deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15054
Published: 2019-11-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Mailbird before 2.7.5.0 r allow remote attackers to execute arbitrary JavaScript in a privileged context via a crafted HTML mail message. This vulnerability is distinct from CVE-2015-4657.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://startrekdude.github.io/mailbird.html; https://www.getmailbird.com/ReleaseNotes/LatestReleaseNotes.html; https://startrekdude.github.io/mailbird.html
CVE: CVE-2019-17085
Published: 2019-11-18
Description: XXE attack vulnerability on Micro Focus Operations Agent, affected version 12.0, 12.01, 12.02, 12.03, 12.04, 12.05, 12.06, 12.10, 12.11. The vulnerability could be exploited to do an XXE attack on Operations Agent.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://softwaresupport.softwaregrp.com/doc/KM03556426; https://softwaresupport.softwaregrp.com/doc/KM03556426
CVE: CVE-2019-18373
Published: 2019-11-18
Description: Norton App Lock, prior to 1.4.0.503, may be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking other apps on the device, thereby allowing the individual to gain access.
CVSS Score: 5.6 (MEDIUM)
References: https://support.symantec.com/us/en/article.SYMSA1496.html; https://support.symantec.com/us/en/article.SYMSA1496.html
CVE: CVE-2008-7273
Published: 2019-11-18
Description: A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://security-tracker.debian.org/tracker/CVE-2008-7273; https://vulners.com/securityvulns/SECURITYVULNS:DOC:20757?utm_source=securityvulns&utm_medium=redirect; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2012-4440
Published: 2019-11-18
Description: Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the Violations plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/09/21/2; https://security-tracker.debian.org/tracker/CVE-2012-4440; https://www.cloudbees.com/jenkins-security-advisory-2012-09-17
CVE: CVE-2012-4441
Published: 2019-11-18
Description: Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/09/21/2; https://security-tracker.debian.org/tracker/CVE-2012-4441; https://www.cloudbees.com/jenkins-security-advisory-2012-09-17
CVE: CVE-2019-10764
Published: 2019-11-18
Description: In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve which might allow practical recovery of the long-term private key.
CVSS Score: 7.4 (HIGH)
CWE: CWE-203
References: https://minerva.crocs.fi.muni.cz/; https://snyk.io/vuln/SNYK-PHP-SIMPLITOELLIPTICPHP-534576; https://minerva.crocs.fi.muni.cz/
CVE: CVE-2019-19117
Published: 2019-11-18
Description: /usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/decentL/IoT/blob/master/Phicomm/remote-code-execution.md; https://github.com/decentL/IoT/blob/master/Phicomm/remote-code-execution.md
CVE: CVE-2014-5118
Published: 2019-11-18
Description: Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136768.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136778.html; http://www.openwall.com/lists/oss-security/2014/07/30/4
CVE: CVE-2019-12422
Published: 2019-11-18
Description: Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
CVSS Score: 7.5 (HIGH)
References: https://lists.apache.org/thread.html/c9db14cfebfb8e74205884ed2bf2e2b30790ce24b7dde9191c82572c%40%3Cdev.shiro.apache.org%3E; https://lists.apache.org/thread.html/r2d2612c034ab21a3a19d2132d47d3e4aa70105008dd58af62b653040%40%3Ccommits.shiro.apache.org%3E; https://lists.apache.org/thread.html/c9db14cfebfb8e74205884ed2bf2e2b30790ce24b7dde9191c82572c%40%3Cdev.shiro.apache.org%3E
CVE: CVE-2019-16860
Published: 2019-11-19
Description: Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local machine.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426
References: https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories; https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Arbitrary_code_execution_on_local_Windows_devices; https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories
CVE: CVE-2019-16861
Published: 2019-11-19
Description: Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426
References: https://code42.com/r/support/CVE-2019-16861; https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories; https://code42.com/r/support/CVE-2019-16861
CVE: CVE-2012-0842
Published: 2019-11-19
Description: surf: cookie jar has read access from other local user
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2012/02/10/2; http://www.openwall.com/lists/oss-security/2012/02/10/8; http://www.openwall.com/lists/oss-security/2012/02/10/9
CVE: CVE-2[PII_REDACTED]
Published: 2019-11-19
Description: hhvm before 3.12.11 has a use-after-free in the serialize_memoize_param() and ResourceBundle::__construct() functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2[PII_REDACTED].html; https://security-tracker.debian.org/tracker/CVE-2[PII_REDACTED]; https://www.mail-archive.com/debian-devel-changes%40lists.debian.org/msg506329.html
CVE: CVE-2011-4919
Published: 2019-11-19
Description: mpack 1.6 has information disclosure via eavesdropping on mails sent by other users
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/security/cve/cve-2011-4919; https://security-tracker.debian.org/tracker/CVE-2011-4919; https://www.openwall.com/lists/oss-security/2011/12/31/1
CVE: CVE-2011-4952
Published: 2019-11-19
Description: cobbler: Web interface lacks CSRF protection when using Django framework
