deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10063
Published: 2020-06-05
Description: A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10063; https://github.com/zephyrproject-rtos/zephyr/pull/24435; https://github.com/zephyrproject-rtos/zephyr/pull/24530
CVE: CVE-2020-10068
Published: 2020-06-05
Description: In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10068; https://github.com/zephyrproject-rtos/zephyr/pull/23091; https://github.com/zephyrproject-rtos/zephyr/pull/23707
CVE: CVE-2020-10070
Published: 2020-06-05
Description: In the Zephyr Project MQTT code, improper bounds checking can result in memory corruption and possibly remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-120, CWE-190, CWE-120
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10070; https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/0b39cbf3c01d7feec9d0dd7cc7e0e374b6113542; https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment
CVE: CVE-2020-10071
Published: 2020-06-05
Description: The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-120, CWE-129, CWE-120
References: https://docs.zephyrproject.org/latest/security/vulnerabilities.html#cve-2020-10071; https://github.com/zephyrproject-rtos/zephyr/pull/23821/commits/989c4713ba429aa5105fe476b4d629718f3e6082; https://research.nccgroup.com/2020/05/26/research-report-zephyr-and-mcuboot-security-assessment
CVE: CVE-2020-13867
Published: 2020-06-05
Description: Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target (and for the backup directory and backup files).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00005.html; https://github.com/open-iscsi/targetcli-fb/pull/172
CVE: CVE-2020-5591
Published: 2020-06-05
Description: XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://jvn.jp/en/jp/JVN40208370/index.html; https://xack.co.jp/info/?ID=622; https://jvn.jp/en/jp/JVN40208370/index.html
CVE: CVE-2020-13868
Published: 2020-06-05
Description: An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. CSRF affects comment integrity.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical; https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE: CVE-2020-13869
Published: 2020-06-05
Description: An issue was discovered in the Comments plugin before 1.5.6 for Craft CMS. There is stored XSS via a guest name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical; https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE: CVE-2020-13870
Published: 2020-06-05
Description: An issue was discovered in the Comments plugin before 1.5.5 for Craft CMS. There is stored XSS via an asset volume name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical; https://github.com/verbb/comments/blob/craft-3/CHANGELOG.md#155---2020-05-28-critical
CVE: CVE-2020-11697
Published: 2020-06-05
Description: In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-xfh9-5632-hxmv; https://www.itophub.io/wiki/page?id=2_7_0%3Arelease%3A2_7_whats_new; https://github.com/Combodo/iTop/security/advisories/GHSA-xfh9-5632-hxmv
CVE: CVE-2020-13646
Published: 2020-06-05
Description: In Cheetah free WiFi 5.1, the driver file (liebaonat.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020f8, 0x830020E0, 0x830020E4, or 0x8300210c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/y5s5k5/CVE-2020-13646; https://github.com/y5s5k5/CVE-2020-13646
CVE: CVE-2020-11696
Published: 2020-06-05
Description: In Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop professional in version 2.6.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Combodo/iTop/security/advisories/GHSA-4h6p-jghj-8qxm; https://www.itophub.io/wiki/page?id=2_7_0%3Arelease%3Achange_log; https://github.com/Combodo/iTop/security/advisories/GHSA-4h6p-jghj-8qxm
CVE: CVE-2020-13864
Published: 2020-06-05
Description: The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that result in a stored XSS by using a crafted payload in custom links.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.softwaresecured.com/elementor-page-builder-stored-xss/; https://www.softwaresecured.com/elementor-page-builder-stored-xss/
CVE: CVE-2020-13865
Published: 2020-06-05
