deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1332; http://www.securityfocus.com/bid/107476
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: An insufficiently protected credentials vulnerability exists in Jenkins Repository Connector Plugin 1.2.4 and earlier in src/main/java/org/jvnet/hudson/plugins/repositoryconnector/ArtifactDeployer.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/Repository.java, src/main/java/org/jvnet/hudson/plugins/repositoryconnector/UserPwd.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the password stored in the plugin configuration.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-958; http://www.securityfocus.com/bid/107476
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: An insufficiently protected credentials vulnerability exists in JenkinsAppDynamics Dashboard Plugin 1.0.14 and earlier in src/main/java/nl/codecentric/jenkins/appd/AppDynamicsResultsPublisher.java that allows attackers without permission to obtain passwords configured in jobs to obtain them.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1087; http://www.securityfocus.com/bid/107476
CVE: CVE-2019-9636
Published: 2019-03-08
Description: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html
CVE: CVE-2019-8264
Published: 2019-03-08
Description: UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside Ultra2 decoder, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-788, CWE-125, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8265
Published: 2019-03-08
Description: UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1208.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-788, CWE-125, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8266
Published: 2019-03-08
Description: UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of ClientConnection::Copybuffer function in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. User interaction is required to trigger these vulnerabilities. These vulnerabilities have been fixed in revision 1208.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-788, CWE-125, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-013-ultravnc-access-of-memory-location-after-end-of-buffer/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8267
Published: 2019-03-08
Description: UltraVNC revision 1207 has out-of-bounds read vulnerability in VNC client code inside TextChat module, which results in a denial of service (DoS) condition. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1208.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-014-ultravnc-out-of-bounds-read/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8268
Published: 2019-03-08
Description: UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193, CWE-193
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-015-ultravnc-off-by-one-error/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8269
Published: 2019-03-08
Description: UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1207.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-016-ultravnc-stack-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8270
Published: 2019-03-08
Description: UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-017-ultravnc-out-of-bounds-read/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8271
Published: 2019-03-08
Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-018-ultravnc-heap-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8272
Published: 2019-03-08
Description: UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193, CWE-193
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-019-ultravnc-off-by-one-error/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8273
Published: 2019-03-08
Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-020-ultravnc-heap-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8274
Published: 2019-03-08
Description: UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-021-ultravnc-heap-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8275
Published: 2019-03-08
Description: UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-170
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8276
Published: 2019-03-08
Description: UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/; https://www.us-cert.gov/ics/advisories/icsa-20-161-06
CVE: CVE-2019-8277
Published: 2019-03-08
Description: UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665, CWE-665
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-8280
Published: 2019-03-08
Description: UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-788, CWE-125, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
CVE: CVE-2019-9637
Published: 2019-03-09
Description: An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename() across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to access the data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9638
Published: 2019-03-09
Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the maker_note->offset relationship to value_len.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9639
Published: 2019-03-09
Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_MAKERNOTE because of mishandling the data_len variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908, CWE-909
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9640
Published: 2019-03-09
Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exif_process_SOFn.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9641
Published: 2019-03-09
Description: An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an uninitialized read in exif_process_IFD_in_TIFF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9580
Published: 2019-03-09
Description: In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/StackStorm/st2/releases/tag/v2.10.3; https://github.com/StackStorm/st2/releases/tag/v2.9.3; https://stackstorm.com/2019/03/08/stackstorm-2-9-3-2-10-3/
CVE: CVE-2019-9646
Published: 2019-03-10
Description: The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.openwall.net/full-disclosure/2019/02/05/7; https://security-consulting.icu/blog/2019/02/wordpress-contact-form-email-xss-csrf/; https://wordpress.org/plugins/contact-form-to-email/#developers
