article/sln319317/dsa-2019-137-idrac-improper-authorization-vulnerability?lang=en
CVE: CVE-2010-2472
Published: 2019-11-07
Description: Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which could allow an attacker to perform a cross-site scripting (XSS) attack. This vulnerability is mitigated by the fact that an attacker must have a role with the 'administer languages' permission.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://security-tracker.debian.org/tracker/CVE-2010-2472; https://www.drupal.org/node/731710; https://www.openwall.com/lists/oss-security/2010/06/28/8
CVE: CVE-2010-2473
Published: 2019-11-07
Description: Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://security-tracker.debian.org/tracker/CVE-2010-2473; https://www.drupal.org/node/731710; https://www.openwall.com/lists/oss-security/2010/06/28/8
CVE: CVE-2019-11996
Published: 2019-11-07
Description: Potential security vulnerabilities have been identified with HPE Nimble Storage systems in multi array group configurations. The vulnerabilities could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.2.0, 4.5.5.0, 5.0.8.0 and 5.1.3.0.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03964en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03964en_us
CVE: CVE-2010-2447
Published: 2019-11-07
Description: gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/sitaramc/gitolite/commit/1e06fea3b6959faeb72d8dca46cd4753ada48637; https://github.com/sitaramc/gitolite/commit/5fd9328c1cd1e7c576b6530b3253061c68b159aa; https://github.com/sitaramc/gitolite/releases/tag/v1.4.1
CVE: CVE-2010-2449
Published: 2019-11-07
Description: Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577958; https://security-tracker.debian.org/tracker/CVE-2010-2449; https://www.securityfocus.com/bid/39529/info
CVE: CVE-2019-3422
Published: 2019-11-07
Description: The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remote login password in the reverse way. If Telnet is opened, the attacker can remotely log in to the device through the cracked password, resulting in information leakage. The MF910S was end of service on October 23, 2019, ZTE recommends users to choose new products for the purpose of better security.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/158990/ZTE-Mobile-Hotspot-MS910S-Backdoor-Hardcoded-Password.html; http://seclists.org/fulldisclosure/2020/Aug/20; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011722
CVE: CVE-2019-3465
Published: 2019-11-07
Description: Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-347
References: https://github.com/robrichards/xmlseclibs/commit/0a53d3c3aa87564910cae4ed01416441d3ae0db5; https://lists.debian.org/debian-lts-announce/2019/11/msg00003.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KID7C4AZPYYIZQIPSLANP4R2RQR6YK3/