deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-10383
Published: 2019-08-22
Description: The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/memphis-documents-library/#developers; https://wordpress.org/plugins/memphis-documents-library/#developers
CVE: CVE-2014-10384
Published: 2019-08-22
Description: The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/memphis-documents-library/#developers; https://wordpress.org/plugins/memphis-documents-library/#developers
CVE: CVE-2014-10385
Published: 2019-08-22
Description: The memphis-documents-library plugin before 3.0 for WordPress has XSS via $_REQUEST.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/memphis-documents-library/#developers; https://wordpress.org/plugins/memphis-documents-library/#developers
CVE: CVE-2015-9337
Published: 2019-08-22
Description: The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://wordpress.org/plugins/profile-builder/#developers; https://wordpress.org/plugins/profile-builder/#developers
CVE: CVE-2016-10922
Published: 2019-08-22
Description: The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://wordpress.org/plugins/woocommerce-store-toolkit/#developers; https://wordpress.org/plugins/woocommerce-store-toolkit/#developers
CVE: CVE-2016-10923
Published: 2019-08-22
Description: The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://wordpress.org/plugins/woocommerce-store-toolkit/#developers; https://wordpress.org/plugins/woocommerce-store-toolkit/#developers
CVE: CVE-2016-10924
Published: 2019-08-22
Description: The ebook-download plugin before 1.2 for WordPress has directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://wordpress.org/plugins/ebook-download/#developers; https://wordpress.org/plugins/ebook-download/#developers
CVE: CVE-2016-10925
Published: 2019-08-22
Description: The peters-login-redirect plugin before 2.9.1 for WordPress has XSS during the editing of redirect URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/peters-login-redirect/#developers; https://wordpress.org/plugins/peters-login-redirect/#developers
CVE: CVE-2016-10926
Published: 2019-08-22
Description: The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://wordpress.org/plugins/nelio-ab-testing/#developers; https://wordpress.org/plugins/nelio-ab-testing/#developers
CVE: CVE-2016-10927
Published: 2019-08-22
Description: The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://wordpress.org/plugins/nelio-ab-testing/#developers; https://wordpress.org/plugins/nelio-ab-testing/#developers
CVE: CVE-2017-18576
Published: 2019-08-22
Description: The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/event-notifier/#developers; https://wordpress.org/plugins/event-notifier/#developers
CVE: CVE-2017-18577
Published: 2019-08-22
Description: The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/mailchimp-for-wp/#developers; https://wordpress.org/plugins/mailchimp-for-wp/#developers
CVE: CVE-2017-18580
Published: 2019-08-22
Description: The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/shortcodes-ultimate/#developers; https://wordpress.org/plugins/shortcodes-ultimate/#developers
CVE: CVE-2017-18581
Published: 2019-08-22
Description: The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/time-sheets/#developers; https://wordpress.org/plugins/time-sheets/#developers
CVE: CVE-2017-18582
Published: 2019-08-22
Description: The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/time-sheets/#developers; https://wordpress.org/plugins/time-sheets/#developers
CVE: CVE-2017-18583
Published: 2019-08-22
Description: The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://wordpress.org/plugins/post-pay-counter/#developers; https://wordpress.org/plugins/post-pay-counter/#developers
CVE: CVE-2017-18584
Published: 2019-08-22
Description: The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://wordpress.org/plugins/post-pay-counter/#developers; https://wordpress.org/plugins/post-pay-counter/#developers
CVE: CVE-2018-20983
Published: 2019-08-22
Description: The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-retina-2x/#developers; https://wordpress.org/plugins/wp-retina-2x/#developers
CVE: CVE-2018-20984
Published: 2019-08-22
Description: The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wordpress.org/plugins/patreon-connect/#developers; https://wordpress.org/plugins/patreon-connect/#developers
CVE: CVE-2018-20985
Published: 2019-08-22
Description: The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/wp-payeezy-pay/#developers; https://wordpress.org/plugins/wp-payeezy-pay/#developers
CVE: CVE-2019-15319
Published: 2019-08-22
Description: The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wordpress.org/plugins/option-tree/#developers; https://wpvulndb.com/vulnerabilities/9599; https://wordpress.org/plugins/option-tree/#developers
CVE: CVE-2019-15320
Published: 2019-08-22
Description: The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wordpress.org/plugins/option-tree/#developers; https://wpvulndb.com/vulnerabilities/9600; https://wordpress.org/plugins/option-tree/#developers
CVE: CVE-2019-15321
Published: 2019-08-22
Description: The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wordpress.org/plugins/option-tree/#developers; https://wpvulndb.com/vulnerabilities/9600; https://wordpress.org/plugins/option-tree/#developers
CVE: CVE-2019-15322
Published: 2019-08-22
Description: The shortcode-factory plugin before 2.8 for WordPress has Local File Inclusion.
