deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-14293
Published: 2020-10-02
Description: conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface).
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2020/Sep/51; https://github.com/patrickhener/CVE-2020-14293; https://www.secudos.de/en/news-en/domos-release-5-9
CVE: CVE-2020-14294
Published: 2020-10-02
Description: An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global notice board.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2020/Sep/50; https://github.com/patrickhener/CVE-2020-14294; https://www.qiata.com
CVE: CVE-2020-17382
Published: 2020-10-02
Description: The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/159315/MSI-Ambient-Link-Driver-1.0.0.8-Privilege-Escalation.html; https://us.msi.com/support/download/vga; https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities
CVE: CVE-2020-17482
Published: 2020-10-02
Description: An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-908
References: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html; https://github.com/PowerDNS/pdns; https://security.gentoo.org/glsa/202012-18
CVE: CVE-2020-24696
Published: 2020-10-02
Description: An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html
CVE: CVE-2020-24697
Published: 2020-10-02
Description: An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature.
CVSS Score: 7.5 (HIGH)
References: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html
CVE: CVE-2020-24698
Published: 2020-10-02
Description: An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-06.html
CVE: CVE-2020-25741
Published: 2020-10-02
Description: fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive.
CVSS Score: 3.2 (LOW)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2020/09/29/1; https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05295.html; https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Ffdc_nullptr1
CVE: CVE-2020-26124
Published: 2020-10-02
Description: openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_encode_safe is not used in config/databasebackend.inc. Successful exploitation allows arbitrary command execution on the underlying operating system as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/160223/OpenMediaVault-rpc.php-Authenticated-PHP-Code-Injection.html; https://github.com/openmediavault/openmediavault/commit/ebb51bbf5a39f4955eab0073bf87f2a31926d85d; https://www.openmediavault.org/?p=2797
CVE: CVE-2020-26134
Published: 2020-10-02
Description: Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LiveHelperChat/livehelperchat/commit/a131b937dd6a87271ed1c0c8b8deb8710cf78f58; https://github.com/rekter0/exploits/tree/master/CVE-2020-26134; https://livehelperchat.com/3.44v-security-update-and-few-other-bits-586a.html
CVE: CVE-2020-26135
Published: 2020-10-02
Description: Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LiveHelperChat/livehelperchat/commit/a131b937dd6a87271ed1c0c8b8deb8710cf78f58; https://github.com/rekter0/exploits/tree/master/CVE-2020-26134; https://livehelperchat.com/3.44v-security-update-and-few-other-bits-586a.html
CVE: CVE-2020-7736
Published: 2020-10-02
Description: The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5; https://snyk.io/vuln/SNYK-JS-BMOOR-598664; https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5
CVE: CVE-2020-7737
Published: 2020-10-02
Description: All versions of package safetydance are vulnerable to Prototype Pollution via the set function.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-SAFETYDANCE-598687; https://snyk.io/vuln/SNYK-JS-SAFETYDANCE-598687
CVE: CVE-2020-7738
Published: 2020-10-02
Description: All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load() of the package js-yaml instead of its secure replacement , safeLoad().
CVSS Score: 8.3 (HIGH)
References: https://snyk.io/vuln/SNYK-JS-SHIBA-596466; https://snyk.io/vuln/SNYK-JS-SHIBA-596466
CVE: CVE-2020-8110
Published: 2020-10-02
Description: A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects: Bitdefender Engines version 7.84897 and prior versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-824, CWE-824
References: https://www.bitdefender.com/support/security-advisories/bitdefender-cevakrnl-xmd-parser-denial-of-service-va-8766; https://www.bitdefender.com/support/security-advisories/bitdefender-cevakrnl-xmd-parser-denial-of-service-va-8766
CVE: CVE-2020-25623
Published: 2020-10-02
Description: Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if httpd in the inets application is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/erlang/otp/releases/tag/OTP-23.1; https://www.erlang.org/downloads; https://www.erlang.org/news
CVE: CVE-2020-18184
Published: 2020-10-02
Description: In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
CVSS Score: 7.2 (HIGH)
References: https://github.com/pluxml/PluXml/issues/320; https://github.com/pluxml/PluXml/issues/320
CVE: CVE-2020-18185
Published: 2020-10-02
Description: class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/pluxml/PluXml/issues/321; https://github.com/pluxml/PluXml/issues/321
CVE: CVE-2020-18190
Published: 2020-10-02
Description: Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/bludit/bludit/issues/978; https://github.com/bludit/bludit/issues/978
CVE: CVE-2020-18191
Published: 2020-10-02
Description: GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1303; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1303
CVE: CVE-2020-24356
Published: 2020-10-02
Description: `cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows system, `cloudflared` searches for configuration files which could be abused by a malicious entity to execute commands as a privileged user. Version 2020.8.1 fixes this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-427
