deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-4509
Published: 2020-06-04
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182364.
CVSS Score: 7.6 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182364; https://www.ibm.com/support/pages/node/6220154; https://exchange.xforce.ibmcloud.com/vulnerabilities/182364
CVE: CVE-2020-13803
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13804
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13805
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13806
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13807
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13808
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13809
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13810
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13822
Published: 2020-06-04
Description: The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.
CVSS Score: 7.7 (HIGH)
CWE: CWE-190
References: https://github.com/indutny/elliptic/issues/226; https://medium.com/%40herman_10687/malleability-attack-why-it-matters-7b5f59fb99a4; https://www.npmjs.com/package/elliptic
CVE: CVE-2020-13827
Published: 2020-06-04
Description: phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.phplist.org/newslist/phplist-3-5-4-release-notes/; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-004; https://www.phplist.org/newslist/phplist-3-5-4-release-notes/
CVE: CVE-2019-16384
Published: 2020-06-04
Description: Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be retrieved if the exact location is known and the user has permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/; https://labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/
CVE: CVE-2019-16385
Published: 2020-06-04
Description: Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response splitting via the mimetype parameter within a PDF viewer request, as demonstrated by an example.pdf?mimetype= substring. The victim user must load an application request to view a PDF, containing the malicious payload. This results in a reflected XSS payload being executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/; https://labs.nettitude.com/blog/cve-2019-16384-85-cyblesoft-thinfinity-virtualui-path-traversal-http-header-injection/
CVE: CVE-2019-20813
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20814
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20815
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20816
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20817
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20818
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20819
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20820
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20821
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20822
Published: 2020-06-04
Description: An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13692
Published: 2020-06-04
Description: PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
CVSS Score: 7.7 (HIGH)
CWE: CWE-611
References: https://github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65; https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.13; https://lists.apache.org/thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb%40%3Ccommits.camel.apache.org%3E
CVE: CVE-2020-13765
Published: 2020-06-04
Description: rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787
References: https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319; https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676; https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html
CVE: CVE-2020-13791
Published: 2020-06-04
Description: hw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing an address near the end of the PCI configuration space.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00706.html; https://security.gentoo.org/glsa/202011-09; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-13800
Published: 2020-06-04
Description: ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html; https://cve.openeuler.org/cve#/CVEInfo/CVE-2020-13800; https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00825.html
CVE: CVE-2020-13811
Published: 2020-06-04
Description: An issue was discovered in Foxit Studio Photo before 3.6.6.922. It has an out-of-bounds write via a crafted TIFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13812
Published: 2020-06-04
Description: An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13813
Published: 2020-06-04
Description: An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto366_3.6.6.916.exe is used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13814
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-13815
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-9462
Published: 2020-06-04
Description: An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://developer.athom.com/firmware; https://developer.athom.com/firmware
CVE: CVE-2018-21235
Published: 2020-06-04
Description: An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21236
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader before 2.4.4. It has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21237
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21238
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21239
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21240
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21241
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21242
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21243
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-21244
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20823
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20824
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20825
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20826
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20827
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption because of interaction between ICC-Based color space and Alternate color space.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20828
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20829
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20830
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20831
Published: 2020-06-04
Description: An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash.
CVSS Score: 7.5 (HIGH)
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20832
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling.
CVSS Score: 4.3 (MEDIUM)
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20833
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20834
Published: 2020-06-04
Description: An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20835
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
CVSS Score: 4.3 (MEDIUM)
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20836
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-20837
Published: 2020-06-04
Description: An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10702
Published: 2020-06-04
Description: A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-325
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10702; https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=de0b1bae6461f[PII_REDACTED]5475f88b2384a1eb9; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-13829
Published: 2020-06-04
Description: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 (June 2020).
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-13830
Published: 2020-06-04
Description: An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The Samsung ID is SVE-2019-16382 (June 2020).
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb