deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1130
Published: 2019-07-15
Description: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1130
CVE: CVE-2019-1132
Published: 2019-07-15
Description: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1132
CVE: CVE-2019-1134
Published: 2019-07-15
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1134; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1134
CVE: CVE-2019-1136
Published: 2019-07-15
Description: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1136; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1136
CVE: CVE-2019-1137
Published: 2019-07-15
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1137; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1137
CVE: CVE-2018-7838
Published: 2019-07-15
Description: A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03
CVE: CVE-2019-6822
Published: 2019-07-15
Description: A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/109100; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-01; https://www.us-cert.gov/ics/advisories/icsa-19-190-03
CVE: CVE-2019-6823
Published: 2019-07-15
Description: A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/; https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE: CVE-2019-6824
Published: 2019-07-15
Description: A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/; https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE: CVE-2019-6825
Published: 2019-07-15
Description: A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/; https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/
CVE: CVE-2019-6827
Published: 2019-07-15
Description: A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02; https://www.zerodayinitiative.com/advisories/ZDI-19-671/; https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02
CVE: CVE-2019-0234
Published: 2019-07-15
Description: A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller, which is now Roller 5.2.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.apache.org/thread.html/26cdef3fa8a8fa7fcbb99320aa860836ead124b414c654a4d12674cf%40%3Cdev.roller.apache.org%3E; https://lists.apache.org/thread.html/r81a61626d03a11e610c4fbf641f19a6075a0d[PII_REDACTED]26829663d%40%3Cuser.roller.apache.org%3E; https://lists.apache.org/thread.html/26cdef3fa8a8fa7fcbb99320aa860836ead124b414c654a4d12674cf%40%3Cdev.roller.apache.org%3E
CVE: CVE-2019-13611
Published: 2019-07-16
Description: An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/miguelgrinberg/python-engineio/issues/128; https://github.com/miguelgrinberg/python-engineio/issues/128
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/zammad/zammad/compare/5c983f6...1a9af7d; https://github.com/zammad/zammad/compare/ea50d0c...238784d; https://github.com/zammad/zammad/issues/1869
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/phaag/nfdump/issues/104; https://lists.debian.org/debian-lts-announce/2020/09/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET/
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458; https://github.com/astropy/astropy/pull/7274; https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gz
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10364. Reason: This candidate is a reservation duplicate of CVE-2018-10364. Notes: All CVE users should reference CVE-2018-10364 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/pluck-cms/pluck/commit/09f0ab871bf633973cfd9fc4fe59d4a912397cf8; https://github.com/pluck-cms/pluck/issues/44; https://github.com/pluck-cms/pluck/commit/09f0ab871bf633973cfd9fc4fe59d4a912397cf8
CVE: CVE-2019-13612
Published: 2019-07-16
Description: MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious e-mail, if a customer deploys a server with sufficient resources to scan large messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.altn.com/WebX/.59862f3c; http://lists.altn.com/WebX/.59862f3c
CVE: CVE-2018-19629
Published: 2019-07-16
Description: A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.oppositionsecurity.com/imagenow-7-1-4-dos/; https://www.oppositionsecurity.com/imagenow-7-1-4-dos/
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Quake3e < 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/ec-/Quake3e/issues/9; https://github.com/ec-/Quake3e/issues/9
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Babel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to redirect.php in a "newurl" parameter. The component is: redirect.php. The attack vector is: The victim must open a link created by an attacker. Attacker may use any legitimate site using Babel to redirect user to a URL of his/her choosing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://dev.cmsmadesimple.org/project/files/729; https://untrustednetwork.net/en/2019/02/20/open-redirection-vulnerability-in-babel/; http://dev.cmsmadesimple.org/project/files/729
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-16
Description: Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: optee_os. The fixed version is: v3.4.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/OP-TEE/optee_os/commit/e3adcf566cb278444830e7badfdcc3983e334fd1; https://github.com/OP-TEE/optee_os/commit/e3adcf566cb278444830e7badfdcc3983e334fd1
CVE: CVE-2019-1575
Published: 2019-07-16
Description: Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API key of the device and/or the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/109176; https://security.paloaltonetworks.com/CVE-2019-1575; http://www.securityfocus.com/bid/109176
CVE: CVE-2019-1576
Published: 2019-07-16
Description: Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://security.paloaltonetworks.com/CVE-2019-1576; https://security.paloaltonetworks.com/CVE-2019-1576
CVE: CVE-2019-13360
Published: 2019-07-16
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13360.md; http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html
CVE: CVE-2019-13383
Published: 2019-07-16
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13383.md; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
CVE: CVE-2019-13603
Published: 2019-07-16
Description: An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows an attacker to obtain a user's fingerprint image.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://github.com/sungjungk/fp-scanner-hacking; https://www.youtube.com/watch?v=Grirez2xeas; https://www.youtube.com/watch?v=wEXJDyEOatM
CVE: CVE-2019-13605
Published: 2019-07-16
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from CVE-2019-13360.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13605.md; https://www.exploit-db.com/exploits/47123
CVE: CVE-2019-13615
Published: 2019-07-16
Description: libebml before 1.3.6, as used in the MKV module in VideoLAN VLC Media Player binaries before 3.0.3, has a heap-based buffer over-read in EbmlElement::FindNextElement.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/109304; https://github.com/Matroska-Org/libebml/commit/05beb69ba60acce09f73ed491bb76f332849c3a0; https://github.com/Matroska-Org/libebml/commit/b66ca475be967547af9a3784e720fbbacd381be6
CVE: CVE-2019-13616
Published: 2019-07-16
Description: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
CVE: CVE-2019-13617
Published: 2019-07-16
Description: njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15093; https://github.com/nginx/njs/issues/174; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15093
CVE: CVE-2019-13618
Published: 2019-07-16
Description: In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/gpac/gpac/compare/440d475...6b4ab40; https://github.com/gpac/gpac/issues/1250; https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
CVE: CVE-2018-13442
Published: 2019-07-16
Description: SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/; https://labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/
CVE: CVE-2019-10190
Published: 2019-07-16
Description: A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190; https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/
CVE: CVE-2019-10191
Published: 2019-07-16
Description: A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191; https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/
CVE: CVE-2019-12834
Published: 2019-07-16
Description: In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md; https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md
CVE: CVE-2019-12985
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-12986
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-12987
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-12988
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-12989
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html; http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987
CVE: CVE-2019-12990
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/search?searchQuery=%2A&lang=en&sort=relevance&prod=&pver=&ct=Security+Bulletin; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-12991
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html; http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987
CVE: CVE-2019-12992
Published: 2019-07-16
Description: Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/109133; https://support.citrix.com/article/CTX251987; https://www.tenable.com/security/research/tra-2019-31
CVE: CVE-2019-13115
Published: 2019-07-16
Description: In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-190
References: http://packetstormsecurity.com/files/172834/libssh2-1.8.2-Out-Of-Bounds-Read.html; https://blog.semmle.com/libssh2-integer-overflow/; https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa