deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15716
Published: 2020-07-15
Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184942; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15716.md; https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md
CVE: CVE-2020-15717
Published: 2020-07-15
Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184943; https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md; https://gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a
CVE: CVE-2020-10284
Published: 2020-07-15
Description: No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the current operator from an active session.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-656
References: https://www.ufactory.cc/#/en/support/download/xarm; https://www.ufactory.cc/#/en/support/download/xarm
CVE: CVE-2020-11436
Published: 2020-07-15
Description: LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://know.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0; https://librehealth.io/
CVE: CVE-2020-11437
Published: 2020-07-15
Description: LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://know.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0; https://librehealth.io/
CVE: CVE-2020-11438
Published: 2020-07-15
Description: LibreHealth EMR v2.0.0 is affected by systemic CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://know.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0; https://librehealth.io/
CVE: CVE-2020-11439
Published: 2020-07-15
Description: LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://know.bishopfox.com/advisories; https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0; https://librehealth.io/
CVE: CVE-2020-12684
Published: 2020-07-15
Description: XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a weakly configured XML parser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases; https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases/changes_20.4; https://www.inetsoftware.de/documentation/clear-reports/release-notes/releases
CVE: CVE-2020-12854
Published: 2020-07-15
Description: A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/158434/SecZetta-NEProfile-3.3.11-Remote-Code-Execution.html; https://seczetta.com; http://packetstormsecurity.com/files/158434/SecZetta-NEProfile-3.3.11-Remote-Code-Execution.html
CVE: CVE-2020-14064
Published: 2020-07-15
Description: IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://github.com/networksecure/Icewarp_incorrect_access_control; https://www.icewarp.com/download-premise/server/; https://github.com/networksecure/Icewarp_incorrect_access_control
CVE: CVE-2020-14065
Published: 2020-07-15
Description: IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://github.com/networksecure/icewarp_unlimited_file_upload; https://www.icewarp.com/download-premise/server/; https://github.com/networksecure/icewarp_unlimited_file_upload
CVE: CVE-2020-14066
Published: 2020-07-15
Description: IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/networksecure/icewarp_insecure_permissions; https://www.icewarp.com/download-premise/server/; https://github.com/networksecure/icewarp_insecure_permissions
CVE: CVE-2020-15366
Published: 2020-07-15
Description: An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not execution of code.)
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-1321
References: https://github.com/ajv-validator/ajv/releases/tag/v6.12.3; https://github.com/ajv-validator/ajv/tags; https://hackerone.com/bugs?subject=user&report_id=894259
CVE: CVE-2020-15602
Published: 2020-07-15
Description: An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micro installer tries to load DLL files from its current directory, an arbitrary DLL could also be loaded with the same privileges as the installer if run as Administrator. User interaction is required to exploit the vulnerbaility in that the target must open a malicious directory or device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09644; https://helpcenter.trendmicro.com/en-us/article/TMKA-09644
CVE: CVE-2020-15603
Published: 2020-07-15
Description: An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09645; https://helpcenter.trendmicro.com/en-us/article/TMKA-09645
CVE: CVE-2020-15718
Published: 2020-07-15
Description: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/184944; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-15718.md; https://gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md
CVE: CVE-2020-10285
Published: 2020-07-15
Description: The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-331
References: https://github.com/aliasrobotics/RVD/issues/3322; https://github.com/aliasrobotics/RVD/issues/3322
CVE: CVE-2020-13788
Published: 2020-07-15
Description: Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/goharbor/harbor/releases; https://www.soluble.ai/blog/harbor-ssrf-cve-2020-13788; https://www.youtube.com/watch?v=v8Isqy4yR3Q
CVE: CVE-2020-14982
Published: 2020-07-15
Description: A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter) allows an attacker with the Employee, Supervisor, or Timekeeper role to read sensitive data from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.mindpointgroup.com/articles/; https://www.mindpointgroup.com/blog/webta-sqli-vulnerability/; https://www.mindpointgroup.com/articles/
CVE: CVE-2020-15051
Published: 2020-07-15
Description: An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://artica-proxy.com/telechargements/; https://github.com/pratikshad19/CVE-2020-15051; http://artica-proxy.com/telechargements/
CVE: CVE-2020-15779
Published: 2020-07-15
Description: A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options determine the path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/advisories/GHSA-9h4g-27m8-qjrg; https://github.com/rico345100/socket.io-file; https://www.npmjs.com/advisories/1519
CVE: CVE-2020-6164
Published: 2020-07-15
Description: In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to execution in a CLI context, and is not known to present a vulnerability through web-based access. As a side-effect, this preconfigured path also blocks the creation of other resources on this path (e.g. a page).
