deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15582
Published: 2019-04-26
Description: Cross-Site Scripting (XSS) vulnerability in adm/sms_admin/num_book_write.php and adm/sms_admin/num_book_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-72e9a967d5cebb96734e6f6984091e66; https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-737f14a5f5bdad53c5ce9b3ec628bf6d; https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-72e9a967d5cebb96734e6f6984091e66
CVE: CVE-2018-15584
Published: 2019-04-26
Description: Cross-Site Scripting (XSS) vulnerability in adm/boardgroup_form_update.php and adm/boardgroup_list_update.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-0e9aa589be0cec73df5f154aa40f5b06; https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-22d0b3c0987a[PII_REDACTED]0fc07f1886; https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-0e9aa589be0cec73df5f154aa40f5b06
CVE: CVE-2018-18276
Published: 2019-04-26
Description: XSS exists in the ProFiles 1.5 component for Joomla! via the name or path parameter when creating a new folder in the administrative panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.cinquino.eu/ProFiles%201.5%20Free%20Version%20Component%20Xss.htm; http://www.cinquino.eu/ProFiles%201.5%20Free%20Version%20Component%20Xss.htm
CVE: CVE-2019-11492
Published: 2019-04-26
Description: ProjectSend before r1070 writes user passwords to the server logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://www.projectsend.org/change-log/; https://www.projectsend.org/change-log/
CVE: CVE-2019-11533
Published: 2019-04-26
Description: Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108088; https://www.projectsend.org/change-log/; http://www.securityfocus.com/bid/108088
CVE: CVE-2019-3843
Published: 2019-04-26
Description: It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266, CWE-269
References: http://www.securityfocus.com/bid/108116; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2019-3844
Published: 2019-04-26
Description: It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.
CVSS Score: 7.8 (HIGH)
CWE: CWE-268
References: http://www.securityfocus.com/bid/108096; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2019-7476
Published: 2019-04-26
Description: A vulnerability in SonicWall Global Management System (GMS), allow a remote user to gain access to the appliance using existing SSH key. This vulnerability affects GMS versions 9.1, 9.0, 8.7, 8.6, 8.4, 8.3 and earlier.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284, CWE-1188
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0004
CVE: CVE-2019-11555
Published: 2019-04-26
Description: The EAP-pwd implementation in hostapd (EAP server) before 2.8 and wpa_supplicant (EAP peer) before 2.8 does not validate fragmentation reassembly state properly for a case where an unexpected fragment could be received. This could result in process termination due to a NULL pointer dereference (denial of service). This affects eap_server/eap_server_pwd.c and eap_peer/eap_pwd.c.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2019/04/26/1; https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5T7G763UECWR7FQXOJVL67PW7C5A3SA4/
CVE: CVE-2019-11557
Published: 2019-04-26
Description: The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-352
References: http://seclists.org/fulldisclosure/2019/Apr/35; https://lists.openwall.net/full-disclosure/2019/04/23/1; https://wordpress.org/plugins/contact-form-builder/#developers
CVE: CVE-2019-11565
Published: 2019-04-27
Description: Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://dumpco.re/bugs/wp-plugin-print-my-blog-ssrf; https://github.com/mnelson4/printmyblog/commit/8584a2839a541eb29fca64252e388c827af3ec21; https://plugins.trac.wordpress.org/changeset?old_path=%2Fprint-my-blog%2Ftrunk&old=2075667&new_path=%2Fprint-my-blog%2Ftrunk&new=2075667
CVE: CVE-2019-11567
Published: 2019-04-27
Description: An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $_GET['del'], as demonstrated by an admin/page/system/nav.php?del= URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md; https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md
CVE: CVE-2019-11568
Published: 2019-04-27
Description: An issue was discovered in AikCms v2.0. There is a File upload vulnerability, as demonstrated by an admin/page/system/nav.php request with PHP code in a .php file with the application/octet-stream content type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md; https://github.com/kikulo/DebugOpen/blob/master/Aikcms2.0/main.md
CVE: CVE-2019-11576
Published: 2019-04-28
Description: Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://blog.gitea.io/2019/04/gitea-1.8.0-is-released/; https://github.com/go-gitea/gitea/pull/6674; https://blog.gitea.io/2019/04/gitea-1.8.0-is-released/
CVE: CVE-2019-11577
Published: 2019-04-28
Description: dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/108090; https://roy.marples.name/archives/dhcpcd-discuss/0002415.html; https://roy.marples.name/git/dhcpcd.git/commit/?id=8d11b33f6c60e2db257130fa383ba76b6018bcf6
CVE: CVE-2019-11578
Published: 2019-04-28
