deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20812
Published: 2019-06-28
Description: An information exposure issue where IPv6 DNS traffic would be sent outside of the VPN tunnel (when Traffic Enforcement was enabled) exists in Pulse Secure Pulse Secure Desktop 9.0R1 and below. This is applicable only to dual-stack (IPv4/IPv6) endpoints.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE: CVE-2018-20813
Published: 2019-06-28
Description: An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/
CVE: CVE-2018-20814
Published: 2019-06-28
Description: An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109033; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877/; http://www.securityfocus.com/bid/109033
CVE: CVE-2019-12932
Published: 2019-06-28
Description: A stored XSS vulnerability was found in SeedDMS 5.1.11 due to poorly escaping the search result in the autocomplete search form placed in the header of out/out.Viewfolder.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG
CVE: CVE-2019-9843
Published: 2019-06-28
Description: In DiffPlug Spotless before 1.20.0 (library and Maven plugin) and before 3.20.0 (Gradle plugin), the XML parser would resolve external entities over both HTTP and HTTPS and didn't respect the resolveExternalEntities setting. For example, this allows disclosure of file contents to a MITM attacker if a victim performs a spotlessApply operation on an untrusted XML file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/diffplug/spotless/blob/master/plugin-gradle/CHANGES.md#version-3200---march-11th-2018-javadoc-jcenter; https://github.com/diffplug/spotless/blob/master/plugin-maven/CHANGES.md#version-1200---march-14th-2018-javadoc-jcenter; https://github.com/diffplug/spotless/issues/358
CVE: CVE-2019-10175
Published: 2019-06-28
Description: A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim (PVC) in the source namespace. This could allow users to clone any PVC in the cluster into their own namespace, effectively allowing access to other user's data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-284, CWE-862
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10175; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10175
CVE: CVE-2019-10964
Published: 2019-06-28
Description: Medtronic MiniMed Insulin Pumps

 are designed to communicate using a wireless RF with other devices, such as blood glucose meters, glucose sensor transmitters, and CareLink USB devices. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with adjacent access to one of the affected insulin pump models can inject, replay, modify, and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284, CWE-287, CWE-863
References: http://www.securityfocus.com/bid/108926; https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-508-paradigm.html; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-19-178-01
CVE: CVE-2019-10983
Published: 2019-06-28
Description: In WebAccess/SCADA Versions 8.3.5 and prior, an out-of-bounds read vulnerability is caused by a lack of proper validation of user-supplied data. Exploitation of this vulnerability may allow disclosure of information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-621/; https://www.us-cert.gov/ics/advisories/icsa-19-178-05
CVE: CVE-2019-10985
Published: 2019-06-28
Description: In WebAccess/SCADA, Versions 8.3.5 and prior, a path traversal vulnerability is caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage this vulnerability to delete files while posing as an administrator.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-622/; https://www.us-cert.gov/ics/advisories/icsa-19-178-05
CVE: CVE-2019-10987
Published: 2019-06-28
Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple out-of-bounds write vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-584/; https://www.zerodayinitiative.com/advisories/ZDI-19-587/
CVE: CVE-2019-10989
Published: 2019-06-28
Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple heap-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution. Note: A different vulnerability than CVE-2019-10991.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-590/; https://www.zerodayinitiative.com/advisories/ZDI-19-591/
CVE: CVE-2019-10991
Published: 2019-06-28
Description: In WebAccess/SCADA, Versions 8.3.5 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-586/; https://www.zerodayinitiative.com/advisories/ZDI-19-588/
CVE: CVE-2019-10993
Published: 2019-06-28
Description: In WebAccess/SCADA Versions 8.3.5 and prior, multiple untrusted pointer dereference vulnerabilities may allow a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.us-cert.gov/ics/advisories/icsa-19-178-05; https://www.zerodayinitiative.com/advisories/ZDI-19-597/; https://www.zerodayinitiative.com/advisories/ZDI-19-598/
CVE: CVE-2019-13028
Published: 2019-06-28
Description: An incorrect implementation of a local web server in eID client (Windows version before 3.1.2, Linux version before 3.0.3) allows remote attackers to execute arbitrary code (.cgi, .pl, or .php) or delete arbitrary files via a crafted HTML page. This is a product from the Ministry of Interior of the Slovak Republic.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://www.csirt.gov.sk/aktualne-7d7.html?id=194; https://www.csirt.gov.sk/doc/eid_klient_tlacova_sprava.pdf; https://www.minv.sk/?tlacove-spravy&sprava=pouzivatelom-e-sluzieb-automaticky-aktualizujeme-aplikaciu-pre-elektronicky-obciansky-preukaz
CVE: CVE-2019-13031
Published: 2019-06-28
Description: LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server. By default, the notification server is not enabled and has a "deny all" rule.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1820; https://lists.debian.org/debian-lts-announce/2019/07/msg00003.html; https://www.calypt.com/blog/index.php/cve-2019-13031-xxe-on-lemonldapng-2-0-5/
CVE: CVE-2019-13032
Published: 2019-06-28
Description: An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri::isValidURI(). This affects third-party software (not Sigil) that uses FlightCrew as a library.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Sigil-Ebook/flightcrew/issues/53; https://salvatoresecurity.com/fun-with-fuzzers-or-how-i-discovered-three-vulnerabilities-part-1-of-3/; https://usn.ubuntu.com/4055-1/
CVE: CVE-2019-13035
Published: 2019-06-29
Description: Artica Pandora FMS 7.0 NG before 735 suffers from local privilege escalation due to improper permissions on C:\PandoraFMS and its sub-folders, allowing standard users to create new files. Moreover, the Apache service httpd.exe will try to execute cmd.exe from C:\PandoraFMS (the current directory) as NT AUTHORITY\SYSTEM upon web requests to the portal. This will effectively allow non-privileged users to escalate privileges to NT AUTHORITY\SYSTEM.
