deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-31447
Published: 2023-08-21
Description: user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://draytek.com; https://gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4; https://draytek.com
CVE: CVE-2023-32002
Published: 2023-08-21
Description: The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.

This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x.

Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://hackerone.com/reports/1960870; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://hackerone.com/reports/1960870
CVE: CVE-2023-38035
Published: 2023-08-21
Description: A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: http://packetstormsecurity.com/files/174643/Ivanti-Sentry-Authentication-Bypass-Remote-Code-Execution.html; https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface; http://packetstormsecurity.com/files/174643/Ivanti-Sentry-Authentication-Bypass-Remote-Code-Execution.html
CVE: CVE-2023-38836
Published: 2023-08-21
Description: File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://boidcms.com; http://packetstormsecurity.com/files/175026/BoidCMS-2.0.0-Shell-Upload.html; https://github.com/BoidCMS/BoidCMS/issues/27
CVE: CVE-2023-38961
Published: 2023-08-21
Description: Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scanner-until.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/jerryscript-project/jerryscript/issues/5092; https://github.com/jerryscript-project/jerryscript/issues/5092
CVE: CVE-2023-38976
Published: 2023-08-21
Description: An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://aisec.today/Weaviate-26981c6c5f794077bd51d24c88cebf7a; https://github.com/weaviate/weaviate/issues/3258; https://aisec.today/Weaviate-26981c6c5f794077bd51d24c88cebf7a
CVE: CVE-2023-39061
Published: 2023-08-21
Description: Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: http://chamilo.com; https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-123-2023-07-08-Moderate-impact-Moderate-risk-CSRF-through-admin-account-forum-posts; http://chamilo.com
CVE: CVE-2023-39094
Published: 2023-08-21
Description: Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZeroWdd/studentmanager/issues/12; https://github.com/ZeroWdd/studentmanager/issues/12
CVE: CVE-2023-39106
Published: 2023-08-21
Description: An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/nacos-group/nacos-spring-project/issues/314; https://github.com/nacos-group/nacos-spring-project/issues/314
CVE: CVE-2023-39660
Published: 2023-08-21
Description: An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/gventuri/pandas-ai/issues/399; https://github.com/gventuri/pandas-ai/pull/409; https://github.com/gventuri/pandas-ai/issues/399
CVE: CVE-2023-3366
Published: 2023-08-21
Description: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logged in user, delete arbitrary shipment via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/b2f06223-9352-4227-ae94-32061e2c5611; https://wpscan.com/vulnerability/b2f06223-9352-4227-ae94-32061e2c5611
CVE: CVE-2023-3604
Published: 2023-08-21
Description: The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/8f6615e8-f607-4ce4-a0e0-d5fc841ead16; https://wpscan.com/vulnerability/8f6615e8-f607-4ce4-a0e0-d5fc841ead16
CVE: CVE-2023-3667
Published: 2023-08-21
Description: The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/9f2f3f85-6812-46b5-9175-c56f6852afd7; https://wpscan.com/vulnerability/9f2f3f85-6812-46b5-9175-c56f6852afd7
CVE: CVE-2023-3936
Published: 2023-08-21
Description: The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/6d09a5d3-046d-47ef-86b4-c024ea09dc0f; https://wpscan.com/vulnerability/6d09a5d3-046d-47ef-86b4-c024ea09dc0f
CVE: CVE-2023-3954
Published: 2023-08-21
Description: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b463ccbb-2dc1-479f-bc88-becd204b2dc0; https://wpscan.com/vulnerability/b463ccbb-2dc1-479f-bc88-becd204b2dc0
CVE: CVE-2023-4456
Published: 2023-08-21
Description: A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1220
References: https://access.redhat.com/errata/RHSA-2023:4933; https://access.redhat.com/errata/RHSA-2023:5095; https://access.redhat.com/errata/RHSA-2023:5096
CVE: CVE-2023-40352
Published: 2023-08-21
Description: McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by loading arbitrary DLLs.
CVSS Score: 7.2 (HIGH)
CWE: CWE-427
References: https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html; https://www.mcafee.com/support/?articleId=TS103462&page=shell&shell=article-view; https://www.mcafee.com/en-us/consumer-corporate/mcafee-labs/product-security-bulletins.html
CVE: CVE-2023-4373
Published: 2023-08-21
Description: 
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://devolutions.net/security/advisories/DEVO-2023-0015/; https://devolutions.net/security/advisories/DEVO-2023-0015/
CVE: CVE-2023-4417
Published: 2023-08-21
Description: Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process.
CVSS Score: 6.5 (MEDIUM)
References: https://devolutions.net/security/advisories/DEVO-2023-0015; https://devolutions.net/security/advisories/DEVO-2023-0015
CVE: CVE-2023-4459
Published: 2023-08-21
Description: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/errata/RHSA-2024:0412; https://access.redhat.com/errata/RHSA-2024:1250; https://access.redhat.com/errata/RHSA-2024:1306
CVE: CVE-2023-36787
Published: 2023-08-21
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36787; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36787; https://security.gentoo.org/glsa/202402-05
CVE: CVE-2023-38158
Published: 2023-08-21
Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38158; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38158
CVE: CVE-2023-25913
Published: 2023-08-21
Description: Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-287, CWE-287
References: https://csirt.divd.nl/CVE-2023-25913; https://csirt.divd.nl/DIVD-2023-00025; https://csirt.divd.nl/CVE-2023-25913
CVE: CVE-2023-25914
Published: 2023-08-21
Description: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://csirt.divd.nl/CVE-2023-25914; https://csirt.divd.nl/DIVD-2023-00025; https://csirt.divd.nl/CVE-2023-25914
CVE: CVE-2023-25915
Published: 2023-08-21
Description: Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20
References: https://csirt.divd.nl/CVE-2023-25915; https://csirt.divd.nl/DIVD-2023-00025; https://csirt.divd.nl/CVE-2023-25915
CVE: CVE-2023-4301
Published: 2023-08-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.


