deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-12834
Published: 2020-05-15
Description: eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup (or factory reset).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://psytester.github.io/CVE-2020-12834/; https://psytester.github.io/CVE-2020-12834/
CVE: CVE-2019-18666
Published: 2020-05-15
Description: An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without authorization via an undocumented HTTP request. Although this is the primary vulnerability, the impact depends on the firmware version. Versions 609EU through 613EUbeta were tested. Versions through 6.12b01 have weak root credentials, allowing an attacker to gain remote root access. After 6.12b01, the root credentials were changed but the telnet service can still be started without authorization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://c1a.eu/dlink-dap-1360.html; https://daschloer.github.io/sec/dlink-dap-1360.html; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10171
CVE: CVE-2019-19721
Published: 2020-05-15
Description: An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted image file. NOTE: this may be related to the SDL_Image product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193, CWE-787
References: http://hg.libsdl.org/SDL_image/; https://bugs.gentoo.org/721940; https://git.videolan.org/?p=vlc/vlc-3.0.git%3Ba=commit%3Bh=72afe7ebd8305bf4f5360293b8621cde52ec506b
CVE: CVE-2019-20389
Published: 2020-05-15
Description: An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's browser without proper output encoding.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/157699/Subrion-CMS-4.2.1-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/157699/Subrion-CMS-4.2.1-Cross-Site-Scripting.html
CVE: CVE-2019-20390
Published: 2020-05-15
Description: A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application fails to validate the CSRF token for a GET request. An attacker can craft a panel/uploads/read.json?cmd=rm URL (removing this token) and send it to the victim.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/157700/Subrion-CMS-4.2.1-Cross-Site-Request-Forgery.html; http://packetstormsecurity.com/files/157700/Subrion-CMS-4.2.1-Cross-Site-Request-Forgery.html
CVE: CVE-2020-12651
Published: 2020-05-15
Description: SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=2033; https://twitter.com/taviso/status/[PII_REDACTED]90919680; https://www.vandyke.com/products/securecrt/history.txt
CVE: CVE-2020-12798
Published: 2020-05-15
Description: Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/157715/Cellebrite-UFED-7.5.0.845-Desktop-Escape-Privilege-Escalation.html; https://github.com/thatguylevel; https://korelogic.com/Resources/Advisories/KL-001-2020-002.txt
CVE: CVE-2020-12888
Published: 2020-05-15
Description: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-755
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; http://www.openwall.com/lists/oss-security/2020/05/19/6
CVE: CVE-2020-12889
Published: 2020-05-15
Description: MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b; https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b
CVE: CVE-2020-12872
Published: 2020-05-15
Description: yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: https://github.com/erlyaws/yaws/blob/c0fd79f17d52628fcec527da7fa3e788c283c445/src/yaws_config.erl#L2068-L2075; https://github.com/erlyaws/yaws/issues/402; https://github.com/erlyaws/yaws/releases
CVE: CVE-2020-13091
Published: 2020-05-15
Description: pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/0FuzzingQ/vuln/blob/master/pandas%20unserialize.md; https://pandas.pydata.org/pandas-docs/stable/reference/api/pandas.read_pickle.html; https://github.com/0FuzzingQ/vuln/blob/master/pandas%20unserialize.md
CVE: CVE-2020-13092
Published: 2020-05-15
Description: scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/0FuzzingQ/vuln/blob/master/sklearn%20unserialize.md; https://scikit-learn.org/stable/modules/model_persistence.html#security-maintainability-limitations; https://github.com/0FuzzingQ/vuln/blob/master/sklearn%20unserialize.md
CVE: CVE-2020-13093
Published: 2020-05-15
Description: iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.ispyconnect.com/producthistory.aspx?productid=27; https://www.ispyconnect.com/producthistory.aspx?productid=27
CVE: CVE-2020-1758
Published: 2020-05-15
Description: A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-297, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1758; https://issues.redhat.com/browse/KEYCLOAK-13285; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1758
CVE: CVE-2020-8149
Published: 2020-05-15
Description: Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://hackerone.com/reports/825729; https://hackerone.com/reports/825729
CVE: CVE-2020-13109
Published: 2020-05-16
Description: Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 (aka the IF subcommand to top-level command 7) has a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://cturt.github.io/shogihax.html; https://github.com/CTurt/shogihax; https://cturt.github.io/shogihax.html
CVE: CVE-2020-13110
Published: 2020-05-16