CVSS Score: 7.8 (HIGH)
References: https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-008.md; https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-008.md
CVE: CVE-2019-13038
Published: 2019-06-29
Description: mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/Uninett/mod_auth_mellon/issues/35#issuecomment-503974885; https://lists.debian.org/debian-lts-announce/2023/03/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5E3JVHURJJNDP63CKVX5O5MJAGCQV4K/
CVE: CVE-2019-13044
Published: 2019-06-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13045
Published: 2019-06-29
Description: Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00030.html; http://packetstormsecurity.com/files/153480/Slackware-Security-Advisory-irssi-Updates.html
CVE: CVE-2019-13046
Published: 2019-06-29
Description: linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
CVSS Score: 7.8 (HIGH)
CWE: CWE-388
References: https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-linker.sh; https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-linker.sh
CVE: CVE-2019-13047
Published: 2019-06-29
Description: kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc.c; https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc.c
CVE: CVE-2019-13048
Published: 2019-06-29
Description: kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, and a value less than PAGE_SIZE).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/mehsauce/kowasuos/blob/master/dos/kowasu-sbrk.c; https://github.com/mehsauce/kowasuos/blob/master/dos/kowasu-sbrk.c
CVE: CVE-2019-13049
Published: 2019-06-29
Description: An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-revenge.c; https://github.com/mehsauce/kowasuos/blob/master/exploits/kowasu-sysfunc-revenge.c
CVE: CVE-2019-13050
Published: 2019-06-29
Description: Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00039.html; https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2016-10761
Published: 2019-06-29
Description: Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://github.com/BastilleResearch/mousejack/blob/master/doc/advisories/bastille-2.logitech.public.txt; https://www.kb.cert.org/vuls/id/981271; https://github.com/BastilleResearch/mousejack/blob/master/doc/advisories/bastille-2.logitech.public.txt
CVE: CVE-2019-13052
Published: 2019-06-29
Description: Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://www.youtube.com/watch?v=GRJ7i2J_Y80; https://www.youtube.com/watch?v=GRJ7i2J_Y80
CVE: CVE-2019-13053
Published: 2019-06-29
Description: Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptographic data from a Radio Frequency transmission. NOTE: this issue exists because of an incomplete fix for CVE-2016-10761.
