deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13296
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper Access Control for Deploy Tokens
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13296.json; https://gitlab.com/gitlab-org/gitlab/-/issues/235996; https://hackerone.com/reports/957459
CVE: CVE-2020-13319
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13319.json; https://gitlab.com/gitlab-org/gitlab/-/issues/201806; https://hackerone.com/reports/755188
CVE: CVE-2020-13320
Published: 2020-09-30
Description: An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13320.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215044; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13320.json
CVE: CVE-2020-13321
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added.
CVSS Score: 8.3 (HIGH)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13321.json; https://gitlab.com/gitlab-org/gitlab/-/issues/25751; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13321.json
CVE: CVE-2020-13322
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.
CVSS Score: 7.2 (HIGH)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13322.json; https://gitlab.com/gitlab-org/gitlab/-/issues/212469; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13322.json
CVE: CVE-2020-13323
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos
CVSS Score: 7.7 (HIGH)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13323.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215175; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13323.json
CVE: CVE-2020-13324
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13324.json; https://gitlab.com/gitlab-org/gitlab/-/issues/24542; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13324.json
CVE: CVE-2020-13325
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service.
CVSS Score: 7.1 (HIGH)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13325.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215978; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13325.json
CVE: CVE-2020-13326
Published: 2020-09-30
Description: A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13326.json; https://gitlab.com/gitlab-org/gitlab/-/issues/27221; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13326.json
CVE: CVE-2020-13328
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13328.json; https://gitlab.com/gitlab-org/gitlab/-/issues/215640; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13328.json
CVE: CVE-2020-13329
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13329.json; https://gitlab.com/gitlab-org/gitlab/-/issues/208685; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13329.json
CVE: CVE-2020-13330
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13330.json; https://gitlab.com/gitlab-org/gitlab/issues/30017; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13330.json
CVE: CVE-2020-13331
Published: 2020-09-30
Description: An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13331.json; https://gitlab.com/gitlab-org/gitlab/-/issues/219010; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13331.json
CVE: CVE-2020-13506
Published: 2020-09-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-13658
Published: 2020-09-30
Description: In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://research.nccgroup.com/2020/09/25/technical-advisory-lansweeper-privilege-escalation-via-csrf-using-http-method-interchange/; https://www.nccgroup.com/us/our-research/?research=Technical+advisories; https://research.nccgroup.com/2020/09/25/technical-advisory-lansweeper-privilege-escalation-via-csrf-using-http-method-interchange/
CVE: CVE-2020-13794
Published: 2020-09-30
Description: Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/goharbor/harbor/releases; https://github.com/goharbor/harbor/security/advisories/GHSA-q9p8-33wc-h432; https://www.cybereagle.io/blog/cve-2020-13794/
CVE: CVE-2020-13951
Published: 2020-09-30
Description: Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/160186/Apache-OpenMeetings-5.0.0-Denial-Of-Service.html; https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E
CVE: CVE-2020-13953
Published: 2020-09-30
Description: In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E; https://lists.apache.org/thread.html/r50eb12e8a12074a9b7ed63cbab91d180d19cc23dc1da3ed5b6e1280f%40%3Cusers.tapestry.apache.org%3E; https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E
CVE: CVE-2020-14030
Published: 2020-09-30
Description: An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. It stores SMS messages in .NET serialized format on the filesystem. By generating (and writing to the disk) malicious .NET serialized files, an attacker can trick the product into deserializing them, resulting in arbitrary code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: http://www.ozeki.hu/index.php?owpn=231; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-14030-RCE%20via%20.NET%20Deserialization-Ozeki%20SMS%20Gateway; http://www.ozeki.hu/index.php?owpn=231
CVE: CVE-2020-15487
Published: 2020-09-30
Description: Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution is possible by using this SQL injection to update certain database values, which are then executed by a bizRule eval() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by recovering or modifying password hashes and password reset tokens, allowing for administrative privileges to be obtained.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/; https://www.re-desk.com/download-help-desk-software.html; https://labs.f-secure.com/advisories/redesk-v2-3-multiple-issues/
CVE: CVE-2020-15594
Published: 2020-09-30
Description: An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product is deployed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-15594; https://excellium-services.com/cert-xlm-advisory/cve-2020-15594/; https://excellium-services.com/cert-xlm-advisory/cve-2020-15594/
CVE: CVE-2020-15595
Published: 2020-09-30
Description: An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) allows an attacker to retrieve the entire list of the IP ranges and subnets configured in the product and consequently obtain information about the cartography of the internal networks to which the product has access.
