deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9859
Published: 2020-03-10
Description: Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ssd-disclosure.com/?p=3926; https://ssd-disclosure.com/?p=3926
CVE: CVE-2019-11345
Published: 2020-03-10
Description: Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.citrix.com/article/CTX247737; https://support.citrix.com/article/CTX247737
CVE: CVE-2019-12428
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
CVSS Score: 9.8 (CRITICAL)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12429
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels, status and merge request counts of confidential issues via the milestone details page. It has Improper Access Control.
CVSS Score: 6.5 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12430
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to execute commands remotely through the repository download feature. It allows Command Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12431
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the metadata of private milestones through the Search API. It has Improper Access Control.
CVSS Score: 4.3 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12432
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Non-member users who subscribed to issue notifications could access the title of confidential issues through the unsubscription page. It allows Information Disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12433
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation. Restricted visibility settings allow creating internal projects in private groups, leading to multiple permission issues.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12434
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-330
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-20509
Published: 2020-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it only affected a development version. Notes: none
CVE: CVE-2019-10705
Published: 2020-03-10
Description: Western Digital SanDisk X600 devices in certain configurations, a vulnerability in the access control mechanism of the drive may allow data to be decrypted without knowledge of proper authentication credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://support.wdc.com/cat_products.aspx?ID=6&lang=en; https://www.westerndigital.com/support/productsecurity/wdc-19006-sandisk-x600-sata-ssd; https://www.westerndigital.com/support/productsecurity/wdc-19007-sandisk-x300-x400-sata-ssd
CVE: CVE-2019-12441
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature contained a access control issue which resulted in a bypass of the protected branches restriction rules. It has Incorrect Access Control.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12442
Published: 2020-03-10
Description: An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encoding issue which resulted in a persistent XSS vulnerability on child epics.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12443
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12444
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages contained a lack of input validation which resulted in a persistent XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12445
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by importing a specially crafted project file. It allows XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-12446
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13001
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13002
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to read pipeline information of the last merge request. It has Incorrect Access Control.
CVSS Score: 4.3 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13003
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource Consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13004
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It has Incorrect Access Control (issue 1 of 2).
CVSS Score: 5.3 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13005
Published: 2020-03-10
Description: An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control.
CVSS Score: 4.3 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-17636
Published: 2020-03-10
Description: In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of files on the host's filesystem, given their path, without restrictions on the requester's origin. This design is vulnerable to being exploited remotely through a DNS rebinding attack or a drive-by download of a carefully crafted exploit.
CVSS Score: 8.1 (HIGH)
CWE: CWE-345, CWE-345
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=551747; https://bugs.eclipse.org/bugs/show_bug.cgi?id=551747
CVE: CVE-2020-10255
Published: 2020-03-10
Description: Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh (TRR), aka the TRRespass issue. To exploit this vulnerability, the attacker needs to create certain access patterns to trigger bit flips on affected memory modules, aka a Many-sided RowHammer attack. This means that, even when chips advertised as RowHammer-free are used, attackers may still be able to conduct privilege-escalation attacks against the kernel, conduct privilege-escalation attacks against the Sudo binary, and achieve cross-tenant virtual-machine access by corrupting RSA keys. The issue affects chips produced by SK Hynix, Micron, and Samsung. NOTE: tracking DRAM supply-chain issues is not straightforward because a single product model from a single vendor may use DRAM chips from different manufacturers.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://download.vusec.net/papers/trrespass_sp20.pdf; https://github.com/vusec/trrespass; https://thehackernews.com/2020/03/rowhammer-vulnerability-ddr4-dram.html
CVE: CVE-2012-1094
Published: 2020-03-10
Description: JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/security/cve/cve-2012-1094; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1094; https://access.redhat.com/security/cve/cve-2012-1094
CVE: CVE-2012-1096
Published: 2020-03-10
Description: NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2012/03/02/3; https://access.redhat.com/security/cve/cve-2012-1096; https://bugzilla.gnome.org/show_bug.cgi?id=793329
CVE: CVE-2019-13006
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests on an issue. It has Incorrect Access Control.