References: https://github.com/cloudflare/cloudflared/security/advisories/GHSA-hgwp-4vp4-qmm2; https://github.com/cloudflare/cloudflared/security/advisories/GHSA-hgwp-4vp4-qmm2
CVE: CVE-2020-7069
Published: 2020-10-02
Description: In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20, CWE-326
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html; https://bugs.php.net/bug.php?id=79601
CVE: CVE-2020-7070
Published: 2020-10-02
Description: In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with prefixes like __Host confused with cookies that decode to such prefix, thus leading to an attacker being able to forge cookie which is supposed to be secure. See also CVE-2020-8184 for more information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-565
References: http://cve.circl.lu/cve/CVE-2020-8184; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html
CVE: CVE-2020-5422
Published: 2020-10-02
Description: BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM (through ps or looking at process details).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-214, CWE-668
References: https://www.cloudfoundry.org/blog/cve-2020-5422; https://www.cloudfoundry.org/blog/cve-2020-5422
CVE: CVE-2020-15230
Published: 2020-10-02
Description: Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application. Only applications using FileMiddleware are affected. This is fixed in version 4.29.4.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://github.com/vapor/vapor/commit/cf1651f7ff76515593f4d8ca6e6e15d2247fe255; https://github.com/vapor/vapor/pull/2500; https://github.com/vapor/vapor/security/advisories/GHSA-vcvg-xgr8-p5gq
CVE: CVE-2020-24568
Published: 2020-10-02
Description: An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://mbconnectline.com/security-advice/; https://mbconnectline.com/security-advice/
CVE: CVE-2020-24627
Published: 2020-10-02
Description: A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us
CVE: CVE-2020-24628
Published: 2020-10-02
Description: A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04044en_us
CVE: CVE-2020-26541
Published: 2020-10-02
Description: The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
CVSS Score: 6.5 (MEDIUM)
References: https://lkml.org/lkml/2020/9/15/1871; https://lkml.org/lkml/2020/9/15/1871
CVE: CVE-2020-5979
Published: 2020-10-02
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented with a dialog box for input by a high-privilege process, which may lead to escalation of privileges.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5980
Published: 2020-10-02
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will load its dependencies in an insecure fashion, which may lead to code execution or denial of service.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5981
Published: 2020-10-02
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), in which a specially crafted shader can cause an out of bounds access, which may lead to denial of service or code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5982
Published: 2020-10-02
Description: NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler, in which the software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests, which may lead to denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-770
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-12676
Published: 2020-10-02
Description: FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack".
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347
References: http://packetstormsecurity.com/files/159454/FusionAuth-SAMLv2-0.2.3-Message-Forging.html; http://seclists.org/fulldisclosure/2020/Oct/1; https://compass-security.com/fileadmin/Research/Advisories/2020-06_CSNC-2020-002_FusionAuth_Signature_Exclusion_Attack.txt
CVE: CVE-2020-13337
Published: 2020-10-02
Description: An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.json; https://gitlab.com/gitlab-org/gitlab/-/issues/199049; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13337.json
CVE: CVE-2020-13338
Published: 2020-10-02
Description: An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13338.json; https://gitlab.com/gitlab-org/gitlab/-/issues/213273; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13338.json
CVE: CVE-2020-15231
Published: 2020-10-02
Description: In mapfish-print before version 3.24, a user can use the JSONP support to do a Cross-site scripting.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e; https://github.com/mapfish/mapfish-print/security/advisories/GHSA-w534-q4xf-h5v2; https://github.com/mapfish/mapfish-print/pull/1397/commits/89155f2506b9cee822e15ce60ccae390a1419d5e
CVE: CVE-2020-15232
Published: 2020-10-02
Description: In mapfish-print before version 3.24, a user can do to an XML External Entity (XXE) attack with the provided SDL style.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-611
References: https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e; https://github.com/mapfish/mapfish-print/security/advisories/GHSA-vjv6-gq77-3mjw; https://github.com/mapfish/mapfish-print/pull/1397/commits/e1d0527d13db06b2b62ca7d6afb9e97dacd67a0e
CVE: CVE-2020-15589
Published: 2020-10-02
Description: A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho ManageEngine Desktop Central 10.0.552.W and Remote Access Plus before 10.1.2119.1. By exploiting this issue, an attacker-controlled server can force the client to skip TLS certificate validation, leading to a man-in-the-middle attack against HTTPS and unauthenticated remote code execution.
