deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6395
Published: 2020-02-11
Description: Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6396
Published: 2020-02-11
Description: Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6397
Published: 2020-02-11
Description: Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6398
Published: 2020-02-11
Description: Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6399
Published: 2020-02-11
Description: Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6400
Published: 2020-02-11
Description: Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6401
Published: 2020-02-11
Description: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6402
Published: 2020-02-11
Description: Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6403
Published: 2020-02-11
Description: Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6404
Published: 2020-02-11
Description: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6405
Published: 2020-02-11
Description: Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6406
Published: 2020-02-11
Description: Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6408
Published: 2020-02-11
Description: Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6409
Published: 2020-02-11
Description: Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6410
Published: 2020-02-11
Description: Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6411
Published: 2020-02-11
Description: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6412
Published: 2020-02-11
Description: Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6413
Published: 2020-02-11
Description: Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6414
Published: 2020-02-11
Description: Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6415
Published: 2020-02-11
Description: Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6416
Published: 2020-02-11
Description: Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2020-6417
Published: 2020-02-11
Description: Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html; https://access.redhat.com/errata/RHSA-2020:0514
CVE: CVE-2013-1360
Published: 2020-02-11
Description: An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2013-01/0075.html; http://www.exploit-db.com/exploits/24203; http://www.securityfocus.com/bid/57446
CVE: CVE-2013-4535
Published: 2020-02-11
Description: The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=36cf2a37132c7f01fa9adb5f95f5312b27742fd4; http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html; http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html
CVE: CVE-2014-2052
Published: 2020-02-11
Description: Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://owncloud.org/about/security/advisories/oC-SA-2014-006/; https://owncloud.org/security/advisories/xxe-multiple-third-party-components/; https://www.securityfocus.com/bid/66222
CVE: CVE-2019-13924
Published: 2020-02-11
Description: A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-693, CWE-1021
References: https://cert-portal.siemens.com/productcert/pdf/ssa-951513.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-07; https://cert-portal.siemens.com/productcert/pdf/ssa-951513.pdf
CVE: CVE-2019-13925
Published: 2020-02-11
Description: A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-10; https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
CVE: CVE-2019-13926
Published: 2020-02-11
Description: A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionality of the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-10; https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
CVE: CVE-2019-13940
Published: 2020-02-11
Description: A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server
by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp.

Beyond the web service, no other functions or interfaces are affected by the denial of service condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf
CVE: CVE-2019-13941
Published: 2020-02-11
Description: A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names for project files that legitimately authenticated users have created by using the application's export function. By accessing a specific uniform resource locator on the web server, a remote attacker could be able to download a project file without prior authentication. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected system. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: https://cert-portal.siemens.com/productcert/pdf/ssa-986695.pdf; https://www.us-cert.gov/ics/advisories/icsa-20-042-09; https://cert-portal.siemens.com/productcert/pdf/ssa-986695.pdf
CVE: CVE-2019-13946
Published: 2020-02-11
Description: Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit
internal resource allocation when multiple legitimate diagnostic package
requests are sent to the DCE-RPC interface.
This could lead to a denial of service condition due to lack of memory
for devices that include a vulnerable version of the stack.

The security vulnerability could be exploited by an attacker with network
access to an affected device. Successful exploitation requires no system
privileges and no user interaction. An attacker could use the vulnerability
to compromise the availability of the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/html/ssa-780073.html; https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf; https://cert-portal.siemens.com/productcert/html/ssa-780073.html
CVE: CVE-2013-0803
Published: 2020-02-11
Description: A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.exploit-db.com/exploits/24549; https://exchange.xforce.ibmcloud.com/vulnerabilities/82378; https://packetstormsecurity.com/files/cve/CVE-2013-0803
CVE: CVE-2013-1359
Published: 2020-02-11
Description: An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/24204; http://www.exploit-db.com/exploits/24322; http://www.securityfocus.com/bid/57445
CVE: CVE-2014-6447
Published: 2020-02-11
Description: Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 before 12.3X48-D10, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R3, 14.1X53 before 14.1X53-D10, 14.2 before 14.2R1, and 15.1 before 15.1R1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10682; http://www.securitytracker.com/id/1032846; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10682
CVE: CVE-2014-9748
Published: 2020-02-11
Description: The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://github.com/libuv/libuv/issues/515; https://github.com/libuv/libuv/pull/516; https://github.com/nodejs/node/pull/2723
CVE: CVE-2012-4519
Published: 2020-02-11
Description: Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/10/11/10; http://www.openwall.com/lists/oss-security/2013/07/10/19; http://www.openwall.com/lists/oss-security/2012/10/11/10
CVE: CVE-2013-0517
Published: 2020-02-11
Description: A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/59807; https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-addressed-in-ibm-sterling-external-authentication-server-cve-2013-0514-cve-2013-0517-4/; http://www.securityfocus.com/bid/59807
CVE: CVE-2013-1607
Published: 2020-02-11
Description: Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/82563; https://www.securityfocus.com/bid/58303/info; https://exchange.xforce.ibmcloud.com/vulnerabilities/82563
CVE: CVE-2013-1760
Published: 2020-02-11
Description: The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/64004; https://exchange.xforce.ibmcloud.com/vulnerabilities/89358; https://exchange.xforce.ibmcloud.com/vulnerabilities/89360
CVE: CVE-2013-2057
Published: 2020-02-11
Description: YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2013/05/05/1; http://www.securityfocus.com/bid/59643; https://exchange.xforce.ibmcloud.com/vulnerabilities/84034
CVE: CVE-2013-3684
Published: 2020-02-11
Description: NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/85011; https://exchange.xforce.ibmcloud.com/vulnerabilities/85012; https://exchange.xforce.ibmcloud.com/vulnerabilities/85011
CVE: CVE-2013-3942
Published: 2020-02-11
Description: Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/64023; https://exchange.xforce.ibmcloud.com/vulnerabilities/89352; http://www.securityfocus.com/bid/64023
CVE: CVE-2013-4448
Published: 2020-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-5111. Reason: This candidate is a duplicate of CVE-2010-5111. Notes: All CVE users should reference CVE-2010-5111 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-5988
Published: 2020-02-11
Description: A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/cve/CVE-2013-5988; https://www.securityfocus.com/archive/1/528962; https://packetstormsecurity.com/files/cve/CVE-2013-5988