CVE: CVE-2019-9650
Published: 2019-03-11
Description: An XSS issue was discovered in upcoming_events.php in the Upcoming Events plugin before 1.33 for MyBB via a crafted name for an event.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152152/MyBB-Upcoming-Events-1.32-Cross-Site-Scripting.html; https://community.mybb.com/mods.php?action=changelog&pid=1231; https://github.com/vintagedaddyo/MyBB_Plugin-Upcoming_Events/pull/1/commits/d0a0e1c6e56f248613e0150344ebea8764bba5fa
CVE: CVE-2019-9651
Published: 2019-03-11
Description: An issue was discovered in SDCMS V1.7. In the \app\admin\controller\themecontroller.php file, the check_bad() function's filtering is not strict, resulting in PHP code execution. This occurs because some dangerous PHP functions (such as "eval") are blocked but others (such as "system") are not, and because ".php" is blocked but ".PHP" is not blocked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.iwantacve.cn/index.php/archives/155/; http://www.iwantacve.cn/index.php/archives/155/
CVE: CVE-2019-9652
Published: 2019-03-11
Description: There is a CSRF in SDCMS V1.7 via an m=admin&c=theme&a=edit request. It allows PHP code injection by providing a filename in the file parameter, and providing file content in the t2 parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/156/; http://www.iwantacve.cn/index.php/archives/156/
CVE: CVE-2019-9656
Published: 2019-03-11
Description: An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/TeamSeri0us/pocs/tree/master/libofx; https://github.com/libofx/libofx/issues/22; https://lists.debian.org/debian-lts-announce/2019/11/msg00021.html
CVE: CVE-2019-9658
Published: 2019-03-11
Description: Checkstyle before 8.18 loads external DTDs by default.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611
References: https://checkstyle.org/releasenotes.html#Release_8.18; https://github.com/checkstyle/checkstyle/issues/6474; https://github.com/checkstyle/checkstyle/issues/6478
CVE: CVE-2019-9660
Published: 2019-03-11
Description: Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/12; https://github.com/yzmcms/yzmcms/issues/12
CVE: CVE-2019-9661
Published: 2019-03-11
Description: Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter,
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/13; https://github.com/yzmcms/yzmcms/issues/13
CVE: CVE-2019-9662
Published: 2019-03-11
Description: An issue was discovered in JTBC(PHP) 3.0.1.8. Its cache management module is flawed. An arbitrary file ending in "inc.php" can be deleted via a console/cache/manage.php?type=action&action=batch&batch=delete&ids=../ substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/jetiben/jtbc/issues/9; https://github.com/jetiben/jtbc/issues/9
CVE: CVE-2019-9675
Published: 2019-03-11
Description: An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3. phar_tar_writeheaders_int in ext/phar/tar.c has a buffer overflow via a long link value. NOTE: The vendor indicates that the link value is used only when an archive contains a symlink, which currently cannot happen: "This issue allows theoretical compromise of security, but a practical attack is usually impossible.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9659
Published: 2019-03-11
Description: The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, as demonstrated by Chuango branded products, and non-Chuango branded products such as the Eminent EM8617 OV2 Wifi Alarm System.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-294
References: https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659; https://github.com/RiieCco/write-ups/tree/master/CVE-2019-9659
CVE: CVE-2019-9686
Published: 2019-03-11
Description: pacman before 5.1.3 allows directory traversal when installing a remote package via a specified URL "pacman -U <url>" due to an unsanitized file name received from a Content-Disposition header. pacman renames the downloaded package file to match the name given in this header. However, pacman did not sanitize this name, which may contain slashes, before calling rename(). A malicious server (or a network MitM if downloading over HTTP) can send a Content-Disposition header to make pacman place the file anywhere in the filesystem, potentially leading to arbitrary root code execution. Notably, this bypasses pacman's package signature checking. This occurs in curl_download_internal in lib/libalpm/dload.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://git.archlinux.org/pacman.git/commit/?h=release/5.1.x&id=1bf767234363f7ad5933af3f7ce267c123017bde; https://git.archlinux.org/pacman.git/commit/?id=[PII_REDACTED]bec2c007730006de2aeec8587dfc84; https://git.archlinux.org/pacman.git/commit/?id=d197d8ab82cf[PII_REDACTED]fb968067897a12775
CVE: CVE-2019-9687
Published: 2019-03-11
Description: PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIC2EXSSMBT3MY2HY42IIY4BUQS2SVYB/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTJ5AAM6Y4NMSELEH7N5ZG4DNO56BCYF/; https://sourceforge.net/p/podofo/code/1969
CVE: CVE-2019-9688
Published: 2019-03-11
Description: sftnow through 2018-12-29 allows index.php?g=Admin&m=User&a=add_post CSRF to add an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/forgeekscn/sftnow/issues/6; https://github.com/forgeekscn/sftnow/issues/6
CVE: CVE-2019-9692
Published: 2019-03-11
Description: class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: http://packetstormsecurity.com/files/152269/CMS-Made-Simple-CMSMS-Showtime2-File-Upload-Remote-Command-Execution.html; http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_image.php&rev=47; http://www.rapid7.com/db/modules/exploit/multi/http/cmsms_showtime2_rce
CVE: CVE-2019-9693
Published: 2019-03-11
Description: In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow (parameter show_id), _Getshowinfo (parameter show_id), _Getpictureinfo (parameter picture_id), _AdjustNameSeq (parameter shownumber), _Updatepicture (parameter picture_id), and _Deletepicture (parameter picture_id).
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_data.php&rev=47; https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285; http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_data.php&rev=47