Description: The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities. An author user can create posts that result in stored XSS vulnerabilities, by using a crafted link in the custom URL or by applying custom attributes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.softwaresecured.com/elementor-page-builder-stored-xss/; https://www.softwaresecured.com/elementor-page-builder-stored-xss/
CVE: CVE-2020-13871
Published: 2020-06-06
Description: SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/
CVE: CVE-2020-13881
Published: 2020-06-06
Description: In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2020/06/08/1; https://github.com/kravietz/pam_tacplus/commit/4a9852c31c2fd0c0e72fbb689a586aabcfb11cb0; https://github.com/kravietz/pam_tacplus/issues/149
CVE: CVE-2020-13883
Published: 2020-06-06
Description: In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows XXE during addition or update of a Lifecycle.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-611
References: https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-0727
CVE: CVE-2020-13889
Published: 2020-06-06
Description: showAlert() in the administration panel in Bludit 3.12.0 allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bludit/bludit/issues/1205; https://github.com/bludit/bludit/issues/1205
CVE: CVE-2020-13890
Published: 2020-06-06
Description: The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jizen0x01.blogspot.com/2020/06/neon-dashboard-xss.html; https://jizen0x01.blogspot.com/2020/06/neon-dashboard-xss.html
CVE: CVE-2020-13894
Published: 2020-06-07
Description: handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://github.com/kbgsft/vuln-dext5editor/wiki/File-Download-vulnerability-in-DEXT5Editor-3.5.1402961-by-xcuter; https://github.com/kbgsft/vuln-dext5editor/wiki/File-Download-vulnerability-in-DEXT5Editor-3.5.1402961-by-xcuter
CVE: CVE-2020-13895
Published: 2020-06-07
Description: Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 (prime256v1). This could conceivably have a security-relevant impact if an attacker wishes to use public r and s values when guessing whether signature verification will fail.
CVSS Score: 8.8 (HIGH)
CWE: CWE-347
References: https://github.com/FGasper/p5-Crypt-Perl/commit/f960ce75502acf[PII_REDACTED]a706672f8369acb2; https://github.com/FGasper/p5-Crypt-Perl/issues/14; https://github.com/FGasper/p5-Crypt-Perl/commit/f960ce75502acf[PII_REDACTED]a706672f8369acb2
CVE: CVE-2020-13897
Published: 2020-06-07
Description: HESK before 3.1.10 allows reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.hesk.com/demo/docs/changelog.html; https://www.hesk.com/demo/docs/changelog.html
CVE: CVE-2020-13902
Published: 2020-06-07
Description: ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20920; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20920
CVE: CVE-2020-13904
Published: 2020-06-07
Description: FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/FFmpeg/FFmpeg/commit/[PII_REDACTED]c7533f586c07a766acc5fe9544d8b2; https://lists.debian.org/debian-lts-announce/2020/07/msg00022.html; https://patchwork.ffmpeg.org/project/ffmpeg/patch/[PII_REDACTED]3905.41926-1-lq%40chinaffmpeg.org/
CVE: CVE-2020-13909
Published: 2020-06-07
Description: The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/facade/ignition/compare/2.0.4...2.0.5; https://github.com/facade/ignition/releases/tag/2.0.5; https://github.com/facade/ignition/compare/2.0.4...2.0.5
CVE: CVE-2020-13910
Published: 2020-06-07
Description: Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=c0f0cbd1759a6ca6cbda4001dff5764f6633c825; https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=c0f0cbd1759a6ca6cbda4001dff5764f6633c825
CVE: CVE-2020-13912
Published: 2020-06-07
Description: SolarWinds Advanced Monitoring Agent before 10.8.9 allows local users to gain privileges via a Trojan horse .exe file, because everyone can write to a certain .exe file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://hansesecure.de/2020/06/vulnerability-in-monitoring-software/?lang=en; https://hansesecure.de/2020/06/vulnerability-in-monitoring-software/?lang=en
CVE: CVE-2020-12773
Published: 2020-06-08
Description: A security misconfiguration vulnerability exists in the SDK of some Realtek ADSL/PON Modem SoC firmware, which allows attackers using a default password to execute arbitrary commands remotely via the build-in network monitoring tool.
