deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-0242
Published: 2020-01-27
Description: Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a floating point number with a large precision, as demonstrated by using the to_char function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2015/dsa-3155; http://www.postgresql.org/about/news/1569/; http://www.postgresql.org/docs/9.4/static/release-9-4-1.html
CVE: CVE-2015-0243
Published: 2020-01-27
Description: Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://www.debian.org/security/2015/dsa-3155; http://www.postgresql.org/about/news/1569/; http://www.postgresql.org/docs/9.4/static/release-9-4-1.html
CVE: CVE-2015-0244
Published: 2020-01-27
Description: PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote attackers to conduct SQL injection attacks via crafted binary data in a parameter and causing an error, which triggers the loss of synchronization and part of the protocol message to be treated as a new message, as demonstrated by causing a timeout or query cancellation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.debian.org/security/2015/dsa-3155; http://www.postgresql.org/about/news/1569/; http://www.postgresql.org/docs/9.4/static/release-9-4-1.html
CVE: CVE-2015-0294
Published: 2020-01-27
Description: GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.debian.org/security/2015/dsa-3191; https://bugzilla.redhat.com/show_bug.cgi?id=1196323; https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff
CVE: CVE-2015-3154
Published: 2020-01-27
Description: CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: http://framework.zend.com/security/advisory/ZF2015-04; http://framework.zend.com/security/advisory/ZF2015-04
CVE: CVE-2019-17190
Published: 2020-01-27
Description: A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORITY\SYSTEM) when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, the elevated process cleans the ACL of the Update.ini file in %PROGRAMDATA%\Avast Software\Browser\Update\ and sets all privileges to group Everyone. Because any low-privileged user can create, delete, or modify the Update.ini file stored in this location, an attacker with low privileges can create a hard link named Update.ini in this folder, and make it point to a file writable by NT AUTHORITY\SYSTEM. Once AvastBrowserUpdate.exe is triggered by the update check functionality, the DACL is set to a misconfigured value on the crafted Update.ini and, consequently, to the target file that was previously not writable by the low-privileged attacker.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/156844/Avast-Secure-Browser-76.0.1659.101-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2020/Mar/25; https://www.avast.com/bug-bounty-credits/en/a-tribute-to-our-security-research-community
CVE: CVE-2013-4441
Published: 2020-01-27
Description: The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: http://www.openwall.com/lists/oss-security/2013/06/06/1; http://www.openwall.com/lists/oss-security/2013/10/16/15; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726578
CVE: CVE-2019-17096
Published: 2020-01-27
Description: A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.bitdefender.com/support/security-advisories/bitdefender-box-2-bootstrap-get_image_size-command-injection-vulnerability/; https://www.bitdefender.com/support/security-advisories/bitdefender-box-2-bootstrap-get_image_size-command-injection-vulnerability/
CVE: CVE-2019-19825
Published: 2020-01-27
Description: On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform router actions via HTTP requests with Basic Authentication.) This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Jan/36; http://seclists.org/fulldisclosure/2020/Jan/38
CVE: CVE-2020-7238
Published: 2020-01-27
Description: Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2020:0497; https://access.redhat.com/errata/RHSA-2020:0567; https://access.redhat.com/errata/RHSA-2020:0601
CVE: CVE-2020-7949
Published: 2020-01-27
Description: schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue call.
CVSS Score: 7.8 (HIGH)
References: https://github.com/bi7s/CVE/tree/master/CVE-2020-7949; https://github.com/bi7s/CVE/tree/master/CVE-2020-7949
CVE: CVE-2020-7950
Published: 2020-01-27
Description: meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a vulnerable function call.
CVSS Score: 7.8 (HIGH)
References: https://github.com/bi7s/CVE/tree/master/CVE-2020-7950; https://github.com/bi7s/CVE/tree/master/CVE-2020-7950
CVE: CVE-2020-7951
Published: 2020-01-27
Description: meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is affected by memory corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/bi7s/CVE/tree/master/CVE-2020-7951; https://github.com/bi7s/CVE/tree/master/CVE-2020-7951
CVE: CVE-2020-7952
Published: 2020-01-27
Description: rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is affected by memory corruption.