CVSS Score: 7.5 (HIGH)
References: https://www.silverstripe.org/download/security-releases/CVE-2020-6164; https://www.silverstripe.org/download/security-releases/CVE-2020-6164
CVE: CVE-2020-6165
Published: 2020-07-15
Description: SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists that are limited (e.g., through pagination), resulting in records that should have failed a permission check being added to the final result set. GraphQL endpoints are configured by default (e.g., for assets), but the admin/graphql endpoint is access protected by default. This limits the vulnerability to all authenticated users, including those with limited permissions (e.g., where viewing records exposed through admin/graphql requires administrator permissions). However, if custom GraphQL endpoints have been configured for a specific implementation (usually under /graphql), this vulnerability could also be exploited through unauthenticated requests. This vulnerability only applies to reading records; it does not allow unauthorised changing of records.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://www.silverstripe.org/download/security-releases/CVE-2020-6165; https://www.silverstripe.org/download/security-releases/CVE-2020-6165
CVE: CVE-2020-8958
Published: 2020-07-15
Description: Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/qurbat/gpon; https://www.gpononu.com/dual-mode-onu/1GE-Router-WiFi-ONU.html; https://www.gpononu.com/gpon-ont/4ge-epon-onu-v2804ew.html
CVE: CVE-2020-9309
Published: 2020-07-15
Description: Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as protected or draft files, the MIME detection can cause browsers to execute the file contents. Uploads stored as protected or draft files are allowed by default for authorised users only, but can also be enabled through custom logic as well as modules such as silverstripe/userforms. Sites using the previously optional silverstripe/mimevalidator module can configure MIME whitelists rather than extension whitelists, and hence prevent this issue. Sites on the Common Web Platform (CWP) use this module by default, and are not affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.silverstripe.org/download/security-releases/CVE-2020-9309; https://www.silverstripe.org/download/security-releases/CVE-2020-9309
CVE: CVE-2020-9311
Published: 2020-07-15
Description: In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.silverstripe.org/download/security-releases/CVE-2020-9311; https://www.silverstripe.org/download/security-releases/CVE-2020-9311
CVE: CVE-2019-17639
Published: 2020-07-15
Description: In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value. This allows whatever value happens to be in the return register at that time to be used as if it matches the method's declared return type.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=563998; https://bugs.eclipse.org/bugs/show_bug.cgi?id=563998
CVE: CVE-2019-20908
Published: 2020-07-15
Description: An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.
CVSS Score: 6.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; http://www.openwall.com/lists/oss-security/2020/07/20/6; http://www.openwall.com/lists/oss-security/2020/07/29/3
CVE: CVE-2020-10286
Published: 2020-07-15
Description: the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-656, CWE-269
References: https://github.com/aliasrobotics/RVD/issues/3323; https://github.com/aliasrobotics/RVD/issues/3323
CVE: CVE-2020-15107
Published: 2020-07-15
Description: In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface (ABI) for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an enclave. Depending on the FPU control configuration of the enclave app and whether the operations are used in secret-dependent execution paths, this vulnerability may also be used to mount a side-channel attack on the enclave. This has been fixed in 0.10.0 and the current master branch. Users will need to recompile their applications against the patched libraries to be protected from this vulnerability.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/openenclave/openenclave/security/advisories/GHSA-7wjx-wcwg-w999; https://github.com/openenclave/openenclave/security/advisories/GHSA-7wjx-wcwg-w999
CVE: CVE-2020-15780
Published: 2020-07-15
Description: An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-862
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html; http://www.openwall.com/lists/oss-security/2020/07/20/7
CVE: CVE-2020-10287
Published: 2020-07-15
Description: The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default credentials and consider thereby this an exposure that should be mitigated. Moreover, future deployments should consider that these defaults should be forbidden (user should be forced to change them).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255, CWE-522
References: https://github.com/aliasrobotics/RVD/issues/3326; https://github.com/aliasrobotics/RVD/issues/3326
CVE: CVE-2020-10288
Published: 2020-07-15
Description: IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't empty it will be accepted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-287
References: https://github.com/aliasrobotics/RVD/issues/3327; https://github.com/aliasrobotics/RVD/issues/3327
CVE: CVE-2019-4747
Published: 2020-07-16
Description: IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172887.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172887; https://www.ibm.com/support/pages/node/6249135; https://exchange.xforce.ibmcloud.com/vulnerabilities/172887
CVE: CVE-2019-4748
Published: 2020-07-16
Description: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/173174; https://www.ibm.com/support/pages/node/6249133; https://exchange.xforce.ibmcloud.com/vulnerabilities/173174
CVE: CVE-2020-14000
Published: 2020-07-16
Description: MIT Lifelong Kindergarten Scratch scratch-vm before 0.2.0-prerelease[PII_REDACTED]5213 loads extension URLs from untrusted project.json files with certain _ characters, resulting in remote code execution because the URL's content is treated as a script and is executed as a worker. The responsible code is getExtensionIdForOpcode in serialization/sb3.js. The use of _ is incompatible with a protection mechanism in older versions, in which URLs were split and consequently deserialization attacks were prevented. NOTE: the scratch.mit.edu hosted service is not affected because of the lack of worker scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/LLK/scratch-vm/pull/2476; https://scratch.mit.edu/discuss/topic/422904/?page=1#post-4223443; https://github.com/LLK/scratch-vm/pull/2476
CVE: CVE-2020-15027
Published: 2020-07-16
Description: ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://slagle.tech/2020/07/06/cve-2020-15027/; https://slagle.tech/2020/07/06/cve-2020-15027/
CVE: CVE-2020-4316
Published: 2020-07-16
Description: IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177354.
CVSS Score: 4.7 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177354; https://www.ibm.com/support/pages/node/6249131; https://exchange.xforce.ibmcloud.com/vulnerabilities/177354
CVE: CVE-2020-4462
Published: 2020-07-16
Description: IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181482.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181482; https://www.ibm.com/support/pages/node/6249317; https://www.ibm.com/support/pages/node/6249331
CVE: CVE-2019-20909
Published: 2020-07-16
Description: An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/LibreDWG/libredwg/commit/d7913b893bfa98fab27f05825dc4cab2d3a20c83; https://github.com/LibreDWG/libredwg/issues/178; https://github.com/LibreDWG/libredwg/commit/d7913b893bfa98fab27f05825dc4cab2d3a20c83
CVE: CVE-2019-20910
Published: 2020-07-16
Description: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/LibreDWG/libredwg/commit/f878ba67b638f0d5050b6dba61b9737f64fc53de; https://github.com/LibreDWG/libredwg/issues/178; https://github.com/LibreDWG/libredwg/commit/f878ba67b638f0d5050b6dba61b9737f64fc53de
CVE: CVE-2019-20911
Published: 2020-07-16
Description: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/LibreDWG/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5; https://github.com/LibreDWG/libredwg/issues/178; https://github.com/LibreDWG/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5
CVE: CVE-2019-20912
Published: 2020-07-16
Description: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/commit/b84c2cab55948a5ee70860779b2640913e3ee1ed; https://github.com/LibreDWG/libredwg/issues/178; https://github.com/LibreDWG/libredwg/commit/b84c2cab55948a5ee70860779b2640913e3ee1ed
CVE: CVE-2019-20913
Published: 2020-07-16
Description: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/LibreDWG/libredwg/commit/3f503dd294efc63a59608d8a16058c41d44ba13a; https://github.com/LibreDWG/libredwg/issues/178; https://github.com/LibreDWG/libredwg/commit/3f503dd294efc63a59608d8a16058c41d44ba13a