deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-17264
Published: 2019-10-06
Description: In libyal liblnk before 20191006, liblnk_location_information_read_data in liblnk_location_information.c has a heap-based buffer over-read because an incorrect variable name is used for a certain offset. NOTE: the vendor has disputed this as described in the GitHub issue
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-682
References: https://github.com/libyal/liblnk/compare/20181227...20191006; https://github.com/libyal/liblnk/issues/38; https://github.com/libyal/liblnk/compare/20181227...20191006
CVE: CVE-2019-17266
Published: 2019-10-06
Description: libsoup from versions 2.65.1 until 2.68.1 have a heap-based buffer over-read because soup_ntlm_parse_challenge() in soup-auth-ntlm.c does not properly check an NTLM message's length before proceeding with a memcpy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=941912; https://github.com/Kirin-say/Vulnerabilities/blob/master/CVE-2019-17266_POC.md; https://gitlab.gnome.org/GNOME/libsoup/commit/88b7dff4467f4151afae244ea7d1223753cd05ab
CVE: CVE-2019-17267
Published: 2019-10-07
Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://access.redhat.com/errata/RHSA-2019:3200; https://access.redhat.com/errata/RHSA-2020:0159; https://access.redhat.com/errata/RHSA-2020:0160
CVE: CVE-2019-17269
Published: 2019-10-07
Description: Intellian Remote Access 3.18 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the Ping Test field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://misteralfa-hack.blogspot.com/2019/10/intellian-intellian-remote-access-rce.html; https://misteralfa-hack.blogspot.com/2019/10/intellian-intellian-remote-access-rce.html
CVE: CVE-2018-18379
Published: 2019-10-07
Description: The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://elementor.com/blog/; https://www.contextis.com/en/resources/advisories/cve-2018-18379; https://www.contextis.com/resources/advisories
CVE: CVE-2019-15746
Published: 2019-10-07
Description: SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system commands in the context of the web user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-94
References: https://www.contextis.com/en/resources/advisories/cve-2019-15746; https://www.contextis.com/en/resources/advisories/cve-2019-15746
CVE: CVE-2019-15747
Published: 2019-10-07
Description: SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.contextis.com/en/resources/advisories/cve-2019-15747; https://www.contextis.com/en/resources/advisories/cve-2019-15747
CVE: CVE-2019-15748
Published: 2019-10-07
Description: SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker could use the upload and import functionality to import a malicious SCORM package that includes a PHP file, which could execute arbitrary PHP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.contextis.com/en/resources/advisories/cve-2019-15748; https://www.contextis.com/en/resources/advisories/cve-2019-15748
CVE: CVE-2019-15749
Published: 2019-10-07
Description: SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password. This would allow an attacker with access to the victim's account (e.g., via XSS or an unattended workstation) to change that password and address.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-640
References: https://www.contextis.com/en/resources/advisories/cve-2019-15749; https://www.contextis.com/en/resources/advisories/cve-2019-15749
CVE: CVE-2019-15750
Published: 2019-10-07
Description: A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.contextis.com/en/resources/advisories/cve-2019-15750; https://www.contextis.com/en/resources/advisories/cve-2019-15750
CVE: CVE-2019-15751
Published: 2019-10-07
Description: An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code by uploading a SCORM file with an executable extension. This allows an unauthenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to the web root of the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.contextis.com/en/resources/advisories/cve-2019-15751; https://www.contextis.com/en/resources/advisories/cve-2019-15751
CVE: CVE-2019-16263
Published: 2019-10-07
Description: The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://blog.appicaptor.com/2019/10/04/vulnerable-library-warning-twitterkit-for-ios/; https://github.com/twitter-archive/twitter-kit-ios/blob/ac42e1351a66afa5ff7718d04d64a905dafe1f41/TwitterCore/TwitterCore/Networking/Security/TWTRServerTrustEvaluator.m#L75-L81; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_TwitterKit_for_iOS_CVE-2019-16263.pdf
CVE: CVE-2019-3688
Published: 2019-10-07
Description: The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html
CVE: CVE-2015-9450
Published: 2019-10-07
Description: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html; https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers; https://wpvulndb.com/vulnerabilities/8340
CVE: CVE-2015-9451
Published: 2019-10-07
Description: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html; https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers; https://wpvulndb.com/vulnerabilities/8340
CVE: CVE-2015-9452
Published: 2019-10-07
Description: The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_cb24b6204803e8e94943b198edc37af7.html; https://wordpress.org/plugins/nex-forms-express-wp-form-builder/#developers; https://wpvulndb.com/vulnerabilities/8336
CVE: CVE-2015-9453
Published: 2019-10-07
Description: The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_b677bb83a6c1495f85f76faa5b13011d.html; https://wordpress.org/plugins/broken-link-manager/#developers; https://wpvulndb.com/vulnerabilities/8333
CVE: CVE-2015-9454
Published: 2019-10-07
Description: The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_36e814da6ac4dd903be2c77cfbdd0afd.html; https://wordpress.org/plugins/smooth-slider/#developers; https://wpvulndb.com/vulnerabilities/8284
CVE: CVE-2015-9455
Published: 2019-10-07
Description: The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/; https://wordpress.org/plugins/buddypress-activity-plus/#developers; https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/
CVE: CVE-2015-9456
Published: 2019-10-07
Description: The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html; https://wordpress.org/plugins/orbisius-child-theme-creator/#developers; https://wpvulndb.com/vulnerabilities/8315
CVE: CVE-2019-12811
Published: 2019-10-07
Description: ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method. This can be leveraged for code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155
CVE: CVE-2019-12812
Published: 2019-10-07
Description: MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155
CVE: CVE-2019-17315
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Administration module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1321
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-042/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-042/
CVE: CVE-2019-17316
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Import module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1321
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-043/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-043/
