deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-14094
Published: 2020-06-22
Description: Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, APQ8098, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3613
Published: 2020-06-22
Description: Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3614
Published: 2020-06-22
Description: Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574AU, QCA6584AU, QCA9377, QCA9379, QCA9886, QCM2150, QCS405, QCS605, QM215, Rennell, SC7180, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3626
Published: 2020-06-22
Description: Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3628
Published: 2020-06-22
Description: Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20
CVSS Score: 9.8 (CRITICAL)
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3635
Published: 2020-06-22
Description: Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3642
Published: 2020-06-22
Description: Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of the object in Snapdragon Consumer IOT, Snapdragon Mobile in Kamorta, QCS605, Rennell, Saipan, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3658
Published: 2020-06-22
Description: Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3660
Published: 2020-06-22
Description: Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3661
Published: 2020-06-22
Description: Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3662
Published: 2020-06-22
Description: Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3663
Published: 2020-06-22
Description: Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3665
Published: 2020-06-22
Description: A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-3676
Published: 2020-06-22
Description: Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-security-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2020-bulletin
CVE: CVE-2020-7262
Published: 2020-06-22
Description: Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10319; https://kc.mcafee.com/corporate/index?page=content&id=SB10319
CVE: CVE-2020-8102
Published: 2020-06-22
Description: Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security 2020 versions prior to 24.0.20.116.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.bitdefender.com/support/security-advisories/insufficient-url-sanitization-validation-safepay-browser-va-8631/; https://www.bitdefender.com/support/security-advisories/insufficient-url-sanitization-validation-safepay-browser-va-8631/
CVE: CVE-2020-14966
Published: 2020-06-22
Description: An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows in the length of a sequence and '0' characters appended or prepended to an integer. The modified signatures are verified as valid. This could have a security-relevant impact if an application relied on a single canonical signature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/kjur/jsrsasign/issues/437; https://github.com/kjur/jsrsasign/releases/tag/8.0.17; https://github.com/kjur/jsrsasign/releases/tag/8.0.18
CVE: CVE-2020-14967
Published: 2020-06-22
Description: An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending '\0' bytes to ciphertexts (it decrypts modified ciphertexts without error). An attacker might prepend these bytes with the goal of triggering memory corruption issues.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/kjur/jsrsasign/issues/439; https://github.com/kjur/jsrsasign/releases/tag/8.0.17; https://github.com/kjur/jsrsasign/releases/tag/8.0.18
CVE: CVE-2020-14968
Published: 2020-06-22
Description: An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipulation/modification by prepending '\0' bytes to a signature (it accepts these modified signatures as valid). An attacker can abuse this behavior in an application by creating multiple valid signatures where only one signature should exist. Also, an attacker might prepend these bytes with the goal of triggering memory corruption issues.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/kjur/jsrsasign/issues/438; https://github.com/kjur/jsrsasign/releases/tag/8.0.17; https://github.com/kjur/jsrsasign/releases/tag/8.0.18
CVE: CVE-2020-14969
Published: 2020-06-22
Description: app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the attribute restsearch API, revealing metadata about a correlating but unreachable attribute.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/MISP/MISP/commit/609bfbd450c933d21c50c9f0161d633c43413eb6; https://github.com/MISP/MISP/commit/609bfbd450c933d21c50c9f0161d633c43413eb6
CVE: CVE-2020-14202
Published: 2020-06-22
Description: WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.hooperlabs.xyz/disclosures/webfocus.php; https://www.hooperlabs.xyz/disclosures/webfocus.php
CVE: CVE-2020-14203
Published: 2020-06-22
Description: WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.hooperlabs.xyz/disclosures/webfocus.php; https://www.hooperlabs.xyz/disclosures/webfocus.php
CVE: CVE-2020-14204
Published: 2020-06-22
Description: In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes to the application repository configuration.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://www.hooperlabs.xyz/disclosures/webfocus.php; https://www.hooperlabs.xyz/disclosures/webfocus.php
CVE: CVE-2020-14461
Published: 2020-06-22
Description: Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/158428/Zyxel-Armor-X1-WAP6806-Directory-Traversal.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; http://packetstormsecurity.com/files/158428/Zyxel-Armor-X1-WAP6806-Directory-Traversal.html
CVE: CVE-2020-8903
Published: 2020-06-22
Description: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from the systemd journal. Using the DHCP XID, it is then possible to set the IP address and hostname of the instance to any value, which is then stored in /etc/hosts. An attacker can then point metadata.google.internal to an arbitrary IP address and impersonate the GCE metadata server which make it is possible to instruct the OS Login PAM module to grant administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the "adm" user from the OS Login entry.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00047.html; https://cloud.google.com/support/bulletins/#gcp-2020-008
CVE: CVE-2020-8907
Published: 2020-06-22
Description: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "docker" group, an attacker with this role is able to run docker and mount the host OS. Within docker, it is possible to modify the host OS filesystem and modify /etc/groups to gain administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the "docker" user from the OS Login entry.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00047.html; https://cloud.google.com/support/bulletins/#gcp-2020-008
CVE: CVE-2020-8933
Published: 2020-06-22
Description: A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems. Within an lxc container, it is possible to attach the host OS filesystem and modify /etc/sudoers to then gain administrative privileges. All images created after 2020-May-07 (20200507) are fixed, and if you cannot update, we recommend you edit /etc/group/security.conf and remove the "lxd" user from the OS Login entry.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00047.html; https://cloud.google.com/support/bulletins/#gcp-2020-008
CVE: CVE-2020-13888
Published: 2020-06-22
Description: Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://hidden-one.co.in/2020/06/17/cve-2020-13888-kordil-edms-through-2-2-60rc3-allows-stored-xss/; https://sourceforge.net/projects/kordiledms/files/; http://hidden-one.co.in/2020/06/17/cve-2020-13888-kordil-edms-through-2-2-60rc3-allows-stored-xss/
CVE: CVE-2020-13279
Published: 2020-06-22
Description: Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
CVSS Score: 8.6 (HIGH)
CWE: CWE-427
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json; https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/170; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13279.json
CVE: CVE-2020-13887
Published: 2020-06-22
Description: documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://hidden-one.co.in/2020/06/17/cve-2020-13887-kordil-edms-through-2-2-60rc3-allows-remote-command-execution/; https://sourceforge.net/projects/kordiledms/files/; http://hidden-one.co.in/2020/06/17/cve-2020-13887-kordil-edms-through-2-2-60rc3-allows-remote-command-execution/
CVE: CVE-2020-4060
Published: 2020-06-22
Description: In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message (https://doc.sm.tc/station/cupsproto.html#http-post-response) where the signature length is larger than 2 GByte (never happens in practice), or the response is crafted specifically to trigger this issue (i.e. the length signature field indicates a value larger than (2**31)-1 although the signature actually does not contain that much data). In such a scenario, on 32 bit machines, Basic Station would execute a code path, where a piece of memory is accessed after it has been freed, causing the process to crash and restarted again. The CUPS transaction is typically mutually authenticated over TLS. Therefore, in order to trigger this vulnerability, the attacker would have to gain access to the CUPS server first. If the user chose to operate without authentication over TLS but yet is concerned about this vulnerability, one possible workaround is to enable TLS authentication. This has been fixed in 2.0.4.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-416
References: https://github.com/lorabasics/basicstation/security/advisories/GHSA-v9ph-r496-4m2j; https://github.com/lorabasics/basicstation/security/advisories/GHSA-v9ph-r496-4m2j