deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13577
Published: 2021-02-10
Description: A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://lists.debian.org/debian-lts-announce/2024/02/msg00015.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JINMAJB4WQASTKTNSPQL3V7YMSYPKIA2/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23/
CVE: CVE-2020-13578
Published: 2021-02-10
Description: A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://lists.debian.org/debian-lts-announce/2024/02/msg00015.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JINMAJB4WQASTKTNSPQL3V7YMSYPKIA2/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMTJ3SJJ22SFLBLPKFADV7NVBH7UFA23/
CVE: CVE-2020-16120
Published: 2021-02-10
Description: Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a mountpoint controlled by the user, like a removable device. This was introduced in kernel version 4.19 by commit d1d04ef ("ovl: stack file ops"). This was fixed in kernel version 5.8 by commits 56230d9 ("ovl: verify permissions in ovl_path_open()"), 48bd024 ("ovl: switch to mounter creds in readdir") and 05acefb ("ovl: check permission to open real file"). Additionally, commits 130fdbc ("ovl: pass correct flags for opening real directory") and 292f902 ("ovl: call secutiry hook in ovl_real_ioctl()") in kernel 5.8 might also be desired or necessary. These additional commits introduced a regression in overlay mounts within user namespaces which prevented access to files with ownership outside of the user namespace. This regression was mitigated by subsequent commit b6650da ("ovl: do not fail because of O_NOATIMEi") in kernel 5.11.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-266
References: https://git.kernel.org/linus/05acefb4872dae89e772729efb194af754c877e8; https://git.kernel.org/linus/48bd024b8a40d73ad6b086de2615738da0c7004f; https://git.kernel.org/linus/56230d956739b9cb1cbde439d76227d77979a04d
CVE: CVE-2021-21296
Published: 2021-02-10
Description: Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, or code execution. The issue is fixed in Fleet 3.7.0.
CVSS Score: 2.7 (LOW)
CWE: CWE-400
References: https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40; https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45; https://www.npmjs.com/package/fleetctl
CVE: CVE-2020-8355
Published: 2021-02-10
Description: An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated while managed endpoints are updating. The service log is only generated when requested by a privileged LXCA user and it is only accessible to the privileged LXCA user that requested the file and is then deleted.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://support.lenovo.com/us/en/product_security/LEN-50446; https://support.lenovo.com/us/en/product_security/LEN-50446
CVE: CVE-2020-13561
Published: 2021-02-10
Description: An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1176; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1176
CVE: CVE-2020-13571
Published: 2021-02-10
Description: An out-of-bounds write vulnerability exists in the SGI RLE decompression functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1182; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1182
CVE: CVE-2020-13572
Published: 2021-02-10
Description: A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1183; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1183
CVE: CVE-2020-13581
Published: 2021-02-10
Description: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1192; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1192
CVE: CVE-2020-13583
Published: 2021-02-10
Description: A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1194; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1194
CVE: CVE-2020-13585
Published: 2021-02-10
Description: An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-131, CWE-131
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1196; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1196
CVE: CVE-2020-24842
Published: 2021-02-10
Description: PNPSCADA 2[PII_REDACTED]20 allows cross-site scripting (XSS), which can execute arbitrary JavaScript in the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-288-01; https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-288-01
CVE: CVE-2020-27250
Published: 2021-02-10
Description: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow at Version/Instance 0x0005 and 0x0016. An attacker can entice the victim to open a document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1210
CVE: CVE-2020-28595
Published: 2021-02-10
Description: An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1219; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1219
CVE: CVE-2020-28596
Published: 2021-02-10
Description: A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1220; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1220
CVE: CVE-2021-25251
Published: 2021-02-10
Description: The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-10211; https://helpcenter.trendmicro.com/en-us/article/TMKA-10211
CVE: CVE-2021-27185
Published: 2021-02-10
Description: The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://advisory.checkmarx.net/advisory/CX-2021-4302; https://github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235; https://github.com/eflexsystems/node-samba-client/releases/tag/4.0.0
CVE: CVE-2021-27186
Published: 2021-02-10
Description: Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/fluent/fluent-bit/issues/3044; https://github.com/fluent/fluent-bit/pull/3045; https://github.com/fluent/fluent-bit/pull/3047
CVE: CVE-2020-27870
Published: 2021-02-10
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of SolarWinds Orion Platform 2020.2.1. Authentication is required to exploit this vulnerability. The specific flaw exists within ExportToPDF.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-11917.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-21-066/; https://www.zerodayinitiative.com/advisories/ZDI-21-066/
CVE: CVE-2020-27871
Published: 2021-02-10
Description: This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platform 2020.2.1. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within VulnerabilitySettings.aspx. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11902.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.zerodayinitiative.com/advisories/ZDI-21-067/; https://www.zerodayinitiative.com/advisories/ZDI-21-067/
CVE: CVE-2020-27874
Published: 2021-02-10
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11580.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.zerodayinitiative.com/advisories/ZDI-21-084/; https://www.zerodayinitiative.com/advisories/ZDI-21-084/
CVE: CVE-2021-20335
Published: 2021-02-11
Description: For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions prior to and including 4.4.12 triggers a bug where Automation thinks SSL is being turned off, and can disable SSL temporarily for members of the cluster. This issue is temporary and eventually corrects itself after MongoDB Ops Manager instances have finished upgrading to MongoDB Ops Manager 4.4. In addition, customers must be running with clientCertificateMode=OPTIONAL / allowConnectionsWithoutCertificates=true to be impacted*.* Customers upgrading from Ops Manager 4.2.X to 4.2.24 and finally to Ops Manager 4.4.13+ are unaffected by this issue.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://docs.opsmanager.mongodb.com/v4.2/release-notes/application/#onprem-server-4-2-23; https://docs.opsmanager.mongodb.com/v4.2/release-notes/application/#onprem-server-4-2-23
CVE: CVE-2021-23334
Published: 2021-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-23335
Published: 2021-02-11
Description: All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://snyk.io/vuln/SNYK-JS-ISUSERVALID-1056766; https://snyk.io/vuln/SNYK-JS-ISUSERVALID-1056766
CVE: CVE-2020-8031
Published: 2021-02-11
Description: A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affects: Open Build Service versions prior to 2.10.8.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.suse.com/show_bug.cgi?id=1178880; https://bugzilla.suse.com/show_bug.cgi?id=1178880
CVE: CVE-2020-8027
Published: 2021-02-11
Description: A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.