CVE: CVE-2019-17317
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the UpgradeWizard module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1321
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-044/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-044/
CVE: CVE-2019-17318
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-046/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-046/
CVE: CVE-2019-17319
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Emails module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-047/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-047/
CVE: CVE-2019-15894
Published: 2019-10-07
Description: An issue was discovered in Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.6, 3.2.x through 3.2.3, and 3.3.x through 3.3.1. An attacker who uses fault injection to physically disrupt the ESP32 CPU can bypass the Secure Boot digest verification at startup, and boot unverified code from flash. The fault injection attack does not disable the Flash Encryption feature, so if the ESP32 is configured with the recommended combination of Secure Boot and Flash Encryption, then the impact is minimized. If the ESP32 is configured without Flash Encryption then successful fault injection allows arbitrary code execution. To protect devices with Flash Encryption and Secure Boot enabled against this attack, a firmware change must be made to permanently enable Flash Encryption in the field if it is not already permanently enabled.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-755
References: https://www.espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot; https://www.espressif.com/en/news/Espressif_Security_Advisory_Concerning_Fault_Injection_and_Secure_Boot
CVE: CVE-2019-17041
Published: 2019-10-07
Description: An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon) but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00032.html; https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog
CVE: CVE-2019-17042
Published: 2019-10-07
Description: An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to locate a log message delimiter (in this case, a space or a colon), but fails to account for strings that do not satisfy this constraint. If the string does not match, then the variable lenMsg will reach the value zero and will skip the sanity check that detects invalid log messages. The message will then be considered valid, and the parser will eat up the nonexistent colon delimiter. In doing so, it will decrement lenMsg, a signed integer, whose value was zero and now becomes minus one. The following step in the parser is to shift left the contents of the message. To do this, it will call memmove with the right pointers to the target and destination strings, but the lenMsg will now be interpreted as a huge value, causing a heap overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00032.html; https://github.com/rsyslog/rsyslog/blob/v8-stable/ChangeLog
CVE: CVE-2019-17292
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Inbox module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-019/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-019/
CVE: CVE-2019-17293
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the pmse_Project module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-020/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-020/
CVE: CVE-2019-17294
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the export function by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-021/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-021/
CVE: CVE-2019-17295
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the history function by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-022/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-022/
CVE: CVE-2019-17296
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Contacts module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-023/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-023/
CVE: CVE-2019-17297
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Quotes module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-024/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-024/
CVE: CVE-2019-17298
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows SQL injection in the Administration module by a Developer user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-025/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-025/
CVE: CVE-2019-17299
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-026/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-026/
CVE: CVE-2019-17300
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Administration module by a Developer user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-027/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-027/
CVE: CVE-2019-17301
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-028/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-028/
CVE: CVE-2019-17302
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-029/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-029/
CVE: CVE-2019-17303
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Developer user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-030/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-030/
CVE: CVE-2019-17304
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-031/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-031/
CVE: CVE-2019-17305
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the MergeRecords module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-032/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-032/
CVE: CVE-2019-17306
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Configurator module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-033/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-033/
CVE: CVE-2019-17307
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Tracker module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-034/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-034/
CVE: CVE-2019-17308
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Emails module by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-035/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-035/
CVE: CVE-2019-17309
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the EmailMan module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-036/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-036/
CVE: CVE-2019-17310
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the Campaigns module by an Admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-037/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-037/
CVE: CVE-2019-17311
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-038/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-038/
CVE: CVE-2019-17312
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-039/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-039/
CVE: CVE-2019-17313
Published: 2019-10-07
Description: SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-040/; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2019-040/