deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15982
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints and the Application Framework feature of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-path-trav
CVE: CVE-2019-15983
Published: 2020-01-06
Description: A vulnerability in the SOAP API of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the DCNM application. The vulnerability exists because the SOAP API improperly handles XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by inserting malicious XML content in an API request. A successful exploit could allow the attacker to read arbitrary files from the affected device. Note: The severity of this vulnerability is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-xml-ext-entity; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-xml-ext-entity
CVE: CVE-2019-15984
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-sql-inject; http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html
CVE: CVE-2019-15985
Published: 2020-01-06
Description: Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DCNM application. For more information about these vulnerabilities, see the Details section of this advisory. Note: The severity of these vulnerabilities is aggravated by the vulnerabilities described in the Cisco Data Center Network Manager Authentication Bypass Vulnerabilities advisory, published simultaneously with this one.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-sql-inject; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-sql-inject
CVE: CVE-2019-15999
Published: 2020-01-06
Description: A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerability is due to an incorrect configuration of the authentication settings on the JBoss EAP. An attacker could exploit this vulnerability by authenticating with a specific low-privilege account. A successful exploit could allow the attacker to gain unauthorized access to the JBoss EAP, which should be limited to internal system accounts.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: http://packetstormsecurity.com/files/155870/Cisco-DCNM-JBoss-10.4-Credential-Leakage.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-unauth-access; http://packetstormsecurity.com/files/155870/Cisco-DCNM-JBoss-10.4-Credential-Leakage.html
CVE: CVE-2020-5519
Published: 2020-01-06
Description: The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://drive.google.com/open?id=1pSciFEfjHp3kN8y5shy_zosJo7dje_fX; https://forum.openlitespeed.org/threads/openlitespeed-v1-6-5-now-available.4047/; https://drive.google.com/open?id=1pSciFEfjHp3kN8y5shy_zosJo7dje_fX
CVE: CVE-2019-20343
Published: 2020-01-06
Description: The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element (within a plugin element) can specify an arbitrary program in an executable element (and can also specify arbitrary command-line arguments in an arguments element).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://drive.google.com/open?id=0B5UvrSwn4wuwTnNqSzZESjIwZHo5ZXhWdHh2T2Z0eWRCT1hF; https://drive.google.com/open?id=1GLs0d9IGArMVrlbEGbxgCjA1MuzIJk-3; https://www.mojohaus.org/exec-maven-plugin/
CVE: CVE-2018-1300
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
CVE: CVE-2018-1326
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none
CVE: CVE-2016-11017
Published: 2020-01-06
Description: The application login page in AKIPS Network Monitor 15.37 through 16.5 allows a remote unauthenticated attacker to execute arbitrary OS commands via shell metacharacters in the username parameter (a failed login attempt returns the command-injection output to a limited login failure field). This is fixed in 16.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://ctrlu.net/vuln/0002.html; https://www.exploit-db.com/exploits/39564; https://ctrlu.net/vuln/0002.html
CVE: CVE-2019-15601
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-15602
Published: 2020-01-06
Description: The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in files it serves.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/507159; https://hackerone.com/reports/507159
CVE: CVE-2019-15603
Published: 2020-01-06
Description: The seefl package v0.1.1 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability via a malicious filename rendered in a directory listing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/665302; https://hackerone.com/reports/665302
CVE: CVE-2019-17568
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-18792
Published: 2020-01-06
Description: An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injected just before the PUSH ACK packet we want to bypass. The PUSH ACK packet (containing the data) will be ignored by Suricata because it overlaps the FIN packet (the sequence and ack number are identical in the two packets). The client will ignore the fake FIN packet because the ACK flag is not set. Both linux and windows clients are ignoring the injected packet.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-436
References: https://github.com/OISF/suricata/commit/1c63d3905852f746ccde7e2585600b2199cefb4b; https://github.com/OISF/suricata/commit/fa692df37a796c3330c81988d15ef1a219afc006; https://lists.debian.org/debian-lts-announce/2020/01/msg00032.html
CVE: CVE-2019-19861
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-19862
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-19863
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-19864
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-3468
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-3469
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-3470
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-3471
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-3472
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-3473
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-9468
Published: 2020-01-06
Description: In export_key_der of export_key.cpp, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-139683471
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2019-9469
Published: 2020-01-06
Description: In km_compute_shared_hmac of km4.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2019-9470
Published: 2020-01-06
Description: In dma_sblk_start of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144167528
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2019-9471
Published: 2020-01-06
Description: In set_outbound_iatu of abc-pcie.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144168326
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2019-9472
Published: 2020-01-06
Description: In DCRYPTO_equals of compare.c, there is a possible timing attack due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130237611
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2020-5840
Published: 2020-01-06
Description: An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/HashBrownCMS/hashbrown-cms/compare/v1.3.1...v1.3.2; https://github.com/HashBrownCMS/hashbrown-cms/releases/tag/v1.3.2; https://github.com/HashBrownCMS/hashbrown-cms/compare/v1.3.1...v1.3.2
CVE: CVE-2015-4039
Published: 2020-01-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified (1) profile fields or (2) new post content. NOTE: CVE-2015-4038 can be used to bypass the administrator confirmation step for vector 2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132011/WordPress-WP-Membership-1.2.3-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/archive/1/535586/100/0/threaded; http://www.securityfocus.com/bid/74766
CVE: CVE-2020-5514
Published: 2020-01-06
Description: Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-remote-code-execution/; https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-remote-code-execution/
CVE: CVE-2020-5515
Published: 2020-01-06
Description: Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/158114/Gila-CMS-1.11.8-SQL-Injection.html; http://packetstormsecurity.com/files/158140/Gila-CMS-1.1.18.1-SQL-Injection-Shell-Upload.html; https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-sqlquery-sql-injection/
CVE: CVE-2014-1850
Published: 2020-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3743. Reason: This candidate is a duplicate of CVE-2014-3743. Notes: All CVE users should reference CVE-2014-3743 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag
CVE: CVE-2014-3743
Published: 2020-01-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Marked module before 0.3.1 for Node.js allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) gfm codeblocks (language) or (2) javascript url's.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2014/05/13/1; http://www.openwall.com/lists/oss-security/2014/05/15/2; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3743
CVE: CVE-2019-16272
Published: 2020-01-06
Description: On DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android Debug Bridge (adb) enablement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://www.forescout.com/company/blog/dten-vulnerability/; https://www.forescout.com/company/blog/dten-vulnerability/
CVE: CVE-2019-16273
Published: 2020-01-06
Description: DTEN D5 and D7 before 1.3.4 devices allow unauthenticated root shell access through Android Debug Bridge (adb), leading to arbitrary code execution and system administration. Also, this provides a covert ability to capture screen data from the Zoom Client on Windows by executing commands on the Android OS.