CVSS Score: 7.3 (HIGH)
CWE: CWE-377
References: https://bugzilla.suse.com/show_bug.cgi?id=1175568; https://bugzilla.suse.com/show_bug.cgi?id=1175568
CVE: CVE-2020-8029
Published: 2021-02-11
Description: A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.
CVSS Score: 2.9 (LOW)
CWE: CWE-732
References: https://bugzilla.suse.com/show_bug.cgi?id=1177362; https://bugzilla.suse.com/show_bug.cgi?id=1177362
CVE: CVE-2020-8030
Published: 2021-02-11
Description: A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster.
CVSS Score: 3.6 (LOW)
CWE: CWE-377
References: https://bugzilla.suse.com/show_bug.cgi?id=1177361; https://bugzilla.suse.com/show_bug.cgi?id=1177361
CVE: CVE-2020-4768
Published: 2021-02-11
Description: IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188907.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/188907; https://www.ibm.com/support/pages/node/6414377; https://exchange.xforce.ibmcloud.com/vulnerabilities/188907
CVE: CVE-2021-20402
Published: 2021-02-11
Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076.
CVSS Score: 2.7 (LOW)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196076; https://www.ibm.com/support/pages/node/6414361; https://exchange.xforce.ibmcloud.com/vulnerabilities/196076
CVE: CVE-2021-20403
Published: 2021-02-11
Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196077; https://www.ibm.com/support/pages/node/6414365; https://exchange.xforce.ibmcloud.com/vulnerabilities/196077
CVE: CVE-2021-20404
Published: 2021-02-11
Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196078; https://www.ibm.com/support/pages/node/6414363; https://exchange.xforce.ibmcloud.com/vulnerabilities/196078
CVE: CVE-2021-20405
Published: 2021-02-11
Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force ID: 196183.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196183; https://www.ibm.com/support/pages/node/6414367; https://exchange.xforce.ibmcloud.com/vulnerabilities/196183
CVE: CVE-2020-10734
Published: 2021-02-11
Description: A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.
CVSS Score: 3.3 (LOW)
CWE: CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=1831662; https://issues.redhat.com/browse/KEYCLOAK-13653; https://bugzilla.redhat.com/show_bug.cgi?id=1831662
CVE: CVE-2020-13185
Published: 2021-02-11
Description: Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an attacker in the ability to execute sensitive functions without credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-288, CWE-287
References: https://advisory.teradici.com/security-advisories/69/; https://advisory.teradici.com/security-advisories/69/
CVE: CVE-2020-13186
Published: 2021-02-11
Description: An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID to modify data if a user clicked a malicious link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://advisory.teradici.com/security-advisories/70/; https://advisory.teradici.com/security-advisories/70/
CVE: CVE-2020-1717
Published: 2021-02-11
Description: A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
CVSS Score: 2.7 (LOW)
CWE: CWE-209, CWE-209
References: https://bugzilla.redhat.com/show_bug.cgi?id=1796281; https://issues.jboss.org/browse/KEYCLOAK-12014; https://bugzilla.redhat.com/show_bug.cgi?id=1796281
CVE: CVE-2020-25493
Published: 2021-02-11
Description: Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-798
References: http://oclean.com; https://github.com/c3r34lk1ll3r/decrypt-oclean-traffic; https://play.google.com/store/apps/details?id=com.yunding.noopsychebrushforeign
CVE: CVE-2020-35498
Published: 2021-02-11
Description: A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1908845; https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJ4DXFJWMZ325ECZXPZOSK7BOEDJZHPR/
CVE: CVE-2021-20188
Published: 2021-02-11
Description: A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the container. It does not allow to directly escape the container, though being a privileged container means that a lot of security features are disabled when running the container. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1915734; https://bugzilla.redhat.com/show_bug.cgi?id=1915734