deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-29511
Published: 2020-12-14
Description: The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-115
References: https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-elements.md; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-elements.md
CVE: CVE-2020-8169
Published: 2020-12-14
Description: curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://curl.se/docs/CVE-2020-8169.html
CVE: CVE-2020-8177
Published: 2020-12-14
Description: curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-99, CWE-74
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://curl.se/docs/CVE-2020-8177.html; https://hackerone.com/reports/887462
CVE: CVE-2020-8231
Published: 2020-12-14
Description: Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://curl.haxx.se/docs/CVE-2020-8231.html; https://hackerone.com/reports/948876
CVE: CVE-2020-8257
Published: 2020-12-14
Description: Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://support.citrix.com/article/CTX282684; https://support.citrix.com/article/CTX282684
CVE: CVE-2020-8258
Published: 2020-12-14
Description: Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-269
References: https://support.citrix.com/article/CTX282684; https://support.citrix.com/article/CTX282684
CVE: CVE-2020-8282
Published: 2020-12-14
Description: A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://community.ui.com/releases/Security-advisory-bulletin-016-016/40c1d33d-785e-44d5-8e6c-56a8addef1bc; https://community.ui.com/releases/Security-advisory-bulletin-016-016/40c1d33d-785e-44d5-8e6c-56a8addef1bc
CVE: CVE-2020-8283
Published: 2020-12-14
Description: An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://support.citrix.com/article/CTX285059; https://support.citrix.com/article/CTX285059
CVE: CVE-2020-8284
Published: 2020-12-14
Description: A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://curl.se/docs/CVE-2020-8284.html; https://hackerone.com/reports/1040166
CVE: CVE-2020-8285
Published: 2020-12-14
Description: curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674, CWE-787
References: http://seclists.org/fulldisclosure/2021/Apr/51; https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://curl.se/docs/CVE-2020-8285.html
CVE: CVE-2020-8286
Published: 2020-12-14
Description: curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: http://seclists.org/fulldisclosure/2021/Apr/50; http://seclists.org/fulldisclosure/2021/Apr/51; http://seclists.org/fulldisclosure/2021/Apr/54
CVE: CVE-2019-19283
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The application's web server could expose non-sensitive information about the server's architecture. This could allow an attacker to adapt further attacks to the version in place.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19284
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19285
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19286
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pages.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19287
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19288
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2019-19289
Published: 2020-12-14
Description: A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf
CVE: CVE-2020-14368
Published: 2020-12-14
Description: A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing a Cross-Site Request Forgery (CSRF) and consequently allowing a cross-site WebSocket hijack on Theia IDE. This flaw allows an attacker to gain full access to the victim's workspace through the /services endpoint. To perform a successful attack, the attacker conducts a Man-in-the-middle attack (MITM) and tricks the victim into executing a request via an untrusted link, which performs the CSRF and the Socket hijack. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=1823892; https://bugzilla.redhat.com/show_bug.cgi?id=1823892
CVE: CVE-2020-15796
Published: 2020-12-14
Description: A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a specially crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://cert-portal.siemens.com/productcert/pdf/ssa-700697.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-700697.pdf
CVE: CVE-2020-20189
Published: 2020-12-14
Description: SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ornose15/NewPK/issues/1; https://github.com/ornose15/NewPK/issues/1
CVE: CVE-2020-25228
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25229
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321, CWE-798
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25230
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25231
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25232
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25233
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-321
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25234
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.
CVSS Score: 7.7 (HIGH)
CWE: CWE-321
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25235
Published: 2020-12-14
Description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
CVE: CVE-2020-25707
Published: 2020-12-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-2891
CVE: CVE-2020-28396
Published: 2020-12-14
Description: A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.
CVSS Score: 7.3 (HIGH)
CWE: CWE-693, CWE-327
References: https://cert-portal.siemens.com/productcert/pdf/ssa-415783.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-062/; https://cert-portal.siemens.com/productcert/pdf/ssa-415783.pdf
CVE: CVE-2020-0099
Published: 2020-12-14
Description: In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-141745510
CVSS Score: 7.8 (HIGH)
CWE: CWE-1188
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0440
Published: 2020-12-14
Description: In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162627132
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0444
Published: 2020-12-14
Description: In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-150693166References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0455
Published: 2020-12-14
Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0457
Published: 2020-12-14
Description: There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0458
Published: 2020-12-14
Description: In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-8.0 Android-8.1Android ID: A-160265164
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0459
Published: 2020-12-14
Description: In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-159373687
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0460
Published: 2020-12-14
Description: In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-163413737
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0463
Published: 2020-12-14
Description: In sdp_server_handle_client_req of sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.0 Android-8.1 Android-9Android ID: A-169342531
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0464
Published: 2020-12-14
Description: In resolv_cache_lookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-150371903
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0465
Published: 2020-12-14
Description: In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-162844689References: Upstream kernel
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0466
Published: 2020-12-14
Description: In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147802478References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0467
Published: 2020-12-14
Description: In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-168500792
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0468
Published: 2020-12-14
Description: In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-158484422
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0469
Published: 2020-12-14
Description: In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168692734
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01
CVE: CVE-2020-0470
Published: 2020-12-14
Description: In extend_frame_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-166268541
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2020-12-01; https://source.android.com/security/bulletin/2020-12-01