Description: auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: http://www.securityfocus.com/bid/108090; https://roy.marples.name/archives/dhcpcd-discuss/0002415.html; https://roy.marples.name/git/dhcpcd.git/commit/?id=[PII_REDACTED]b611ca3fbc400a1bbcd4364ef57233
CVE: CVE-2019-11579
Published: 2019-04-28
Description: dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/108090; https://lists.debian.org/debian-lts-announce/2019/05/msg00024.html; https://roy.marples.name/archives/dhcpcd-discuss/0002415.html
CVE: CVE-2015-9285
Published: 2019-04-29
Description: esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/esotalk/esoTalk/issues/444; https://lists.openwall.net/full-disclosure/2015/12/23/13; https://github.com/esotalk/esoTalk/issues/444
CVE: CVE-2016-10749
Published: 2019-04-29
Description: parse_string in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/DaveGamble/cJSON/commit/94df772485c92866ca417d92137747b2e3b0a917; https://github.com/DaveGamble/cJSON/issues/30; https://www.openwall.com/lists/oss-security/2016/11/07/2
CVE: CVE-2019-11590
Published: 2019-04-29
Description: The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-352, CWE-829
References: http://seclists.org/fulldisclosure/2019/Apr/36; https://lists.openwall.net/full-disclosure/2019/04/05/11; https://wordpress.org/plugins/form-maker/#developers
CVE: CVE-2019-11591
Published: 2019-04-29
Description: The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action'] value, and the latter is unsanitized.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-352, CWE-829
References: http://seclists.org/fulldisclosure/2019/Apr/37; https://lists.openwall.net/full-disclosure/2019/04/05/12; https://wordpress.org/plugins/contact-form-maker/#developers
CVE: CVE-2019-11592
Published: 2019-04-29
Description: WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-18-053-reflected-cross-site-scripting-in-webid/; https://www.netsparker.com/web-applications-advisories/ns-18-053-reflected-cross-site-scripting-in-webid/
CVE: CVE-2019-5492
Published: 2019-04-29
Description: Element Plug-in for vCenter Server versions prior to 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions prior to 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/108105; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.securityfocus.com/bid/108105
CVE: CVE-2018-12384
Published: 2019-04-29
Description: When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. This results in full malleability of the ClientHello for SSLv2 used for TLS 1.2 in all versions prior to NSS 3.39. This does not impact TLS 1.3.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-335
References: https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12384; https://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12384
CVE: CVE-2019-11593
Published: 2019-04-29
Description: In Adblock Plus before 3.5.2, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://adblockplus.org/releases/adblock-plus-352-for-chrome-firefox-and-opera-released; https://armin.dev/blog/2019/04/adblock-plus-code-injection/; https://gitlab.com/eyeo/adblockplus/adblockpluschrome/issues/1
CVE: CVE-2019-11594
Published: 2019-04-29
Description: In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://armin.dev/blog/2019/04/adblock-plus-code-injection/; https://blog.getadblock.com/adblock-for-chrome-3-45-0-resolving-a-potential-security-risk-b21647a26df6; https://news.ycombinator.com/item?id=19666504
CVE: CVE-2019-11595
Published: 2019-04-29
Description: In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://armin.dev/blog/2019/04/adblock-plus-code-injection/; https://news.ycombinator.com/item?id=19666504; https://armin.dev/blog/2019/04/adblock-plus-code-injection/
CVE: CVE-2019-11596
Published: 2019-04-29
Description: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00060.html; https://github.com/memcached/memcached/commit/d35334f368817a77a6bd1f33c6a5676b2c402c02; https://github.com/memcached/memcached/compare/ee1cfe3...50bdc9f
CVE: CVE-2019-5429
Published: 2019-04-29
Description: Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://lists.debian.org/debian-lts-announce/2022/05/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7WUJWTJA55ILACKLTJFSQUYEBHVYENL/; https://security.gentoo.org/glsa/202007-51
CVE: CVE-2018-5123
Published: 2019-04-29
Description: A third party website can access information available to a user with access to a restricted bug entry using the image generation in report.cgi in all Bugzilla versions prior to 4.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-5123; https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-5123
CVE: CVE-2019-11597
Published: 2019-04-29
Description: In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00043.html; http://www.securityfocus.com/bid/108102
CVE: CVE-2019-11598
Published: 2019-04-29
Description: In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; http://www.securityfocus.com/bid/108102
CVE: CVE-2019-3493
Published: 2019-04-29
Description: A potential security vulnerability has been identified in Micro Focus Network Automation Software 9.20, 9.21, 10.00, 10.10, 10.20, 10.30, 10.40, 10.50, 2018.05, 2018.08, 2018.11, and Micro Focus Network Operations Management (NOM) all versions. The vulnerability could be remotely exploited to Remote Code Execution.