CVSS Score: 7.8 (HIGH)
References: https://github.com/bi7s/CVE/tree/master/CVE-2020-7952; https://github.com/bi7s/CVE/tree/master/CVE-2020-7952
CVE: CVE-2013-4770
Published: 2020-01-27
Description: Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://groups.google.com/a/eucalyptus.com/d/msg/security-announce/tFcxwess0TE/Br0sQW1mJBMJ; https://groups.google.com/a/eucalyptus.com/d/msg/security-announce/tFcxwess0TE/Br0sQW1mJBMJ
CVE: CVE-2013-7390
Published: 2020-01-27
Description: Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the webroot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2013/Nov/130; https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/desktopcentral_file_upload.rb; http://seclists.org/fulldisclosure/2013/Nov/130
CVE: CVE-2014-3979
Published: 2020-01-27
Description: Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firewall to blacklist the IP.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2014/06/06/10; http://www.openwall.com/lists/oss-security/2014/06/11/2; http://www.securityfocus.com/bid/67948
CVE: CVE-2014-7301
Published: 2020-01-27
Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading /etc/odapw.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-276
References: https://labs.f-secure.com/advisories/sgi-tempo-system-database-password-exposure/; https://packetstormsecurity.com/files/129466/SGI-Tempo-Database-Password-Disclosure.html; https://labs.f-secure.com/advisories/sgi-tempo-system-database-password-exposure/
CVE: CVE-2014-7302
Published: 2020-01-27
Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to change the permissions of arbitrary files by executing /opt/sgi/sgimc/bin/vx.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: http://packetstormsecurity.com/files/129465/SGI-Tempo-vx-Setuid-Privilege-Escalation.html; https://labs.mwrinfosecurity.com/advisories/2014/12/02/sgi-suid-root-privilege-escalation/; http://packetstormsecurity.com/files/129465/SGI-Tempo-vx-Setuid-Privilege-Escalation.html
CVE: CVE-2014-7303
Published: 2020-01-27
Description: SGI Tempo, as used on SGI ICE-X systems, uses weak permissions for certain files, which allows local users to obtain password hashes and possibly other unspecified sensitive information by reading etc/dbdump.db.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://labs.f-secure.com/advisories/sgi-tempo-system-database-exposure/; https://packetstormsecurity.com/files/129467/SGI-Tempo-Database-Exposure.html; https://labs.f-secure.com/advisories/sgi-tempo-system-database-exposure/
CVE: CVE-2014-8741
Published: 2020-01-27
Description: Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://support.lexmark.com/index?page=content&id=TE666; http://www.zerodayinitiative.com/advisories/ZDI-14-410/; http://support.lexmark.com/index?page=content&id=TE666
CVE: CVE-2014-8742
Published: 2020-01-27
Description: Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://support.lexmark.com/index?page=content&id=TE666; http://www.zerodayinitiative.com/advisories/ZDI-14-411/; http://support.lexmark.com/index?page=content&id=TE666
CVE: CVE-2019-17094
Published: 2020-01-27
Description: A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions.
CVSS Score: 8.3 (HIGH)
CWE: CWE-121, CWE-787
References: https://labs.bitdefender.com/2019/12/multiple-vulnerabilities-in-belkin-wemo-insight-switch/; https://labs.bitdefender.com/2019/12/multiple-vulnerabilities-in-belkin-wemo-insight-switch/
CVE: CVE-2019-17095
Published: 2020-01-27
Description: A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the production firmware URL supplied by remote servers, leading to arbitrary execution of system commands. In order to exploit the condition, an unauthenticated attacker should impersonate a infrastructure server to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.bitdefender.com/support/security-advisories/command-injection-vulnerability-in-bitdefender-box-v2-va-5706; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0919; https://www.cybersecurity-help.cz/vdb/SB[PII_REDACTED]?affChecked=1
CVE: CVE-2019-17099
Published: 2020-01-27
Description: An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-426, CWE-426
References: https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-epsecurityservice-exe-va-3500/; https://www.bitdefender.com/support/security-advisories/untrusted-search-path-vulnerability-epsecurityservice-exe-va-3500/
CVE: CVE-2019-19822
Published: 2020-01-27
Description: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz; http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Jan/36
CVE: CVE-2019-19823
Published: 2020-01-27
Description: A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, and N100RE through 3.4.0; Rutek RTK 11N AP through 2019-12-12; Sapido GR297n through 2019-12-12; CIK TELECOM MESH ROUTER through 2019-12-12; KCTVJEJU Wireless AP through 2019-12-12; Fibergate FGN-R2 through 2019-12-12; Hi-Wifi MAX-C300N through 2019-12-12; HCN MAX-C300N through 2019-12-12; T-broad GN-866ac through 2019-12-12; Coship EMTA AP through 2019-12-12; and IO-Data WN-AC1167R through 2019-12-12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://opensource.actiontec.com/sourcecode/wcb3000x/wecb3000n_gpl_0.16.8.4.tgz; http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Jan/36
CVE: CVE-2019-19824
Published: 2020-01-27