CVSS Score: 6.5 (MEDIUM)
References: https://www.youtube.com/watch?v=EksyCO0DzYs; https://www.youtube.com/watch?v=EksyCO0DzYs
CVE: CVE-2019-13054
Published: 2019-06-29
Description: The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injected by using ALT+NUMPAD input to bypass the restriction on the characters A through Z.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://twitter.com/mame82/status/[PII_REDACTED]24452353; https://twitter.com/mame82/status/[PII_REDACTED]24452353
CVE: CVE-2019-13055
Published: 2019-06-29
Description: Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency transmissions, as demonstrated by an attack against a Logitech K360 keyboard.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.youtube.com/watch?v=5z_PEZ5PyeA; https://www.youtube.com/watch?v=5z_PEZ5PyeA
CVE: CVE-2019-13067
Published: 2019-06-30
Description: njs through 0.3.3, used in NGINX, has a buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c. This issue occurs after the fix for CVE-2019-12207 is in place.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/nginx/njs/issues/183; https://github.com/nginx/njs/issues/183
CVE: CVE-2019-13068
Published: 2019-06-30
Description: public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the Title or url field).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/171500/Grafana-6.2.4-HTML-Injection.html; https://github.com/grafana/grafana/issues/17718; https://github.com/grafana/grafana/releases/tag/v6.2.5
CVE: CVE-2019-13072
Published: 2019-06-30
Description: Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2642; https://www.exploit-db.com/exploits/47060; https://github.com/ZoneMinder/zoneminder/issues/2642
CVE: CVE-2019-13075
Published: 2019-06-30
Description: Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a behavior of Firefox before 68.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://hackerone.com/reports/588239; https://trac.torproject.org/projects/tor/ticket/30657; https://hackerone.com/reports/588239
CVE: CVE-2019-11821
Published: 2019-06-30
Description: SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.synology.com/security/advisory/Synology_SA_19_01; https://www.synology.com/security/advisory/Synology_SA_19_01
CVE: CVE-2019-11822
Published: 2019-06-30
Description: Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_19_01; https://www.synology.com/security/advisory/Synology_SA_19_01
CVE: CVE-2019-11825
Published: 2019-06-30
Description: Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_19_04; https://www.synology.com/security/advisory/Synology_SA_19_04
CVE: CVE-2019-11826
Published: 2019-06-30
Description: Relative path traversal vulnerability in SYNO.PhotoTeam.Upload.Item in Synology Moments before 1.3.0-0691 allows remote authenticated users to upload arbitrary files via the name parameter.
CVSS Score: 8.0 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_19_05; https://www.synology.com/security/advisory/Synology_SA_19_05
CVE: CVE-2019-11827
Published: 2019-06-30
Description: Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows remote attackers to inject arbitrary web script or HTML via the object_id parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_19_08; https://www.synology.com/security/advisory/Synology_SA_19_08
CVE: CVE-2019-11828
Published: 2019-06-30
Description: Cross-site scripting (XSS) vulnerability in Chart in Synology Office before 3.1.4-2771 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_19_11; https://www.synology.com/security/advisory/Synology_SA_19_11
CVE: CVE-2019-11829
Published: 2019-06-30
Description: OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute arbitrary commands via the crafted 'X-Real-IP' header.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.synology.com/security/advisory/Synology_SA_19_12; https://www.synology.com/security/advisory/Synology_SA_19_12
CVE: CVE-2019-13082
Published: 2019-06-30
Description: Chamilo LMS 1.11.8 and 2.x allows remote code execution through an lp_upload.php unauthenticated file upload feature. It extracts a ZIP archive before checking its content, and once it has been extracted, does not check files in a recursive way. This means that by putting a .php file in a folder and then this folder in a ZIP archive, the server will accept this file without any checks. Because one can access this file from the website, it is remote code execution. This is related to a scorm imsmanifest.xml file, the import_package function, and extraction in $courseSysDir.$newDir.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://0xecute.com/?p=32; https://support.chamilo.org/projects/1/wiki/Security_issues; https://0xecute.com/?p=32
CVE: CVE-2019-13083
Published: 2019-06-30
Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x[PII_REDACTED]384e2a.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x384e2a.md; https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x384e2a.md
CVE: CVE-2019-13084
Published: 2019-06-30
Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x[PII_REDACTED]26b739.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x26b739.md; https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x26b739.md
CVE: CVE-2019-13085
Published: 2019-06-30
Description: XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x[PII_REDACTED]30ecfa.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x30ecfa.md; https://github.com/apriorit/pentesting/blob/master/bugs/xnview/0x30ecfa.md
CVE: CVE-2019-13086
Published: 2019-06-30
Description: core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has member/login/check SQL injection by sending a crafted HTTP User-Agent header and omitting the csrf_csz parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cskaza/cszcms/issues/19; https://github.com/cskaza/cszcms/issues/19
CVE: CVE-2018-20848
Published: 2019-06-30
Description: Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://packetstormsecurity.com/files/147467/Peel-Shopping-Cart-9.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/147467/Peel-Shopping-Cart-9.0.0-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE: CVE-2018-20849
Published: 2019-06-30
Description: Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/147470/Arastta-1.6.2-Cross-Site-Scripting.html
CVE: CVE-2019-13107
Published: 2019-06-30
Description: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/tbeu/matio/compare/f8cd397...fabac6c; https://github.com/tbeu/matio/pull/118; https://github.com/tbeu/matio/releases/tag/v1.5.16
CVE: CVE-2019-13108
Published: 2019-06-30
Description: An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/Exiv2/exiv2/issues/789; https://github.com/Exiv2/exiv2/pull/794; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGBT5OD2TF4AIXJUC56WOUJRHAZLZ4DC/