CVSS Score: 9.8 (CRITICAL)
References: https://wordpress.org/plugins/shortcode-factory/#developers; https://wordpress.org/plugins/shortcode-factory/#developers
CVE: CVE-2019-15323
Published: 2019-08-22
Description: The ad-inserter plugin before 2.4.20 for WordPress has path traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://wordpress.org/plugins/ad-inserter/#developers; https://wpvulndb.com/vulnerabilities/9453; https://wordpress.org/plugins/ad-inserter/#developers
CVE: CVE-2019-15324
Published: 2019-08-22
Description: The ad-inserter plugin before 2.4.22 for WordPress has remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://wordpress.org/plugins/ad-inserter/#developers; https://wpvulndb.com/vulnerabilities/9455; https://wordpress.org/plugins/ad-inserter/#developers
CVE: CVE-2019-5632
Published: 2019-08-22
Description: An insecure storage of sensitive information vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for Android, version 01.01.43 and prior versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/; https://play.google.com/store/apps/details?id=com.belwith.hickorysmart&hl=en_US; https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/
CVE: CVE-2019-5633
Published: 2019-08-22
Description: An insecure storage of sensitive information vulnerability is present in Hickory Smart for iOS mobile devices from Belwith Products, LLC. The application's database was found to contain information that could be used to control the lock devices remotely. This issue affects Hickory Smart for iOS, version 01.01.07 and prior versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://apps.apple.com/us/app/hickory-smart/id[PII_REDACTED]; https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/; https://apps.apple.com/us/app/hickory-smart/id[PII_REDACTED]
CVE: CVE-2019-5634
Published: 2019-08-22
Description: An inclusion of sensitive information in log files vulnerability is present in Hickory Smart for Android mobile devices from Belwith Products, LLC. Communications to the internet API services and direct connections to the lock via Bluetooth Low Energy (BLE) from the mobile application are logged in a debug log on the Android device at HickorySmartLog/Logs/SRDeviceLog.txt. This information was found stored in the Android device's default USB or SDcard storage paths and is accessible without rooting the device. This issue affects Hickory Smart for Android, version 01.01.43 and prior versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/; https://play.google.com/store/apps/details?id=com.belwith.hickorysmart&hl=en_US; https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/
CVE: CVE-2019-5635
Published: 2019-08-22
Description: A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge device communicates over the network to an MQTT broker without using encryption. This exposed the default username and password used to authenticate to the MQTT broker. This issue affects Hickory Smart Ethernet Bridge, model number H077646. The firmware does not appear to contain versioning information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/; https://hickoryhardware.com/products/hickory-smart-ethernet-bridge?variant=[PII_REDACTED]8086; https://blog.rapid7.com/2019/08/01/r7-2019-18-multiple-hickory-smart-lock-vulnerabilities/
CVE: CVE-2018-18572
Published: 2019-08-22
Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Because of this filter, script files with certain PHP-related extensions (such as .phtml and .php5) didn't execute in the application. But this filter didn't prevent the '.pht' extension. Thus, remote authenticated administrators can upload '.pht' files for arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/osCommerce/oscommerce2/issues/631; https://github.com/osCommerce/oscommerce2/issues/631
CVE: CVE-2018-18573
Published: 2019-08-22
Description: osCommerce 2.3.4.1 has an incomplete '.htaccess' for blacklist filtering in the "product" page. Remote authenticated administrators can upload new '.htaccess' files (e.g., omitting .php) and subsequently achieve arbitrary PHP code execution via a /catalog/admin/categories.php?cPath=&action=new_product URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/osCommerce/oscommerce2/issues/631; https://github.com/osCommerce/oscommerce2/issues/631
CVE: CVE-2019-11013
Published: 2019-08-22
Description: Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on the remote server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html; https://mayaseven.com/nimble-directory-traversal-in-nimble-streamer-version-3-0-2-2-to-3-5-4-9/; http://packetstormsecurity.com/files/154196/Nimble-Streamer-3.x-Directory-Traversal.html
CVE: CVE-2019-11029
Published: 2019-08-22
Description: Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution; https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution
CVE: CVE-2019-11030
Published: 2019-08-22
Description: Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the .NET garbage collector, in which a gadget (contained in a serialized object) may be executed with SYSTEM privileges. The attacker must properly encrypt the object; however, the hardcoded keys are available.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-798
References: https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution; https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution
CVE: CVE-2019-11031
Published: 2019-08-22