CVSS Score: 8.8 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03407763; https://softwaresupport.softwaregrp.com/doc/KM03407763
CVE: CVE-2019-3560
Published: 2019-04-29
Description: An improperly performed length calculation on a buffer in PlaintextRecordLayer could lead to an infinite loop and denial-of-service based on user input. This issue affected versions of fizz prior to v2019.03.04.00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-131, CWE-835
References: http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html; http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html; https://github.com/facebookincubator/fizz/commit/40bbb161e72fb609608d53b9d64c56bb961a6ee2
CVE: CVE-2019-3561
Published: 2019-04-29
Description: Insufficient boundary checks for the strrpos and strripos functions allow access to out-of-bounds memory. This affects all supported versions of HHVM (4.0.3, 3.30.4, and 3.27.7 and below).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-125
References: https://github.com/facebook/hhvm/commit/46003b4ab564b2abcd8470035fc324fe36aa8c75; https://hhvm.com/blog/2019/04/03/hhvm-4.0.4.html; https://github.com/facebook/hhvm/commit/46003b4ab564b2abcd8470035fc324fe36aa8c75
CVE: CVE-2019-3562
Published: 2019-04-29
Description: A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://www.facebook.com/security/advisories/cve-2019-3562; https://www.facebook.com/security/advisories/cve-2019-3562
CVE: CVE-2019-3563
Published: 2019-04-29
Description: Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-126, CWE-787
References: https://github.com/facebook/wangle/commit/5b3bceca875e4ea4ed9d14c20b20ce46c92c13c6; https://github.com/facebook/wangle/commit/5b3bceca875e4ea4ed9d14c20b20ce46c92c13c6
CVE: CVE-2019-8454
Published: 2019-04-29
Description: A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-65, CWE-59
References: https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012; https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012
CVE: CVE-2018-1961
Published: 2019-04-29
Description: IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/153657; https://www.ibm.com/support/docview.wss?uid=ibm10731107; https://exchange.xforce.ibmcloud.com/vulnerabilities/153657
CVE: CVE-2018-2004
Published: 2019-04-29
Description: IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155006.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108099; https://exchange.xforce.ibmcloud.com/vulnerabilities/155006; https://www.ibm.com/support/docview.wss?uid=ibm10882260
CVE: CVE-2018-2007
Published: 2019-04-29
Description: IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 155078.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ibm10874952; https://exchange.xforce.ibmcloud.com/vulnerabilities/155078; http://www.ibm.com/support/docview.wss?uid=ibm10874952
CVE: CVE-2019-4047
Published: 2019-04-29
Description: IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/108103; https://exchange.xforce.ibmcloud.com/vulnerabilities/156243; https://www.ibm.com/support/docview.wss?uid=ibm10882262
CVE: CVE-2019-11599
Published: 2019-04-29
Description: The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-667
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html; http://packetstormsecurity.com/files/152663/Linux-Missing-Lockdown.html
CVE: CVE-2019-3892
Published: 2019-04-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11599. Reason: This candidate is a reservation duplicate of CVE-2019-11599. Notes: All CVE users should reference CVE-2019-11599 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2019-10307
Published: 2019-04-30
Description: A cross-site request forgery vulnerability in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers to change the per-job default graph configuration for all users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1100
CVE: CVE-2019-10308
Published: 2019-04-30
Description: A missing permission check in Jenkins Static Analysis Utilities Plugin 1.95 and earlier in the DefaultGraphConfigurationView#doSave form handler method allowed attackers with Overall/Read permission to change the per-job default graph configuration for all users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1100
CVE: CVE-2019-10309
Published: 2019-04-30
Description: Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2019/04/30/5; http://www.securityfocus.com/bid/108159; https://jenkins.io/security/advisory/2019-04-30/#SECURITY-1252