deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17444
Published: 2020-10-12
Description: Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521, CWE-521
References: https://www.jfrog.com/confluence/display/JFROG/Artifactory+Release+Notes; https://www.jfrog.com/confluence/display/JFROG/JFrog+Artifactory; https://www.jfrog.com/confluence/display/JFROG/Artifactory+Release+Notes
CVE: CVE-2020-7743
Published: 2020-10-13
Description: The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/josdejong/mathjs/blob/develop/src/utils/object.js%23L82; https://github.com/josdejong/mathjs/commit/ecb80514e80bce4e6ec7e71db8ff79954f07c57e; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1017113
CVE: CVE-2020-16124
Published: 2020-10-13
Description: Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.
CVSS Score: 7.3 (HIGH)
CWE: CWE-190, CWE-190
References: https://github.com/ros/ros_comm/pull/2065; https://github.com/ros/ros_comm/pull/2065
CVE: CVE-2020-15797
Published: 2020-10-13
Description: A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Improper Access Control could allow an unauthenticated attacker to escape from the restricted environment (“kiosk mode”) and access the underlying operating system. Successful exploitation requires direct physical access to the system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://www.siemens-healthineers.com/support-documentation/security-advisory; https://www.siemens-healthineers.com/support-documentation/security-advisory
CVE: CVE-2020-25779
Published: 2020-10-13
Description: Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) could be used to add a malicious website to the approved websites list of Trend Micro Antivirus for Mac to bypass the web threat protection feature.
CVSS Score: 3.3 (LOW)
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-09949; https://helpcenter.trendmicro.com/en-us/article/TMKA-09949
CVE: CVE-2020-7590
Published: 2020-10-13
Description: A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-259
References: https://www.siemens-healthineers.com/support-documentation/security-advisory; https://www.siemens-healthineers.com/support-documentation/security-advisory
CVE: CVE-2020-17406
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the ping parameter provided to tools.sh. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10595.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-20-1205/; https://www.zerodayinitiative.com/advisories/ZDI-20-1205/
CVE: CVE-2020-17407
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of authentication headers. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10596.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://www.zerodayinitiative.com/advisories/ZDI-20-1206/; https://www.zerodayinitiative.com/advisories/ZDI-20-1206/
CVE: CVE-2020-17409
Published: 2020-10-13
Description: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10754.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-288
References: https://kb.netgear.com/000062304/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2020-0258; https://www.zerodayinitiative.com/advisories/ZDI-20-1176/; https://kb.netgear.com/000062304/Security-Advisory-for-Authentication-Bypass-on-Some-Routers-PSV-2020-0258
CVE: CVE-2020-17410
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11135.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1228/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17411
Published: 2020-10-13
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11190.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1229/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17412
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11224.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1230/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17413
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11226.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1235/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17414
Published: 2020-10-13
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-11229.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1231/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17415
Published: 2020-10-13
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit PhantomPDF Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-11308.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1232/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17416
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11497.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1233/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-17417
Published: 2020-10-13
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11657.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-1234/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-15251
Published: 2020-10-13
Description: In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2 includes 1.0.3 of channelmgnt, and thus is safe from this vulnerability. See referenced GHSA-23pc-4339-95vg.
CVSS Score: 7.7 (HIGH)
CWE: CWE-863, CWE-862
References: https://github.com/MirahezeBots/MirahezeBots/security/advisories/GHSA-23pc-4339-95vg; https://github.com/MirahezeBots/sopel-channelmgnt/pull/3; https://github.com/MirahezeBots/sopel-channelmgnt/security/advisories/GHSA-j257-jfvv-h3x5
CVE: CVE-2018-20243
Published: 2020-10-13
Description: The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://lists.apache.org/thread.html/r040d46835aff3c192656b549ca82f62d87fb044ef9a9dd49408b49b4%40%3Cdev.fineract.apache.org%3E; https://lists.apache.org/thread.html/r040d46835aff3c192656b549ca82f62d87fb044ef9a9dd49408b49b4%40%3Cdev.fineract.apache.org%3E
CVE: CVE-2020-13957
Published: 2020-10-13
Description: Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without authentication/authorization. The checks in place to prevent such features can be circumvented by using a combination of UPLOAD/CREATE actions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://lists.apache.org/thread.html/r13a728994c60be5b5a7049282b5c926dac1fc6a9a0b2362f6adfa573%40%3Cissues.lucene.apache.org%3E; https://lists.apache.org/thread.html/r1c783d3d81ba62f3381a17a4d6c826f7dead3a132ba42349c90df075%40%3Ccommits.lucene.apache.org%3E; https://lists.apache.org/thread.html/r1d4a247329a[PII_REDACTED]567bbc8c8cb6b49c6bfc2bf58153a857af1%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2020-25645
Published: 2020-10-13
Description: A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html; http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html
CVE: CVE-2020-12911
Published: 2020-10-13
Description: A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTCreateAllocation API request can cause an out-of-bounds read and denial of service (BSOD). This vulnerability can be triggered from a non-privileged account.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-12928
Published: 2020-10-13
Description: A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-749
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-12933
Published: 2020-10-13
Description: A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-7330
Published: 2020-10-14
Description: Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-269
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS103082; http://service.mcafee.com/FAQDocument.aspx?&id=TS103082
CVE: CVE-2019-2194
Published: 2020-10-14
Description: In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-137284057
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-24551
Published: 2020-10-14
Description: IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.twcert.org.tw/tw/cp-132-4053-6e9a2-1.html; https://www.twcert.org.tw/tw/cp-132-4053-6e9a2-1.html
CVE: CVE-2020-25188
Published: 2020-10-14
Description: An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA (Versions prior to 4.3.1.870).
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-287-02; https://www.zerodayinitiative.com/advisories/ZDI-20-1244/; https://us-cert.cisa.gov/ics/advisories/icsa-20-287-02
CVE: CVE-2020-6083
Published: 2020-10-14
Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1005; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1005
CVE: CVE-2020-6086
Published: 2020-10-14
Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.If the Simple Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007
CVE: CVE-2020-6087
Published: 2020-10-14
Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007
CVE: CVE-2020-0246
Published: 2020-10-14
Description: In getCarrierPrivilegeStatus of UiccAccessRule.java, there is a missing permission check. This could lead to local information disclosure of EID data with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-159062405
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0283
Published: 2020-10-14
Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008257
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0339
Published: 2020-10-14
Description: There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980705
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0367
Published: 2020-10-14
Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-162980455
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0371
Published: 2020-10-14
Description: There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0376
Published: 2020-10-14
Description: There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163003156
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01
CVE: CVE-2020-0377
Published: 2020-10-14
Description: In gatt_process_read_by_type_rsp of gatt_cl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID: A-158833854
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-10-01; https://source.android.com/security/bulletin/2020-10-01