Description: Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the auto-update feature of IDVRUpdateService2 in DVRServer.exe. An attacker can upload files with a Setup-Files action, and then execute these files with SYSTEM privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution; https://www.kyberturvallisuuskeskus.fi/en/vulnerabilities-mirasys-vms-video-management-solution
CVE: CVE-2019-14751
Published: 2019-08-22
Description: NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00001.html; https://github.com/mssalvatore/CVE-2019-14751_PoC
CVE: CVE-2019-9153
Published: 2019-08-22
Description: Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: http://packetstormsecurity.com/files/154191/OpenPGP.js-4.2.0-Signature-Bypass-Invalid-Curve-Attack.html; https://github.com/openpgpjs/openpgpjs/pull/797/commits/327d3e5392a6f59a4270569d200c7f7a2bfc4cbc; https://github.com/openpgpjs/openpgpjs/pull/816
CVE: CVE-2019-9154
Published: 2019-08-22
Description: Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: http://packetstormsecurity.com/files/154191/OpenPGP.js-4.2.0-Signature-Bypass-Invalid-Curve-Attack.html; https://github.com/openpgpjs/openpgpjs/pull/797; https://github.com/openpgpjs/openpgpjs/pull/797/commits/47138eed61473e13ee8f05931119d3e10542c5e1
CVE: CVE-2019-9155
Published: 2019-08-22
Description: A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve attack in order to gain the victim's ECDH private key.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://packetstormsecurity.com/files/154191/OpenPGP.js-4.2.0-Signature-Bypass-Invalid-Curve-Attack.html; https://github.com/openpgpjs/openpgpjs/pull/853; https://github.com/openpgpjs/openpgpjs/pull/853/commits/7ba4f8c655e7fd7706e8d7334e44b40fdf56c43e
CVE: CVE-2019-7617
Published: 2019-08-22
Description: When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://discuss.elastic.co/t/elastic-apm-agent-for-python-5-1-0-security-update/196145; https://www.elastic.co/community/security/; https://discuss.elastic.co/t/elastic-apm-agent-for-python-5-1-0-security-update/196145
CVE: CVE-2019-14469
Published: 2019-08-22
Description: In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33-CVE-2019-14469-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-2019-07-26; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33-CVE-2019-14469-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-2019-07-26
CVE: CVE-2014-10387
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2014-10388
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2014-10389
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2014-10390
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2014-10391
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2014-10392
Published: 2019-08-22
Description: The cforms2 plugin before 10.2 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/cforms2/#developers; https://wpvulndb.com/vulnerabilities/9621; https://wordpress.org/plugins/cforms2/#developers
CVE: CVE-2014-10394
Published: 2019-08-22
Description: The rich-counter plugin before 1.2.0 for WordPress has JavaScript injection via a User-Agent header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://wordpress.org/plugins/rich-counter/#developers; https://wordpress.org/plugins/rich-counter/#developers
CVE: CVE-2015-9341
Published: 2019-08-22
Description: The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://wordpress.org/plugins/wp-file-upload/#developers; https://wordpress.org/plugins/wp-file-upload/#developers
CVE: CVE-2016-10930
Published: 2019-08-22
Description: The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers
CVE: CVE-2017-18586
Published: 2019-08-22
Description: The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://wordpress.org/plugins/insert-pages/#developers; https://wordpress.org/plugins/insert-pages/#developers
CVE: CVE-2018-20988
Published: 2019-08-22
Description: The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://wordpress.org/plugins/wpgform/#developers; https://wordpress.org/plugins/wpgform/#developers
CVE: CVE-2019-12385
Published: 2019-08-22
Description: An issue was discovered in Ampache through 3.9.1. The search engine is affected by a SQL Injection, so any user able to perform lib/class/search.class.php searches (even guest users) can dump any data contained in the database (sessions, hashed passwords, etc.). This may lead to a full compromise of admin accounts, when combined with the weak password generator algorithm used in the lostpassword functionality.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html; https://www.tarlogic.com/en/blog/vulnerabilities-in-ampache/; https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html
CVE: CVE-2019-12386
Published: 2019-08-22
Description: An issue was discovered in Ampache through 3.9.1. A stored XSS exists in the localplay.php LocalPlay "add instance" functionality. The injected code is reflected in the instances menu. This vulnerability can be abused to force an admin to create a new privileged user whose credentials are known by the attacker.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html; https://www.tarlogic.com/en/blog/vulnerabilities-in-ampache/; https://lists.debian.org/debian-lts-announce/2019/11/msg00008.html
CVE: CVE-2019-15060
Published: 2019-08-22
Description: The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://twitter.com/rapt00rvf; https://vitor-fernandes.github.io/First-CVE/; https://twitter.com/rapt00rvf