CVSS Score: 4.2 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3115; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3115
CVE: CVE-2023-4302
Published: 2023-08-21
Description: A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.


CVSS Score: 4.2 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3115; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3115
CVE: CVE-2023-4303
Published: 2023-08-21
Description: Jenkins Fortify Plugin 22.1.38 and earlier does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3140; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3140
CVE: CVE-2023-38906
Published: 2023-08-22
Description: An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
CVSS Score: 6.5 (MEDIUM)
References: https://arxiv.org/abs/2308.09019; https://www.dmi.unict.it/giamp/smartbulbscanbehackedtohackintoyourhousehold/; https://www.scitepress.org/Papers/2023/120929/120929.pdf
CVE: CVE-2023-38908
Published: 2023-08-22
Description: An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function.
CVSS Score: 6.5 (MEDIUM)
References: https://arxiv.org/abs/2308.09019; https://arxiv.org/pdf/2308.09019.pdf; https://www.dmi.unict.it/giamp/smartbulbscanbehackedtohackintoyourhousehold/
CVE: CVE-2023-38909
Published: 2023-08-22
Description: An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function.
CVSS Score: 6.5 (MEDIUM)
References: https://arxiv.org/abs/2308.09019; https://arxiv.org/pdf/2308.09019.pdf; https://www.dmi.unict.it/giamp/smartbulbscanbehackedtohackintoyourhousehold/
CVE: CVE-2020-18232
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/winson2004aa/PAAFS/tree/master/vul2; https://github.com/winson2004aa/PAAFS/tree/master/vul2
CVE: CVE-2020-18378
Published: 2023-08-22
Description: A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/WebAssembly/binaryen/issues/1900; https://github.com/WebAssembly/binaryen/issues/1900
CVE: CVE-2020-18382
Published: 2023-08-22
Description: Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/WebAssembly/binaryen/issues/1900; https://github.com/WebAssembly/binaryen/issues/1900
CVE: CVE-2020-18494
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/magicSwordsMan/PAAFS/tree/master/vul12; https://github.com/magicSwordsMan/PAAFS/tree/master/vul12
CVE: CVE-2020-18651
Published: 2023-08-22
Description: Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://gitlab.freedesktop.org/libopenraw/exempi/commit/fdd4765a699f[PII_REDACTED]b43b9798b933acb32f; https://gitlab.freedesktop.org/libopenraw/exempi/issues/13; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE: CVE-2020-18652
Published: 2023-08-22
Description: Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://gitlab.freedesktop.org/libopenraw/exempi/commit/acee2894ceb[PII_REDACTED]7c2a6e45050c60f98f7; https://gitlab.freedesktop.org/libopenraw/exempi/issues/12; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE: CVE-2020-18768
Published: 2023-08-22
Description: There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2848; http://bugzilla.maptools.org/show_bug.cgi?id=2848
CVE: CVE-2020-18770
Published: 2023-08-22
Description: An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/gdraheim/zziplib/issues/69; https://github.com/gdraheim/zziplib/issues/69
CVE: CVE-2020-18780
Published: 2023-08-22
Description: A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392634; https://bugzilla.nasm.us/show_bug.cgi?id=3392634
CVE: CVE-2020-18781
Published: 2023-08-22
Description: Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/mpruett/audiofile/issues/56; https://github.com/mpruett/audiofile/issues/56
CVE: CVE-2020-18831
Published: 2023-08-22
Description: Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Exiv2/exiv2/issues/828; https://www.exiv2.org/download.html; https://github.com/Exiv2/exiv2/issues/828
CVE: CVE-2020-18839
Published: 2023-08-22
Description: Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://gitlab.freedesktop.org/poppler/poppler/issues/742; https://gitlab.freedesktop.org/poppler/poppler/issues/742
CVE: CVE-2020-19185
Published: 2023-08-22
Description: Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19186
Published: 2023-08-22
Description: Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19187
Published: 2023-08-22
Description: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19188
Published: 2023-08-22
Description: Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19189
Published: 2023-08-22
Description: Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19190
Published: 2023-08-22
Description: Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2023/Dec/10; http://seclists.org/fulldisclosure/2023/Dec/11; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2020-19500
Published: 2023-08-22
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-19724
Published: 2023-08-22
Description: A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://sourceware.org/bugzilla/show_bug.cgi?id=25362; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a; https://sourceware.org/bugzilla/show_bug.cgi?id=25362
CVE: CVE-2020-19725
Published: 2023-08-22
Description: There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/Z3Prover/z3/issues/3363; https://github.com/Z3Prover/z3/issues/3363
CVE: CVE-2020-19726
Published: 2023-08-22
Description: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-400
References: https://sourceware.org/bugzilla/show_bug.cgi?id=26240; https://sourceware.org/bugzilla/show_bug.cgi?id=26241; https://sourceware.org/bugzilla/show_bug.cgi?id=26240
CVE: CVE-2020-19909
Published: 2023-08-22
Description: Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/; https://github.com/curl/curl/pull/4166; https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/