CVSS Score: 9.8 (CRITICAL)
References: https://www.forescout.com/company/blog/dten-vulnerability/; https://www.forescout.com/company/blog/dten-vulnerability/
CVE: CVE-2019-16274
Published: 2020-01-06
Description: DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.forescout.com/company/blog/dten-vulnerability/; https://www.forescout.com/company/blog/dten-vulnerability/
CVE: CVE-2019-16716
Published: 2020-01-06
Description: OX App Suite through 7.10.2 has Incorrect Access Control.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-276
References: http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.html; http://seclists.org/fulldisclosure/2020/Jan/7; http://seclists.org/fulldisclosure/2020/Jan/7
CVE: CVE-2019-16717
Published: 2020-01-06
Description: OX App Suite through 7.10.2 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155813/OX-App-Suite-7.10.2-Cross-Site-Scripting-Improper-Access-Control.html; http://seclists.org/fulldisclosure/2020/Jan/7; http://seclists.org/fulldisclosure/2020/Jan/7
CVE: CVE-2019-18179
Published: 2020-01-06
Description: An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn't have permissions.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE: CVE-2019-19509
Published: 2020-01-06
Description: An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/156146/rConfig-3.9.3-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
CVE: CVE-2019-19585
Published: 2020-01-06
Description: An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html; https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.sh; https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh?token=
CVE: CVE-2020-5204
Published: 2020-01-06
Description: In uftpd before 2.11, there is a buffer overflow vulnerability in handle_PORT in ftpcmd.c that is caused by a buffer that is 16 bytes large being filled via sprintf() with user input based on the format specifier string %d.%d.%d.%d. The 16 byte size is correct for valid IPv4 addresses (len(&#39;255.255.255.255&#39;) == 16), but the format specifier %d allows more than 3 digits. This has been fixed in version 2.11
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00034.html; https://github.com/troglobit/uftpd/commit/0fb2c031ce0ace07cc19cd2cb2143c4b5a63c9dd; https://github.com/troglobit/uftpd/security/advisories/GHSA-wrpr-xw7q-9wvq
CVE: CVE-2020-5512
Published: 2020-01-06
Description: Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-mediapath-directory-traversal/; https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-admin-mediapath-directory-traversal/
CVE: CVE-2020-5513
Published: 2020-01-06
Description: Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://gilacms.com/blog; https://infosecdb.wordpress.com/2020/01/05/gilacms-1-11-8-cm-deletet-lfi-local-file-inclusion-and-rce/; https://gilacms.com/blog
CVE: CVE-2015-4553
Published: 2020-01-06
Description: A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2015/Jun/47; http://www.securityfocus.com/bid/75285; https://www.exploit-db.com/exploits/37423/
CVE: CVE-2015-5951
Published: 2020-01-06
Description: A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/133003/Thomson-Reuters-FATCA-Arbitrary-File-Upload.html; http://seclists.org/fulldisclosure/2015/Aug/25; http://www.securityfocus.com/archive/1/536163/100/0/threaded
CVE: CVE-2019-16271
Published: 2020-01-06
Description: DTEN D5 and D7 before 1.3.2 devices allows remote attackers to read saved whiteboard image PDF documents via storage/emulated/0/Notes/PDF on TCP port 8080 without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.forescout.com/company/blog/dten-vulnerability/; https://www.forescout.com/company/blog/dten-vulnerability/
CVE: CVE-2019-18625
Published: 2020-01-06
Description: An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After the TCP SYN packet, it is possible to inject a RST ACK and a FIN ACK packet with a bad TCP Timestamp option. The client will ignore the RST ACK and the FIN ACK packets because of the bad TCP Timestamp option. Both linux and windows client are ignoring the injected packets.
CVSS Score: 7.5 (HIGH)
References: https://github.com/OISF/suricata/commit/9f0294fadca3dcc18c919424242a41e01f3e8318; https://github.com/OISF/suricata/commit/ea0659de7640cf6a51de5bbd1dbbb0414e4623a0; https://lists.debian.org/debian-lts-announce/2020/01/msg00032.html