deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-24590
Published: 2020-08-21
Description: The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-776
References: https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0742
CVE: CVE-2020-24591
Published: 2020-08-21
Description: The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager through 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0, Enterprise Integrator 6.2.0 and 6.3.0, and Identity Server Analytics through 5.6.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0728; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0728
CVE: CVE-2020-10123
Published: 2020-08-21
Description: The currency dispenser of NCR SelfSev ATMs running APTRA XFS 05.01.00 or earlier does not adequately authenticate session key generation requests from the host computer, allowing an attacker with physical access to internal ATM components to issue valid commands to dispense currency by generating a new session key that the attacker knows.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://kb.cert.org/vuls/id/116713; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Secure_white_paper-Dispenser_Security_Solution_September_2018.pdf; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-10-S1_and_S2_Critical_Update.pdf
CVE: CVE-2020-10124
Published: 2020-08-21
Description: NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer, which could allow an attacker with physical access to the internal components of the ATM to execute arbitrary code, including code that enables the attacker to commit deposit forgery.
CVSS Score: 7.1 (HIGH)
CWE: CWE-306, CWE-311, CWE-353, CWE-319
References: https://kb.cert.org/vuls/id/815655; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-13_APTRA_XFS_; https://kb.cert.org/vuls/id/815655
CVE: CVE-2020-10125
Published: 2020-08-21
Description: NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor (BNA) software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files and CAB archives used to update BNA software, as well as bypass application whitelisting, resulting in the ability to execute arbitrary code.
CVSS Score: 7.6 (HIGH)
CWE: CWE-326, CWE-326
References: https://kb.cert.org/vuls/id/815655; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-13_APTRA_XFS_; https://kb.cert.org/vuls/id/815655
CVE: CVE-2020-10126
Published: 2020-08-21
Description: NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor (BNA), enabling an attacker with physical access to internal ATM components to restart the host computer and execute arbitrary code with SYSTEM privileges because while booting, the update process looks for CAB archives on removable media and executes a specific file without first validating the signature of the CAB archive.
CVSS Score: 7.6 (HIGH)
CWE: CWE-305, CWE-347
References: https://kb.cert.org/vuls/id/815655; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-13_APTRA_XFS_; https://kb.cert.org/vuls/id/815655
CVE: CVE-2020-15858
Published: 2020-08-21
Description: Some devices of Thales DIS (formerly Gemalto, formerly Cinterion) allow Directory Traversal by physically proximate attackers. The directory path access check of the internal flash file system can be circumvented. This flash file system can store application-specific data and data needed for customer Java applications, TLS and OTAP (Java over-the-air-provisioning) functionality. The affected products and releases are: BGS5 up to and including SW RN 02.000 / ARN 01.001.06 EHSx and PDSx up to and including SW RN 04.003 / ARN 01.000.04 ELS61 up to and including SW RN 02.002 / ARN 01.000.04 ELS81 up to and including SW RN 05.002 / ARN 01.000.04 PLS62 up to and including SW RN 02.000 / ARN 01.000.04
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/171978/Telit-Cinterion-IoT-Traversal-Escalation-Bypass-Heap-Overflow.html; http://seclists.org/fulldisclosure/2023/Apr/11; https://www.thalesgroup.com/en/markets/digital-identity-and-security/iot/resources/security-updates-cinterion-iot-modules
CVE: CVE-2020-8189
Published: 2020-08-21
Description: A cross-site scripting error in Nextcloud Desktop client 2.6.4 allowed to present any html (including local links) when responding with invalid data on the login attempt.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/685552; https://nextcloud.com/security/advisory/?id=NC-SA-2020-027; https://security.gentoo.org/glsa/202009-09
CVE: CVE-2020-8227
Published: 2020-08-21
Description: Missing sanitization of a server response in Nextcloud Desktop Client 2.6.4 for Linux allowed a malicious Nextcloud Server to store files outside of the dedicated sync directory.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/590319; https://nextcloud.com/security/advisory/?id=NC-SA-2020-032; https://security.gentoo.org/glsa/202009-09
CVE: CVE-2020-8234
Published: 2020-08-21
Description: A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613, CWE-613
References: https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c%2C; https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821%2C; https://www.ui.com/download/edgemax
CVE: CVE-2020-8620
Published: 2020-08-21
Description: In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html; https://kb.isc.org/docs/cve-2020-8620
CVE: CVE-2020-8621
Published: 2020-08-21
Description: In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html; https://kb.isc.org/docs/cve-2020-8621
CVE: CVE-2020-8622
Published: 2020-08-21
Description: In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html; https://kb.isc.org/docs/cve-2020-8622
CVE: CVE-2020-8623
Published: 2020-08-21
Description: In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html; https://kb.isc.org/docs/cve-2020-8623
CVE: CVE-2020-8624
Published: 2020-08-21
Description: In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html; https://kb.isc.org/docs/cve-2020-8624
CVE: CVE-2020-9062
Published: 2020-08-21
Description: Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an attacker with physical access to internal ATM components to commit deposit forgery by intercepting and modifying messages to the host computer, such as the amount and value of currency being deposited.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-311, CWE-353, CWE-306, CWE-311
References: https://kb.cert.org/vuls/id/221785; https://kb.cert.org/vuls/id/221785; https://www.kb.cert.org/vuls/id/221785
CVE: CVE-2020-9063
Published: 2020-08-21
Description: NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and execute arbitrary code with SYSTEM privileges on the host computer by causing a buffer overflow on the host.