CVSS Score: 8.1 (HIGH)
References: https://www.manageengine.com/products/desktop-central/; https://www.manageengine.com/products/desktop-central/untrusted-agent-server-communication.html; https://www.manageengine.com/products/desktop-central/
CVE: CVE-2020-24397
Published: 2020-10-02
Description: An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. An attacker-controlled server can trigger an integer overflow in InternetSendRequestEx and InternetSendRequestByBitrate that leads to a heap-based buffer overflow and Remote Code Execution with SYSTEM privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-190, CWE-787
References: https://www.manageengine.com/products/desktop-central/; https://www.manageengine.com/products/desktop-central/integer-overflow-vulnerability.html; https://www.manageengine.com/products/desktop-central/
CVE: CVE-2020-26525
Published: 2020-10-02
Description: Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the database and server to initiate remote connections to third party DNS servers.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/lukaszstu/SmartAsset-SQLinj-CVE-2020-26525/blob/main/README.md; https://support.damstratechnology.com/hc/en-us/categories/[PII_REDACTED]46-SmartAsset-Damstra-Asset-Management-Platform; https://www.smartasset.com.au/
CVE: CVE-2020-26526
Published: 2020-10-02
Description: An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is invalid than when the username is valid ("Unable to find an APIDomain" versus "Wrong email or password").
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/lukaszstu/SmartAsset-UE-CVE-2020-26526; https://smartasset.com/; https://support.damstratechnology.com/hc/en-us/categories/[PII_REDACTED]46-SmartAsset-Damstra-Asset-Management-Platform
CVE: CVE-2020-15233
Published: 2020-10-02
Description: ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite from version 0.30.2 and before version 0.34.1, there is an issue in which an an attacker can override the registered redirect URL by performing an OAuth flow and requesting a redirect URL that is to the loopback adapter. Attackers can provide both custom URL query parameters to their loopback redirect URL, as well as actually overriding the host of the registered redirect URL. These attacks are only applicable in scenarios where the attacker has access over the loopback interface. This vulnerability has been patched in ORY Fosite v0.34.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-601, CWE-601
References: https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf; https://github.com/ory/fosite/security/advisories/GHSA-rfq3-w54c-f9q5; https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf
CVE: CVE-2020-15234
Published: 2020-10-02
Description: ORY Fosite is a security first OAuth2 & OpenID Connect framework for Go. In Fosite before version 0.34.1, the OAuth 2.0 Client's registered redirect URLs and the redirect URL provided at the OAuth2 Authorization Endpoint where compared using strings.ToLower while they should have been compared with a simple string match. This allows an attacker to register a client with allowed redirect URL https://example.com/callback. Then perform an OAuth2 flow and requesting redirect URL https://example.com/CALLBACK. Instead of an error (invalid redirect URL), the browser is redirected to https://example.com/CALLBACK with a potentially successful OAuth2 response, depending on the state of the overall OAuth2 flow (the user might still deny the request for example). This vulnerability has been patched in ORY Fosite v0.34.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-601, CWE-178
References: https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf; https://github.com/ory/fosite/security/advisories/GHSA-grfp-q2mm-hfp6; https://github.com/ory/fosite/commit/cdee51ebe721bfc8acca0fd0b86b030ca70867bf
CVE: CVE-2020-26527
Published: 2020-10-02
Description: An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding with 200 OK and a wildcard 'Access-Control-Allow-Origin: *' header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://github.com/lukaszstu/SmartAsset-CORS-CVE-2020-26527/blob/main/README.md; https://smartasset.com/; https://support.damstratechnology.com/hc/en-us/categories/[PII_REDACTED]46-SmartAsset-Damstra-Asset-Management-Platform
CVE: CVE-2020-5983
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to write to a memory location that is outside the intended boundary of the frame buffer memory allocated to guest operating systems, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075
CVE: CVE-2020-5984
Published: 2020-10-02
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources, which may lead to denial of service, code execution, and information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5075; https://nvidia.custhelp.com/app/answers/detail/a_id/5075