CVSS Score: 4.3 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-15595; https://excellium-services.com/cert-xlm-advisory/CVE-2020-15595; https://excellium-services.com/cert-xlm-advisory/CVE-2020-15595
CVE: CVE-2020-19670
Published: 2020-09-30
Description: In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-306
References: https://github.com/bluecity/CMS/blob/master/niushop%20v1.11-passwd/Niushop%20V1.11.md; https://github.com/bluecity/CMS/blob/master/niushop%20v1.11-passwd/Niushop%20V1.11.md
CVE: CVE-2020-19672
Published: 2020-09-30
Description: Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/bluecity/CMS/blob/master/niushop%20v1.1-upload/Niushop%20Multi-business%20V1.11-en.md; https://github.com/bluecity/CMS/blob/master/niushop%20v1.1-upload/Niushop%20Multi-business%20V1.11-en.md
CVE: CVE-2020-19676
Published: 2020-09-30
Description: Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed when not logged in. (detail:https://github.com/alibaba/nacos/issues/2284)
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/alibaba/nacos/issues/2284; https://github.com/alibaba/nacos/issues/2284
CVE: CVE-2020-20800
Published: 2020-09-30
Description: An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/anx1ang/cve_requests/blob/master/metinfo7.0.0beta_sqli_at_install.md; https://github.com/anx1ang/cve_requests/blob/master/metinfo7.0.0beta_sqli_at_install.md
CVE: CVE-2020-21244
Published: 2020-09-30
Description: An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/FrontAccountingERP/FA/issues/40; https://github.com/FrontAccountingERP/FA/issues/40
CVE: CVE-2020-21522
Published: 2020-09-30
Description: An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/halo-dev/halo/issues/418; https://github.com/halo-dev/halo/issues/418
CVE: CVE-2020-21523
Published: 2020-09-30
Description: A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: <#assign test="freemarker.template.utility.Execute"?new()> ${test("touch /tmp/freemarkerPwned")}
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/halo-dev/halo/issues/419; https://github.com/halo-dev/halo/issues/419
CVE: CVE-2020-21524
Published: 2020-09-30
Description: There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not used for security defense, This vulnerability can detect the intranet, read files, enable ddos attacks, etc. exp:https://github.com/halo-dev/halo/issues/423
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://github.com/halo-dev/halo/issues/423; https://github.com/halo-dev/halo/issues/423
CVE: CVE-2020-21525
Published: 2020-09-30
Description: Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/halo-dev/halo/issues/420; https://github.com/halo-dev/halo/issues/420
CVE: CVE-2020-21526
Published: 2020-09-30
Description: An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/halo-dev/halo/issues/421; https://github.com/halo-dev/halo/issues/421
CVE: CVE-2020-21527
Published: 2020-09-30
Description: There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://github.com/halo-dev/halo/issues/422; https://github.com/halo-dev/halo/issues/422
CVE: CVE-2020-21564
Published: 2020-09-30
Description: An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/pluck-cms/pluck/issues/83; https://github.com/pluck-cms/pluck/issues/91; https://github.com/pluck-cms/pluck/issues/83
CVE: CVE-2020-22481
Published: 2020-09-30
Description: An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hacklcx/HFish/issues/69; https://github.com/hacklcx/HFish/issues/69
CVE: CVE-2020-22842
Published: 2020-09-30
Description: CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.cmsmadesimple.org/bug/view/12291; http://dev.cmsmadesimple.org/bug/view/12291
CVE: CVE-2020-24569
Published: 2020-09-30
Description: An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-24570
Published: 2020-09-30
Description: An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session information from logged-in users with a crafted link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-918
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-24721
Published: 2020-09-30
Description: An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure notification, because of the persistent state of a private framework.
CVSS Score: 5.7 (MEDIUM)
References: http://packetstormsecurity.com/files/159419/Corona-Exposure-Notifications-API-Data-Leakage.html; https://blog.google/inside-google/company-announcements/update-exposure-notifications; https://github.com/minvws/nl-covid19-notification-app-coordination/blob/master/CVEs/CVE-2020-24721.txt
CVE: CVE-2020-25760
Published: 2020-09-30
Description: Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/159262/Visitor-Management-System-In-PHP-1.0-SQL-Injection.html; http://packetstormsecurity.com/files/159637/Visitor-Management-System-In-PHP-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2020/Sep/43
CVE: CVE-2020-25761
Published: 2020-09-30
Description: Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/159263/Visitor-Management-System-In-PHP-1.0-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/Sep/45; https://packetstormsecurity.com/files/author/15149/
CVE: CVE-2020-25762
Published: 2020-09-30
Description: An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input validation on the username and password parameters. An attacker can send malicious input in the post request to /admin/ajax.php?action=login and bypass authentication, extract sensitive information etc.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/159261/Seat-Reservation-System-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2020/Sep/42; https://packetstormsecurity.com/files/author/15149
CVE: CVE-2020-25763
Published: 2020-09-30
Description: Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/159260/Seat-Reservation-System-1.0-Shell-Upload.html; http://seclists.org/fulldisclosure/2020/Sep/41; https://packetstormsecurity.com/files/author/15149
CVE: CVE-2020-26041
Published: 2020-09-30
Description: An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/kr0za/bugs/blob/master/hoosk.md#0x01-install-rce; https://github.com/kr0za/bugs/blob/master/hoosk.md#0x01-install-rce
CVE: CVE-2020-26042
Published: 2020-09-30
Description: An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kr0za/bugs/blob/master/hoosk.md#0x02-install-sqli; https://github.com/kr0za/bugs/blob/master/hoosk.md#0x02-install-sqli
CVE: CVE-2020-26043
Published: 2020-09-30
Description: An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kr0za/bugs/blob/master/hoosk.md#0x03-install-xss; https://github.com/kr0za/bugs/blob/master/hoosk.md#0x03-install-xss
CVE: CVE-2020-26053
Published: 2020-09-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-26137
Published: 2020-09-30
Description: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://bugs.python.org/issue39603; https://github.com/urllib3/urllib3/commit/1dd69c5c5982fae7c87a620d487c2ebf7a6b436b; https://github.com/urllib3/urllib3/pull/1800
CVE: CVE-2020-26148
Published: 2020-09-30
Description: md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://github.com/mity/md4c/issues/130; https://github.com/mity/md4c/issues/130
CVE: CVE-2020-26149
Published: 2020-09-30
Description: NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/09/30/3; https://github.com/nats-io/nats.deno/compare/v1.0.0-8...v1.0.0-9; https://github.com/nats-io/nats.ws/commit/0a37ac2a411ff63f0707cda69a268c5fc4079eb7
CVE: CVE-2020-26150
Published: 2020-09-30
Description: info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://godofdarkness-msf.blogspot.com/2020/09/aware-callmanager-2012-php-info.html; https://godofdarkness-msf.blogspot.com/2020/09/aware-callmanager-2012-php-info.html