deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9424
Published: 2019-09-27
Description: In the Screen Lock, there is a possible information disclosure due to an unusual root cause. In certain circumstances, the setting to hide the unlock pattern can be ignored. Product: AndroidVersions: Android-10Android ID: A-110941092
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9425
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110846194
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9427
Published: 2019-09-27
Description: In Bluetooth, there is a possible information disclosure due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110166350
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9428
Published: 2019-09-27
Description: In the Framework, it is possible to set up BROWSEABLE intents to take over certain URLs. This could lead to remote information disclosure of sensitive URLs with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110150807
CVSS Score: 6.5 (MEDIUM)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9429
Published: 2019-09-27
Description: In profman, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110035108
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9430
Published: 2019-09-27
Description: In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109838296
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9431
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109755179
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125, CWE-416
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9432
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure in the Bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80546108
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9433
Published: 2019-09-27
Description: In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html; http://www.openwall.com/lists/oss-security/2019/10/25/17; http://www.openwall.com/lists/oss-security/2019/10/27/1
CVE: CVE-2019-9434
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with heap information written to the log with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80432895
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9435
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80146682
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9438
Published: 2019-09-27
Description: In the Package Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of information about installed packages for other users with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-77821568
CVSS Score: 3.3 (LOW)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9440
Published: 2019-09-27
Description: In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796
CVSS Score: 3.3 (LOW)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9459
Published: 2019-09-27
Description: In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9460
Published: 2019-09-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. It was intended to be published earlier but will be made public later instead. Notes: none
CVE: CVE-2019-9462
Published: 2019-09-27
Description: In Bluetooth, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-91544774
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-9463
Published: 2019-09-27
Description: In Platform, there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607
CVSS Score: 7.3 (HIGH)
References: https://source.android.com/security/bulletin/android-10; https://source.android.com/security/bulletin/android-10
CVE: CVE-2019-16685
Published: 2019-09-27
Description: Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://verneet.com/cve-2019-16685/; http://verneet.com/cve-2019-16685/
CVE: CVE-2019-16686
Published: 2019-09-27
Description: Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://verneet.com/cve-2019-16686; http://verneet.com/cve-2019-16686
CVE: CVE-2019-16687
Published: 2019-09-27
Description: Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://verneet.com/cve-2019-16687; http://verneet.com/cve-2019-16687
CVE: CVE-2019-16688
Published: 2019-09-27
Description: Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://verneet.com/cve-2019-16688; http://verneet.com/cve-2019-16688
CVE: CVE-2019-16927
Published: 2019-09-27
Description: Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41885; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41885
CVE: CVE-2019-11927
Published: 2019-09-27
Description: An integer overflow in WhatsApp media parsing libraries allows a remote attacker to perform an out-of-bounds write on the heap via specially-crafted EXIF tags in WEBP images. This issue affects WhatsApp for Android before version 2.19.143 and WhatsApp for iOS before version 2.19.100.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://www.facebook.com/security/advisories/cve-2019-11927; https://www.facebook.com/security/advisories/cve-2019-11927
CVE: CVE-2019-16928
Published: 2019-09-27
Description: Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2019/09/28/1; http://www.openwall.com/lists/oss-security/2019/09/28/2; http://www.openwall.com/lists/oss-security/2019/09/28/3
CVE: CVE-2019-3736
Published: 2019-09-27
Description: Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support tool to decrypt encrypted passwords stored locally on the system to use it to access other components using the privileges of the compromised user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-257, CWE-327
References: https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities
CVE: CVE-2019-3746
Published: 2019-09-27
Description: Dell EMC Integrated Data Protection Appliance versions prior to 2.3 do not limit the number of authentication attempts to the ACM API. An authenticated remote user may exploit this vulnerability to launch a brute-force authentication attack in order to gain access to the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-307, CWE-307
References: https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities
CVE: CVE-2019-3747
Published: 2019-09-27
Description: Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a stored cross-site scripting vulnerability. A remote malicious ACM admin user may potentially exploit this vulnerability to store malicious HTML or JavaScript code in Cloud DR add-on specific field. When victim users access the page through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/536363/DSA-2019-112-Dell-EMC-Integrated-Data-Protection-Appliance-Multiple-Vulnerabilities