Description: The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://medium.com/%40kiddo_Ha3ker/dll-injection-attack-in-kerberos-npm-package-cb4b32031cd; https://www.linkedin.com/posts/op-innovate_dll-injection-attack-in-kerberos-npm-package-activity[PII_REDACTED]547253760-kVlW; https://www.npmjs.com/advisories/1514
CVE: CVE-2020-13111
Published: 2020-05-16
Description: NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a chunk. A remote attacker can craft a chunked-transfer request that will result in a negative value being passed to memmove via the size parameter, causing the process to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-787
References: https://bitbucket.org/naviserver/naviserver/commits/a5c3079f1d8996d5f34c9384a440acf3519ca3bb; https://sourceforge.net/p/naviserver/bugs/89/; https://bitbucket.org/naviserver/naviserver/commits/a5c3079f1d8996d5f34c9384a440acf3519ca3bb
CVE: CVE-2020-13118
Published: 2020-05-16
Description: An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community.php via the parameter community.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/157733/Mikrotik-Router-Monitoring-System-1.2.3-SQL-Injection.html; https://github.com/adeoluwa-adebiyi/Mikrotik-Router-Monitoring-System/issues/4; http://packetstormsecurity.com/files/157733/Mikrotik-Router-Monitoring-System-1.2.3-SQL-Injection.html
CVE: CVE-2020-13121
Published: 2020-05-16
Description: Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/Submitty/Submitty/issues/5265; https://github.com/Submitty/Submitty/issues/5265
CVE: CVE-2020-13125
Published: 2020-05-17
Description: An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.
CVSS Score: 6.5 (MEDIUM)
References: https://wpvulndb.com/vulnerabilities/10214; https://www.wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk/; https://wpvulndb.com/vulnerabilities/10214
CVE: CVE-2020-13126
Published: 2020-05-17
Description: An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://wpvulndb.com/vulnerabilities/10214; https://www.wordfence.com/blog/2020/05/combined-attack-on-elementor-pro-and-ultimate-addons-for-elementor-puts-1-million-sites-at-risk/; https://wpvulndb.com/vulnerabilities/10214
CVE: CVE-2020-4345
Published: 2020-05-17
Description: IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318.
CVSS Score: 3.3 (LOW)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178318; https://www.ibm.com/support/pages/node/6208661; https://exchange.xforce.ibmcloud.com/vulnerabilities/178318
CVE: CVE-2019-20797
Published: 2020-05-18
Description: An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77J22ZEQXS5SAYZGBDJ475AKFFJNKX5L/
CVE: CVE-2019-20798
Published: 2020-05-18
Description: An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and execute arbitrary commands.
CVSS Score: 8.4 (HIGH)
CWE: CWE-79
References: https://github.com/cherokee/webserver/issues/1227; https://logicaltrust.net/blog/2019/11/cherokee.html; https://security.gentoo.org/glsa/202012-09
CVE: CVE-2019-20799
Published: 2020-05-18
Description: In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/cherokee/webserver/issues/1221; https://github.com/cherokee/webserver/issues/1222; https://github.com/cherokee/webserver/issues/1225
CVE: CVE-2019-20800
Published: 2020-05-18
Description: In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by sending many request headers, as demonstrated by a GET request with many "Host: 127.0.0.1" headers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/cherokee/webserver/issues/1224; https://logicaltrust.net/blog/2019/11/cherokee.html; https://security.gentoo.org/glsa/202012-09
CVE: CVE-2019-20801
Published: 2020-05-18
Description: An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server allows for cross-origin requests from any domain, and the WebSocket server lacks authorization control. Any web site can execute JavaScript code (that accesses a user's data) via cross-origin requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-863
References: https://apps.apple.com/us/app/documents-by-readdle/id364901807; https://logicaltrust.net/blog/2019/12/documents.html#authorization; https://apps.apple.com/us/app/documents-by-readdle/id364901807
CVE: CVE-2019-20802
Published: 2020-05-18
Description: An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server improperly displays directory names, leading to Stored XSS, which may be used to steal a user's data. This requires user interaction because there is no known direct way for an attacker to create a crafted directory name on a victim's device. However, a crafted directory name can occur if a victim extracts a ZIP archive that was provided by an attacker.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://apps.apple.com/us/app/documents-by-readdle/id364901807; https://logicaltrust.net/blog/2019/12/documents.html#xss; https://apps.apple.com/us/app/documents-by-readdle/id364901807
CVE: CVE-2020-13128
Published: 2020-05-18
Description: An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/manolo/gwtupload/issues/33; https://logicaltrust.net/blog/2020/02/gwt-upload.html; https://github.com/manolo/gwtupload/issues/33
CVE: CVE-2020-12856
Published: 2020-05-18
Description: OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used.
CVSS Score: 9.8 (CRITICAL)
References: https://covidsafe.watch/issue-register/cve-2020-12856-long-term-tracking-and-possibly-enables-other-bluetooth-based-attack-vectors; https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing; https://github.com/alwentiu/COVIDSafe-CVE-2020-12856/blob/master/README.md
CVE: CVE-2020-12857
Published: 2020-05-18
Description: Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459
References: https://covidsafe.watch/issue-register/cve-2020-12857-tempid-identifier-was-static; https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing; https://www.health.gov.au/resources/apps-and-tools/covidsafe-app
CVE: CVE-2020-12858
Published: 2020-05-18
Description: Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertising beacons.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing; https://www.health.gov.au/resources/apps-and-tools/covidsafe-app; https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing
CVE: CVE-2020-12859
Published: 2020-05-18
Description: Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by observing cleartext payload data. This allows re-identification of devices, especially less common phone models or those in low-density situations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312
References: https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing; https://www.health.gov.au/resources/apps-and-tools/covidsafe-app; https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing
CVE: CVE-2020-12860
Published: 2020-05-18
Description: COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing; https://www.health.gov.au/resources/apps-and-tools/covidsafe-app; https://docs.google.com/document/d/1u5a5ersKBH6eG362atALrzuXo3zuZ70qrGomWVEC27U/edit?usp=sharing
CVE: CVE-2020-13129
Published: 2020-05-18
Description: An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_key and device_id data in the query string, which allows attackers to obtain sensitive information by reading web-server logs.
CVSS Score: 7.2 (HIGH)
CWE: CWE-200
References: https://www.jvanlaak.de/stashcat.html; https://www.jvanlaak.de/stashcat_CWE_598_200517.pdf; https://www.jvanlaak.de/stashcat.html
CVE: CVE-2020-12259
Published: 2020-05-18
Description: rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8; https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
CVE: CVE-2020-10957
Published: 2020-05-18
Description: In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00059.html; http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2020/May/37
CVE: CVE-2020-10958
Published: 2020-05-18
Description: In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving many newlines after a command.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00059.html; http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2020/May/37
CVE: CVE-2020-12257
Published: 2020-05-18
Description: rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form (add a user, delete a user, or edit a user).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/farid007/eb[PII_REDACTED]fb8cdf5942573c9954ef; https://gist.github.com/farid007/eb[PII_REDACTED]fb8cdf5942573c9954ef
CVE: CVE-2020-12258
Published: 2020-05-18
Description: rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-384
References: https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8; https://gist.github.com/farid007/8855031bad0e497264e4879efb5bc9f8
CVE: CVE-2020-9524
Published: 2020-05-18
Description: Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Patch Update 8. The vulnerability could allow an attacker to trigger administrative actions when an administrator viewed malicious data left by the attacker (stored XSS) or followed a malicious link (reflected XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03640252; https://softwaresupport.softwaregrp.com/doc/KM03640252
CVE: CVE-2020-10967
Published: 2020-05-18
Description: In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00059.html; http://packetstormsecurity.com/files/157771/Open-Xchange-Dovecot-2.3.10-Null-Pointer-Dereference-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2020/May/37
CVE: CVE-2020-12255
Published: 2020-05-18
Description: rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to vendor.php that contains arbitrary PHP code and changing the content-type to image/gif.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://gist.github.com/farid007/9f6ad063645d5b1550298c8b9ae953ff; https://gist.github.com/farid007/9f6ad063645d5b1550298c8b9ae953ff