CVSS Score: 4.3 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2020-5253
Published: 2020-03-10
Description: NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.
CVSS Score: 3.9 (LOW)
CWE: CWE-184, CWE-269
References: https://github.com/NetHack/NetHack/commits/612755bfb5c412079795c68ba392df5d93874ed8; https://github.com/NetHack/NetHack/security/advisories/GHSA-2c7p-3fj4-223m; https://github.com/NetHack/NetHack/commits/612755bfb5c412079795c68ba392df5d93874ed8
CVE: CVE-2020-5254
Published: 2020-03-10
Description: In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.
CVSS Score: 3.9 (LOW)
CWE: CWE-125, CWE-119
References: https://github.com/NetHack/NetHack/security/advisories/GHSA-2ch6-6r8h-m2p9; https://github.com/NetHack/NetHack/security/advisories/GHSA-2ch6-6r8h-m2p9
CVE: CVE-2020-9440
Published: 2020-03-10
Description: A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML element into the editor.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ckeditor.com/blog/CKEditor-4.14-with-Paste-from-LibreOffice-released/#security-issues-fixed; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OJ4BSS3VEAEXPNSOOUAXX6RDNECGZNO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L322YA73LCV3TO7ORY45WQDAFJVNKXBE/
CVE: CVE-2019-13007
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depletion. It allows Uncontrolled Resource Consumption.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13009
Published: 2020-03-10
Description: An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with unsaved personal snippets were accessible to unauthorized users due to improper permission settings. It has Incorrect Access Control.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-732
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13010
Published: 2020-03-10
Description: An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Resource Consumption.
CVSS Score: 5.9 (MEDIUM)
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13011
Published: 2020-03-10
Description: An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13121
Published: 2020-03-10
Description: An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2019-13457
Published: 2020-03-10
Description: An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user can use the search results to disclose information from their "company" tickets (with the same CustomerID), even when the CustomerDisableCompanyTicketAccess setting is turned on.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html
CVE: CVE-2019-15034
Published: 2020-03-10
Description: hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html; https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01959.html; https://usn.ubuntu.com/4372-1/
CVE: CVE-2020-5258
Published: 2020-03-10
Description: In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. This has been patched in versions 1.12.8, 1.13.7, 1.14.6, 1.15.3 and 1.16.2
CVSS Score: 7.7 (HIGH)
CWE: CWE-94, CWE-1321
References: https://github.com/dojo/dojo/commit/20a00afb68f5587946dc76fbeaa68c39bda2171d; https://github.com/dojo/dojo/security/advisories/GHSA-jxfh-8wgv-vfr2; https://lists.apache.org/thread.html/r[PII_REDACTED]d7ae95f874280518b8d987d799a76df7a9cd78eac33a1b%40%3Cusers.qpid.apache.org%3E
CVE: CVE-2020-5259
Published: 2020-03-10
Description: In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript application object prototype of the base object by injecting other values. This has been patched in versions 1.11.10, 1.12.8, 1.13.7, 1.14.6, 1.15.3 and 1.16.2
CVSS Score: 7.7 (HIGH)
CWE: CWE-94, CWE-74
References: https://github.com/dojo/dojox/commit/47d1b302b5b23d94e875b77b9b9a8c4f5622c9da; https://github.com/dojo/dojox/security/advisories/GHSA-3hw5-q855-g6cw; https://lists.debian.org/debian-lts-announce/2020/03/msg00012.html
CVE: CVE-2019-18336
Published: 2020-03-10
Description: A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94). Specially crafted packets sent to port 102/tcp (Profinet) could cause the affected device to go into defect mode. A restart is required in order to recover the system. Successful exploitation requires an attacker to have network access to port 102/tcp, with no authentication. No user interation is required. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-508982.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-508982.pdf
CVE: CVE-2019-19277
Published: 2020-03-10
Description: A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-778
References: https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-08; https://cert-portal.siemens.com/productcert/pdf/ssa-978558.pdf