deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-18607
Published: 2019-09-10
Description: The avada theme before 5.1.5 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpvulndb.com/vulnerabilities/8801; https://wpvulndb.com/vulnerabilities/8801
CVE: CVE-2017-18608
Published: 2019-09-10
Description: The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/spotim-comments/#developers; https://wpvulndb.com/vulnerabilities/9360; https://wordpress.org/plugins/spotim-comments/#developers
CVE: CVE-2017-18609
Published: 2019-09-10
Description: The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html; https://wordpress.org/plugins/magic-fields/#developers; https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html
CVE: CVE-2017-18610
Published: 2019-09-10
Description: The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html; https://wordpress.org/plugins/magic-fields/#developers; https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html
CVE: CVE-2017-18611
Published: 2019-09-10
Description: The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html; https://wordpress.org/plugins/magic-fields/#developers; https://sumofpwn.nl/advisory/2016/cross_site_scripting_in_magic_fields_1_wordpress_plugin.html
CVE: CVE-2019-16202
Published: 2019-09-10
Description: MISP before 2.4.115 allows privilege escalation in certain situations. After updating to 2.4.115, escalation attempts are blocked by the __checkLoggedActions function with a "This could be an indication of an attempted privilege escalation on older vulnerable versions of MISP (<2.4.115)" message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://excellium-services.com/cert-xlm-advisory/cve-2019-16202/; https://github.com/MISP/MISP/commit/75acd63c46506ad404764c3a3de7d4ca11d0560f; https://github.com/MISP/MISP/compare/v2.4.114...v2.4.115
CVE: CVE-2019-12401
Published: 2019-09-10
Description: Solr versions 1.3.0 to 1.4.1, 3.1.0 to 3.6.2 and 4.0.0 to 4.10.4 are vulnerable to an XML resource consumption attack (a.k.a. Lol Bomb) via it’s update handler.?By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML causing OOMs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201909.mbox/%3CCAECwjAXU4%3DkAo5DeUJw7Kvk67sgCmajAN7LGZQNjbjZ8gv%3DBdw%40mail.gmail.com%3E; http://www.openwall.com/lists/oss-security/2019/09/10/1; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-12401-XML%20Bomb-Apache%20Solr
CVE: CVE-2019-14721
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to remove a target user from phpMyAdmin via an attacker account.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14721.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14722
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete an e-mail forwarding destination from a victim's account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14722.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14723
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a victim's e-mail account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14723.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14726
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to access and delete DNS records of a victim's account via an attacker account.
CVSS Score: 5.4 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14726.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14727
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail password of a victim account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14727.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14728
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to add an e-mail forwarding destination to a victim's account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14728.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14729
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a sub-domain from a victim's account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14729.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14730
Published: 2019-09-10
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14730.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-15896
Published: 2019-09-10
Description: An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://blog.nintechnet.com/critical-vulnerability-fixed-in-wordpress-lifterlms-plugin/; https://wordpress.org/plugins/lifterlms/#developers; https://wpvulndb.com/vulnerabilities/9871
CVE: CVE-2019-16106
Published: 2019-09-10
Description: The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to change the password of any user via the recruitment_online/personalData/act_acounttab.cfm txtNewUserName and hdNP fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://gist.github.com/suphapholt/5bac4f5cabadfc44746e2bc93c1be91d; https://www.humatrix7.com/sunfish5/ehrm/humanica/recruitment_online/personalData/qry_account.cfm; https://gist.github.com/suphapholt/5bac4f5cabadfc44746e2bc93c1be91d
CVE: CVE-2019-3975
Published: 2019-09-10
Description: Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.tenable.com/security/research/tra-2019-41; https://www.tenable.com/security/research/tra-2019-41
CVE: CVE-2019-5503
Published: 2019-09-10
Description: OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-0352
Published: 2019-09-10
Description: In SAP Business Objects Business Intelligence Platform, before versions 4.1, 4.2 and 4.3, some dynamic pages (like jsp) are cached, which leads to an attacker can see the sensitive information via cache and can open the dynamic pages even after logout.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/2735924; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2735924
CVE: CVE-2019-0353
Published: 2019-09-10
Description: Under certain conditions SAP Business One client (B1_ON_HANA, SAP-M-BO), before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 3.3 (LOW)
References: https://launchpad.support.sap.com/#/notes/2768864; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2768864
CVE: CVE-2019-0355
Published: 2019-09-10
Description: SAP NetWeaver Application Server Java Web Container, ENGINEAPI (before versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) and SAP-JEECOR (before versions 6.40, 7.0, 7.01), allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/2798336; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2798336
CVE: CVE-2019-0356
Published: 2019-09-10
Description: Under certain conditions SAP NetWeaver Process Integration Runtime Workbench – MESSAGING and SAP_XIAF (before versions 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2802521; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2802521
CVE: CVE-2019-0357
Published: 2019-09-10
Description: The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.