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2012/04/12/10; https://access.redhat.com/security/cve/cve-2011-4952; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4952
CVE: CVE-2011-4954
Published: 2019-11-19
Description: cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2012/04/12/10; https://access.redhat.com/security/cve/cve-2011-4954; https://bugs.gentoo.org/show_bug.cgi?id=CVE-2011-4954
CVE: CVE-2011-4967
Published: 2019-11-19
Description: tog-Pegasus has a package hash collision DoS vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://bugzilla.openpegasus.org/show_bug.cgi?id=9182; http://www.openwall.com/lists/oss-security/2012/12/14/2; https://access.redhat.com/security/cve/cve-2011-4967
CVE: CVE-2011-4968
Published: 2019-11-19
Description: nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack (MITM)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2013/01/03/8; http://www.securityfocus.com/bid/57139; https://access.redhat.com/security/cve/cve-2011-4968
CVE: CVE-2012-0824
Published: 2019-11-19
Description: gnusound 0.7.5 has format string issue
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: http://www.openwall.com/lists/oss-security/2012/01/31/3; https://access.redhat.com/security/cve/cve-2012-0824; https://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-0824.html
CVE: CVE-2012-0843
Published: 2019-11-19
Description: uzbl: Information disclosure via world-readable cookies storage file
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2012/02/11/3; https://access.redhat.com/security/cve/cve-2012-0843; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0843
CVE: CVE-2014-5439
Published: 2019-11-19
Description: Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/129292/Sniffit-Root-Shell.html; http://seclists.org/fulldisclosure/2014/Nov/88; http://www.securityfocus.com/bid/71318
CVE: CVE-2011-2921
Published: 2019-11-19
Description: ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-273
References: http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html; https://access.redhat.com/security/cve/cve-2011-2921; https://security-tracker.debian.org/tracker/CVE-2011-2921
CVE: CVE-2012-6070
Published: 2019-11-19
Description: Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2012/12/27/1; http://www.openwall.com/lists/oss-security/2013/01/15/6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696681
CVE: CVE-2012-6071
Published: 2019-11-19
Description: nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2012/12/27/1; http://www.openwall.com/lists/oss-security/2013/01/15/6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696707
CVE: CVE-2012-6135
Published: 2019-11-19
Description: RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2013/03/02/1; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6135; https://exchange.xforce.ibmcloud.com/vulnerabilities/82533
CVE: CVE-2[PII_REDACTED]
Published: 2019-11-19
Description: Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838618; https://bugzilla.redhat.com/show_bug.cgi?id=1371409; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2[PII_REDACTED]
CVE: CVE-2019-18934
Published: 2019-11-19
Description: Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be triggered if unbound was compiled with `--enable-ipsecmod` support, and ipsecmod is enabled and used in the configuration.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00069.html; http://www.openwall.com/lists/oss-security/2019/11/19/1
CVE: CVE-2011-2922
Published: 2019-11-19
Description: ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/security/cve/cve-2011-2922; https://lwn.net/Articles/477678/; https://packetstormsecurity.com/files/109154/Gentoo-Linux-Security-Advisory-201201-15.html
CVE: CVE-2019-11289
Published: 2019-11-19
Description: Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.cloudfoundry.org/blog/cve-2019-11289; https://www.cloudfoundry.org/blog/cve-2019-11289
CVE: CVE-2019-10766
Published: 2019-11-19
Description: Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://snyk.io/vuln/SNYK-PHP-USMANHALALITPIXIE-534879; https://snyk.io/vuln/SNYK-PHP-USMANHALALITPIXIE-534879
CVE: CVE-2011-2923
Published: 2019-11-19
Description: foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://access.redhat.com/security/cve/cve-2011-2923; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2923; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-2923
CVE: CVE-2019-10768
Published: 2019-11-19
Description: In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E; https://snyk.io/vuln/SNYK-JS-ANGULAR-534884; https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
CVE: CVE-2011-2924
Published: 2019-11-19
Description: foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://access.redhat.com/security/cve/cve-2011-2924; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924; https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1
CVE: CVE-2011-3349
Published: 2019-11-19
Description: lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://access.redhat.com/security/cve/cve-2011-3349; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=639151; https://bugs.launchpad.net/debian/+source/lightdm/+bug/834079
CVE: CVE-2019-10080
Published: 2019-11-19
Description: The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E; https://nifi.apache.org/security.html#CVE-2019-10080; https://www.oracle.com/security-alerts/cpuApr2021.html