CVE: CVE-2019-3766
Published: 2019-09-27
Description: Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password brute-force attack to gain access to the targeted accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://www.dell.com/support/security/en-us/details/537465/DSA-2019-140-Dell-EMC-Elastic-Cloud-Storage-ECS-Improper-Restriction-of-Excessive-Authenticatio; https://www.dell.com/support/security/en-us/details/537465/DSA-2019-140-Dell-EMC-Elastic-Cloud-Storage-ECS-Improper-Restriction-of-Excessive-Authenticatio
CVE: CVE-2019-16925
Published: 2019-09-28
Description: Flower 0.9.3 has XSS via the name parameter in an @app.task call. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-name-parameter.html; https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-name-parameter.html
CVE: CVE-2019-16926
Published: 2019-09-28
Description: Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-crafted-worker.html; https://fatihhcelik.blogspot.com/2019/09/flower-100-has-xss-via-crafted-worker.html
CVE: CVE-2019-16935
Published: 2019-09-28
Description: The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html
CVE: CVE-2019-16941
Published: 2019-09-28
Description: NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91
References: https://github.com/NationalSecurityAgency/ghidra/blob/79d8f164f8bb8b15cfb60c5d4faeb8e1c25d15ca/Ghidra/Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java#L187-L188; https://github.com/NationalSecurityAgency/ghidra/commit/a17728f8c12effa171b17a25ccfb7e7d9528c5d0; https://github.com/NationalSecurityAgency/ghidra/issues/1090
CVE: CVE-2019-16930
Published: 2019-09-28
Description: Zcashd in Zcash before 2.0.7-3 allows discovery of the IP address of a full node that owns a shielded address, related to mishandling of exceptions during deserialization of note plaintexts. This affects anyone who has disclosed their zaddr to a third party.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-755
References: http://duke.leto.net/2019/10/01/zcash-metadata-leakage-cve-2019-16930.html; https://github.com/zcash/zcash/commit/c1fbf8ab5d73cff5e1f[PII_REDACTED]7c75ba4128d; https://github.com/zcash/zcash/releases/tag/v2.0.7-3
CVE: CVE-2019-16992
Published: 2019-09-30
Description: The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/keybase/keybase-issues/issues/3583; https://sneak.berlin/20190929/keybase-backdoor/; https://github.com/keybase/keybase-issues/issues/3583
CVE: CVE-2019-16676
Published: 2019-09-30
Description: Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://blog.plataformatec.com.br/2019/09/incorrect-access-control-in-simple-form-cve-2019-16676/; https://github.com/plataformatec/simple_form/commits/master; https://github.com/plataformatec/simple_form/security/advisories/GHSA-r74q-gxcg-73hx
CVE: CVE-2019-16993
Published: 2019-09-30
Description: In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting them.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/phpbb/phpbb/commit/18abef716ecf42a35416444f3f84f5459d573789; https://lists.debian.org/debian-lts-announce/2019/09/msg00036.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00006.html
CVE: CVE-2017-18636
Published: 2019-09-30
Description: CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.warmeng.com/2017/01/01/CDG-filedown/; http://www.warmeng.com/2017/01/01/CDG-filedown/
CVE: CVE-2019-14752
Published: 2019-09-30
Description: SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8; https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20
CVE: CVE-2019-16414
Published: 2019-09-30
Description: A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login/?reason=failure&NTLM= URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154678/GFI-Kerio-Control-9.3.0-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Sep/35; https://twitter.com/haxel0rd/status/[PII_REDACTED]51174144
CVE: CVE-2019-16743
Published: 2019-09-30
Description: eBrigade before 5.0 has evenement_ical.php evenement SQL Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html; https://sourceforge.net/projects/ebrigade/files/; http://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html
CVE: CVE-2019-16744
Published: 2019-09-30
Description: eBrigade before 5.0 has evenements.php cid SQL Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html; https://sourceforge.net/projects/ebrigade/files/; https://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html
CVE: CVE-2019-16745
Published: 2019-09-30
Description: eBrigade before 5.0 has evenement_choice.php chxCal SQL Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html; https://sourceforge.net/projects/ebrigade/files/; https://packetstormsecurity.com/files/154624/eBrigade-SQL-Injection.html
CVE: CVE-2019-16994
Published: 2019-09-30
Description: In the Linux kernel before 5.0, a memory leak exists in sit_init_net() in net/ipv6/sit.c when register_netdev() fails to register sitn->fb_tunnel_dev, which may cause denial of service, aka CID-07f12b26e21a.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07f12b26e21ab359261bf75cfcb424fdc7daeb6d; https://github.com/torvalds/linux/commit/07f12b26e21ab359261bf75cfcb424fdc7daeb6d
CVE: CVE-2019-16995
Published: 2019-09-30
Description: In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.3
CVE: CVE-2019-16996
Published: 2019-09-30
Description: In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/product_admin.class.php via the admin/?n=product&c=product_admin&a=dopara&app_type=shop id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/1; https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/1
CVE: CVE-2019-16997
Published: 2019-09-30
Description: In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/language/admin/language_general.class.php via the admin/?n=language&c=language_general&a=doExportPack appno parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/2; https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/2
CVE: CVE-2019-16999
Published: 2019-09-30
Description: CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/idcos/Cloudboot/issues/22; https://github.com/idcos/Cloudboot/issues/22
CVE: CVE-2019-16916
Published: 2019-09-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue for the designated product. Notes: none