CVSS Score: 6.7 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2829681; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2829681
CVE: CVE-2019-0361
Published: 2019-09-10
Description: SAP Supplier Relationship Management (Master Data Management Catalog - SRM_MDM_CAT, before versions 3.73, 7.31, 7.32) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2820607; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2820607
CVE: CVE-2019-0363
Published: 2019-09-10
Description: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.
CVSS Score: 7.1 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2817491; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2817491
CVE: CVE-2019-0364
Published: 2019-09-10
Description: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2817491; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2817491
CVE: CVE-2019-0365
Published: 2019-09-10
Description: SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
CVSS Score: 7.5 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2786151; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506; https://launchpad.support.sap.com/#/notes/2786151
CVE: CVE-2019-11464
Published: 2019-09-10
Description: Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and X-XSS-Protection, which are more generally applicable to HTML endpoint, to be included too. These headers were not included in Couchbase Server 5.5.0 and 5.1.2 . They are now included in version 6.0.2 in responses from the Couchbase Server Views REST API (port 8092).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-11465
Published: 2019-09-10
Description: An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached "connections" stat block command emits a non-redacted username. The system information submitted to Couchbase as part of a bug report included the usernames for all users currently logged into the system even if the log was redacted for privacy. This has been fixed (in 5.5.4 and 6.0.1) so that usernames are tagged properly in the logs and are hashed out when the logs are redacted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-12105
Published: 2019-09-10
Description: In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The maintainer indicated the ability to run an open server will not be removed but an additional warning was added to the documentation
CVSS Score: 8.2 (HIGH)
CWE: CWE-306
References: http://supervisord.org/configuration.html#inet-http-server-section-settings; https://github.com/Supervisor/supervisor/commit/4e334d9cf2a1daff685893e35e72398437df3dcb; https://github.com/Supervisor/supervisor/issues/1245
CVE: CVE-2019-1547
Published: 2019-09-10
Description: Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
CVSS Score: 4.7 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html
CVE: CVE-2019-1549
Published: 2019-09-10
Description: OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1b0fe00e2704b5e20334a16d3c9099d1ba2ef1be; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/
CVE: CVE-2019-1563
Published: 2019-09-10
Description: In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
CVSS Score: 3.7 (LOW)
CWE: CWE-203, CWE-327
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html
CVE: CVE-2019-11466
Published: 2019-09-10
Description: In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-11467
Published: 2019-09-10
Description: In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, <, >, it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart. This has been remedied in versions 5.1.2 and 5.5.2 to ensure buffer always grows as needed for any input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-11495
Published: 2019-09-10
Description: In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remote system. This has been fixed in version 6.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-335
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-11496
Published: 2019-09-10
Description: In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication. As part of 5.0, the behavior of all buckets including "default" were changed to only allow access by authenticated users with sufficient authorization. However, users were allowed unauthenticated and unauthorized access to the "default" bucket if the properties of this bucket were edited. This has been fixed in versions 5.1.0 and 5.5.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-11497
Published: 2019-09-10
Description: In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This has been fixed in version 5.5.0. XDCR now checks the validity of the certificate thoroughly and prevents a remote cluster reference from being created with an invalid certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-14457
Published: 2019-09-10
Description: VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-002-v1.pdf
CVE: CVE-2019-10256
Published: 2019-09-10
Description: An authentication bypass vulnerability in VIVOTEK IPCam versions prior to 0x13a was found.
CVSS Score: 9.8 (CRITICAL)
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-001-v1.pdf; https://www.vivotek.com/cybersecurity; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2019-001-v1.pdf
CVE: CVE-2019-12996
Published: 2019-09-10
Description: In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://docs.mendix.com/releasenotes/studio-pro/7.23#7236; https://docs.mendix.com/releasenotes/studio-pro/7.23#7236
CVE: CVE-2019-11668
Published: 2019-09-10
Description: HTTP cookie in Micro Focus Service manager, Versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Server, versions 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. And Micro Focus Service Manager Chat Service 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62.
CVSS Score: 7.5 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03517335; https://softwaresupport.softwaregrp.com/doc/KM03517335