CVE: CVE-2019-10083
Published: 2019-11-19
Description: When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at the top most level, not recursively). The response included details about processors and controller services which the user may not have had read access to.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E; https://nifi.apache.org/security.html#CVE-2019-10083; https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
CVE: CVE-2019-12421
Published: 2019-11-19
Description: When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be used for up to 12 hours after logging out to make API requests to NiFi.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E; https://nifi.apache.org/security.html#CVE-2019-12421; https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
CVE: CVE-2019-19126
Published: 2019-11-19
Description: On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
CVSS Score: 3.3 (LOW)
CWE: CWE-665
References: https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FQ5LC6JOYSOYFPRUZ4S45KL6IP3RPPZ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFJ5E7NWOL6ROE5QVICHKIOUGCPFJVUH/
CVE: CVE-2011-3350
Published: 2019-11-19
Description: masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-273
References: https://access.redhat.com/security/cve/cve-2011-3350; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638002; https://security-tracker.debian.org/tracker/CVE-2011-3350
CVE: CVE-2011-3352
Published: 2019-11-19
Description: Zikula 1.3.0 build #3168 and probably prior has XSS flaw due to improper sanitization of the 'themename' parameter by setting default, modifying and deleting themes. A remote attacker with Zikula administrator privilege could use this flaw to execute arbitrary HTML or web script code in the context of the affected website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/security/cve/cve-2011-3352; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3352; https://www.immuniweb.com/advisory/HTB23039
CVE: CVE-2019-6176
Published: 2019-11-20
Description: A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service.
CVSS Score: 7.5 (HIGH)
References: https://support.lenovo.com/solutions/LEN-27886; https://support.lenovo.com/solutions/LEN-27886
CVE: CVE-2019-6184
Published: 2019-11-20
Description: A potential vulnerability in the discontinued Customer Engagement Service (CCSDK) software version 2.0.21.1 may allow local privilege escalation.
CVSS Score: 7.8 (HIGH)
References: https://support.lenovo.com/solutions/LEN-29289; https://support.lenovo.com/solutions/LEN-29289
CVE: CVE-2019-6186
Published: 2019-11-20
Description: A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
CVSS Score: 8.8 (HIGH)
References: https://support.lenovo.com/solutions/LEN-29198; https://support.lenovo.com/solutions/LEN-29198
CVE: CVE-2019-6187
Published: 2019-11-20
Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malformed data in certain XCC server informational fields, that could result in crafted formulas being stored in an exported CSV file. The crafted formula is not executed on XCC itself and has no effect on the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1236
References: https://support.lenovo.com/solutions/LEN-29118; https://support.lenovo.com/solutions/LEN-29118
CVE: CVE-2019-6189
Published: 2019-11-20
Description: A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://support.lenovo.com/solutions/LEN-29198; https://support.lenovo.com/solutions/LEN-29198
CVE: CVE-2019-6191
Published: 2019-11-20
Description: A potential vulnerability in the discontinued LenovoPaper software version 1.0.0.22 may allow local privilege escalation.
CVSS Score: 7.8 (HIGH)
References: https://support.lenovo.com/solutions/LEN-29187; https://support.lenovo.com/solutions/LEN-29187
CVE: CVE-2019-15071
Published: 2019-11-20
Description: The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via ACTION parameter without authentication. The code can executed for any user accessing the page. This vulnerability affects many mail system of governments, organizations, companies and universities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/chtsecurity/21119b393640bea1d010ab9e3bee216d; https://gist.github.com/tonykuo76/95638395e0c83e68dbd3db0fa0184e27; https://tvn.twcert.org.tw/taiwanvn/TVN-201909001
CVE: CVE-2019-15072
Published: 2019-11-20
Description: The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 and 7.0 has a cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code via any parameter. This vulnerability affects many mail system of governments, organizations, companies and universities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/chtsecurity/b3396500d4686ad47fb26f64967ef24a; https://gist.github.com/tonykuo76/5bf1ac369d953d5276afe0a2d04c2147; https://tvn.twcert.org.tw/taiwanvn/TVN-201909002
CVE: CVE-2019-15073
Published: 2019-11-20
Description: An Open Redirect vulnerability for all browsers in MAIL2000 through version 6.0 and 7.0, which will redirect to a malicious site without authentication. This vulnerability affects many mail system of governments, organizations, companies and universities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://gist.github.com/chtsecurity/512ebad24dddffb5321cf5f1a336f90f; https://gist.github.com/tonykuo76/ed1cc21cf755bfb8b67ca24f50bded13; https://tvn.twcert.org.tw/taiwanvn/TVN-201909003