CVSS Score: 7.6 (HIGH)
CWE: CWE-120, CWE-120
References: https://kb.cert.org/vuls/id/116713; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Secure_white_paper-Dispenser_Security_Solution_September_2018.pdf; https://www.ncr.com/content/dam/ncrcom/content-type/documents/NCR_Security_Alert-2018-10-S1_and_S2_Critical_Update.pdf
CVE: CVE-2020-5416
Published: 2020-08-21
Description: Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://www.cloudfoundry.org/blog/cve-2020-5416; https://www.cloudfoundry.org/blog/cve-2020-5416
CVE: CVE-2020-5417
Published: 2020-08-21
Description: Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially resulting in the developer's app handling some requests that were expected to go to certain system components.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.cloudfoundry.org/blog/cve-2020-5417; https://www.cloudfoundry.org/blog/cve-2020-5417
CVE: CVE-2020-7711
Published: 2020-08-23
Description: This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/russellhaering/goxmldsig/issues/48; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUSSELLHAERINGGOXMLDSIG-608301; https://github.com/russellhaering/goxmldsig/issues/48
CVE: CVE-2020-13101
Published: 2020-08-24
Description: In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a valid or invalid outcome for a valid or invalid signature) via a crafted XML signature, when the InlineXML option is used. This defeats the expectation of non-repudiation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.oasis-open.org/apps/org/workgroup/dss-x/; https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=dss-x; https://www.oasis-open.org/standards#dssv1.0
CVE: CVE-2020-14349
Published: 2020-08-24
Description: It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89, CWE-427
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.html
CVE: CVE-2020-14350
Published: 2020-08-24
Description: It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.html
CVE: CVE-2020-19877
Published: 2020-08-24
Description: DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#1; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#1
CVE: CVE-2020-24186
Published: 2020-08-24
Description: A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the wmuUploadFiles AJAX action.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/162983/WordPress-wpDiscuz-7.0.4-Shell-Upload.html; http://packetstormsecurity.com/files/163012/WordPress-wpDiscuz-7.0.4-Remote-Code-Execution.html; http://packetstormsecurity.com/files/163302/WordPress-wpDiscuz-7.0.4-Shell-Upload.html
CVE: CVE-2020-14367
Published: 2020-08-24
Description: A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created during chronyd startup while still running as the root user, and when it's opened for writing, chronyd does not check for an existing symbolic link with the same file name. This flaw allows an attacker with privileged access to create a symlink with the default PID file name pointing to any destination file in the system, resulting in data loss and a denial of service due to the path traversal.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=1870298; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WKABKNLCSC3MACCWU6OM2YGWVWFWFMU/; https://security.gentoo.org/glsa/202008-23
CVE: CVE-2020-19878
Published: 2020-08-24
Description: DBHcms v1.2.0 has a sensitive information leaks vulnerability as there is no security access control in /dbhcms/ext/news/ext.news.be.php, A remote unauthenticated attacker can exploit this vulnerability to get path information.
CVSS Score: 7.5 (HIGH)
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#2; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#2
CVE: CVE-2020-19879
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter of $_GET['dbhcms_pid'] variable in dbhcms\page.php line 107,
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#3; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#3
CVE: CVE-2020-19880
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function form 'Name' in dbhcms\types.php, A remote unauthenticated attacker can exploit this vulnerability to hijack other users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#4; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#4
CVE: CVE-2020-19881
Published: 2020-08-24
Description: DBHcms v1.2.0 has a reflected xss vulnerability as there is no security filter in dbhcms\mod\mod.selector.php line 108 for $_GET['return_name'] parameter, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#6; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#6
CVE: CVE-2020-19882
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for 'menu_description' variable in dbhcms\mod\mod.menus.edit.php line 83 and in dbhcms\mod\mod.menus.view.php line 111, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#7; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#7
CVE: CVE-2020-19883
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no security filter in dbhcms\mod\mod.users.view.php line 57 for user_login, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#5; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#5
CVE: CVE-2020-19884
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function in dbhcms\mod\mod.domain.edit.php line 119.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#8; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#8
CVE: CVE-2020-19885
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_name']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#9; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#9
CVE: CVE-2020-19886
Published: 2020-08-24
Description: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#12; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#12
CVE: CVE-2020-19887
Published: 2020-08-24
Description: DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#10; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#10
CVE: CVE-2020-19888
Published: 2020-08-24
Description: DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#13; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#13
CVE: CVE-2020-19889
Published: 2020-08-24
Description: DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#11; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#11
CVE: CVE-2020-19890
Published: 2020-08-24
Description: DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter function for security, you can read any file's content.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-639, CWE-862
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#15; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#15
CVE: CVE-2020-19891
Published: 2020-08-24
Description: DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_content'] is file content, there is no filter function for security. A remote authenticated admin user can exploit this vulnerability to get a webshell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#14; https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#14
CVE: CVE-2020-7831
Published: 2020-08-24
Description: A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494, CWE-494
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35559
CVE: CVE-2018-1985
Published: 2020-08-24
Description: IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/154207; https://www.ibm.com/support/docview.wss?uid=ibm10869212; https://exchange.xforce.ibmcloud.com/vulnerabilities/154207