Description: On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control over the device's internals. This affects A3002RU through 2.0.0, A702R through 2.1.3, N301RT through 2.1.6, N302R through 3.4.0, N300RT through 3.4.0, N200RE through 4.0.0, N150RT through 3.4.0, N100RE through 3.4.0, and N302RE 2.0.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/156083/Realtek-SDK-Information-Disclosure-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Jan/36; http://seclists.org/fulldisclosure/2020/Jan/38
CVE: CVE-2014-5500
Published: 2020-01-27
Description: Synacor Zimbra Collaboration before 8.0.8 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2014-8563
Published: 2020-01-27
Description: Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://bugzilla.zimbra.com/show_bug.cgi?id=96105; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=96105
CVE: CVE-2015-2249
Published: 2020-01-27
Description: Zimbra Collaboration before 8.6.0 patch5 has XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2018-19441
Published: 2020-01-27
Description: An issue was discovered in Neato Botvac Connected 2.2.0. The GenerateRobotPassword function of the NeatoCrypto library generates insufficiently random numbers for robot secret_key values used for local and cloud authentication/authorization. If an attacker knows the serial number and is able to estimate the time of first provisioning of a robot, he is able to brute force the generated secret_key of the robot. This is because the entropy of the secret_key exclusively relies on these two values, due to not seeding the random generator and using several constant inputs for secret_key computation. Serial numbers are printed on the packaging and equal the MAC address of the robot.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-330
References: https://www.usenix.org/system/files/woot19-paper_ullrich.pdf; https://www.youtube.com/watch?v=k5nj7Jhwn9c; https://www.usenix.org/system/files/woot19-paper_ullrich.pdf
CVE: CVE-2019-11288
Published: 2020-01-27
Description: In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versions prior to 7.0.99.B, 8.x versions prior to 8.5.47.A, and 9.x versions prior to 9.0.27.A, when a tc Runtime instance is configured with the JMX Socket Listener, a local attacker without access to the tc Runtime process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the tc Runtime instance.
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://pivotal.io/security/cve-2019-11288; https://pivotal.io/security/cve-2019-11288
CVE: CVE-2019-11318
Published: 2020-01-27
Description: Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109117; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.12/P1
CVE: CVE-2019-12427
Published: 2020-01-27
Description: Zimbra Collaboration before 8.8.15 Patch 1 is vulnerable to a non-persistent XSS via the Admin Console.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109174; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2019-15313
Published: 2020-01-27
Description: In Zimbra Collaboration before 8.8.15 Patch 1, there is a non-persistent XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109141; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=109141
CVE: CVE-2019-19143
Published: 2020-01-27
Description: TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306
References: http://packetstormsecurity.com/files/156586/TP-Link-TL-WR849N-0.9.1-4.16-Authentication-Bypass.html; https://fireshellsecurity.team/hack-n-routers/; http://packetstormsecurity.com/files/156586/TP-Link-TL-WR849N-0.9.1-4.16-Authentication-Bypass.html
CVE: CVE-2019-19539
Published: 2020-01-27
Description: An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint Plus H01AAG-H01AAQ and L01AAH-L01AAR, and Web ViewPoint Enterprise H01-H01AAE and L01-L01AAF. By reading ADB or AADB file content within the Installation subvolume, a Guardian user can discover the password of the group.user or alias who acknowledges events from the WVP Events screen.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03981en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03981en_us
CVE: CVE-2019-8945
Published: 2020-01-27
Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109122; https://bugzilla.zimbra.com/show_bug.cgi?id=109123; https://bugzilla.zimbra.com/show_bug.cgi?id=109124
CVE: CVE-2019-8946
Published: 2020-01-27
Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109122; https://bugzilla.zimbra.com/show_bug.cgi?id=109123; https://bugzilla.zimbra.com/show_bug.cgi?id=109124
CVE: CVE-2019-8947
Published: 2020-01-27
Description: Zimbra Collaboration 8.7.x - 8.8.11P2 contains non-persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109122; https://bugzilla.zimbra.com/show_bug.cgi?id=109123; https://bugzilla.zimbra.com/show_bug.cgi?id=109124
CVE: CVE-2020-5207
Published: 2020-01-27
Description: In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://github.com/ktorio/ktor/pull/1547; https://github.com/ktorio/ktor/security/advisories/GHSA-xrr9-rh8p-433v; https://github.com/ktorio/ktor/pull/1547
CVE: CVE-2020-8087
Published: 2020-01-27
Description: SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the vlu_diagnostic_tools__ping_address parameter twice: once with a shell metacharacter and a command name, and once with a command argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://sku11army.blogspot.com/2020/01/smc-networks-remote-code-execution.html; https://sku11army.blogspot.com/2020/01/smc-networks-remote-code-execution.html