CVSS Score: 9.6 (CRITICAL)
References: https://www.twcert.org.tw/tw/cp-132-3681-2a3f6-1.html; https://www.twcert.org.tw/tw/cp-132-3681-2a3f6-1.html
CVE: CVE-2020-4529
Published: 2020-06-08
Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 182713.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182713; https://www.ibm.com/support/pages/node/6220528; https://exchange.xforce.ibmcloud.com/vulnerabilities/182713
CVE: CVE-2020-6109
Published: 2020-06-08
Description: An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a specially crafted message to a target user or a group to exploit this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1055; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1055
CVE: CVE-2020-6110
Published: 2020-06-08
Description: An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially crafted chat message can cause an arbitrary binary planting which could be abused to achieve arbitrary code execution. An attacker needs to send a specially crafted message to a target user or a group to trigger this vulnerability. For the most severe effect, target user interaction is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1056; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1056
CVE: CVE-2020-7676
Published: 2020-06-08
Description: angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes parsing behavior, leading to possibly unsanitizing code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/angular/angular.js/pull/17028%2C; https://lists.apache.org/thread.html/r198985c02829ba8285ed4f9b1de54a33b5f31b08bb38ac51fc86961b%40%3Cozone-issues.hadoop.apache.org%3E; https://lists.apache.org/thread.html/r3f05cfd587c774ea83c18e59eda9fa37fa9bbf3421484d4ee1017a20%40%3Cozone-issues.hadoop.apache.org%3E
CVE: CVE-2020-8172
Published: 2020-06-08
Description: TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://hackerone.com/reports/811502; https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/; https://security.gentoo.org/glsa/202101-07
CVE: CVE-2020-8180
Published: 2020-06-08
Description: A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://hackerone.com/reports/851807; https://nextcloud.com/security/advisory/?id=NC-SA-2020-021; https://hackerone.com/reports/851807
CVE: CVE-2020-9099
Published: 2020-06-08
Description: Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10; V500R002C20; V500R002C30 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200506-02-authentication-en
CVE: CVE-2020-12802
Published: 2020-06-08
Description: LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00058.html; https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html
CVE: CVE-2020-12803
Published: 2020-06-08
Description: ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00058.html; https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html
CVE: CVE-2020-13866
Published: 2020-06-08
Description: WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://hyp3rlinx.altervista.org/advisories/WINGATE-INSECURE-PERMISSIONS-LOCAL-PRIVILEGE-ESCALATION.txt; http://packetstormsecurity.com/files/157958/WinGate-9.4.1.5998-Insecure-Permissions-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2020/Jun/11
CVE: CVE-2020-1775
Published: 2020-06-08
Description: BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-200
References: https://otrs.com/release-notes/otrs-security-advisory-2020-12/; https://otrs.com/release-notes/otrs-security-advisory-2020-12/
CVE: CVE-2020-9040
Published: 2020-06-08
Description: Couchbase Server Java SDK before 2.7.1.1 allows a potential attacker to forge an SSL certificate and pose as the intended peer. An attacker can leverage this flaw by crafting a cryptographically valid certificate that will be accepted by Java SDK's Netty component due to missing hostname verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2020-9041
Published: 2020-06-08
Description: In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2020-9042
Published: 2020-06-08
Description: In Couchbase Server 6.0, credentials cached by a browser can be used to perform a CSRF attack if an administrator has used their browser to check the results of a REST API request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2020-12049
Published: 2020-06-08
Description: An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://packetstormsecurity.com/files/172840/D-Bus-File-Descriptor-Leak-Denial-Of-Service.html; http://www.openwall.com/lists/oss-security/2020/06/04/3; https://gitlab.freedesktop.org/dbus/dbus/-/issues/294
CVE: CVE-2020-12695
Published: 2020-06-08
Description: The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.html; http://www.openwall.com/lists/oss-security/2020/06/08/2; https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/
CVE: CVE-2020-12800
Published: 2020-06-08
Description: The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .php% file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://packetstormsecurity.com/files/157951/WordPress-Drag-And-Drop-Multi-File-Uploader-Remote-Code-Execution.html; https://wordpress.org/plugins/drag-and-drop-multiple-file-upload-contact-form-7/#developers; https://packetstormsecurity.com/files/157951/WordPress-Drag-And-Drop-Multi-File-Uploader-Remote-Code-Execution.html
CVE: CVE-2020-13625
Published: 2020-06-08
Description: PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html; https://github.com/PHPMailer/PHPMailer/releases/tag/v6.1.6