deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-6554
Published: 2019-04-05
Description: Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-092-01
CVE: CVE-2019-9489
Published: 2019-04-05
Description: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product's management console.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://success.trendmicro.com/jp/solution/1122253; https://success.trendmicro.com/solution/1122250; https://success.trendmicro.com/jp/solution/1122253
CVE: CVE-2019-9490
Published: 2019-04-05
Description: A vulnerability in Trend Micro InterScan Web Security Virtual Appliance version 6.5 SP2 could allow an non-authorized user to disclose administrative credentials. An attacker must be an authenticated user in order to exploit the vulnerability.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/107848; https://success.trendmicro.com/solution/1122326; http://www.securityfocus.com/bid/107848
CVE: CVE-2019-10904
Published: 2019-04-06
Description: Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/04/07/1; https://bugs.python.org/issue36391; https://github.com/python/bugs.python.org/issues/34
CVE: CVE-2019-10905
Published: 2019-04-06
Description: Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a script (already running on the affected page) executes the contents of any element with a specific class. This occurs because spaces are permitted in code block infostrings, which interferes with the intended behavior of a single class name beginning with the language- substring.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/erusev/parsedown/issues/699; https://github.com/erusev/parsedown/releases/tag/1.7.2; https://github.com/erusev/parsedown/issues/699
CVE: CVE-2019-10906
Published: 2019-04-07
Description: In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
CVSS Score: 8.6 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html; https://access.redhat.com/errata/RHSA-2019:1152
CVE: CVE-2019-10907
Published: 2019-04-07
Description: Airsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of airsonic in GlobalSecurityConfig.java. An attacker able to capture cookies might be able to trivially bruteforce offline the passwords of associated users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://github.com/airsonic/airsonic/commit/3e07ea52885f88d3fbec444dfd592f27bfb65647; https://github.com/airsonic/airsonic/commit/3e07ea52885f88d3fbec444dfd592f27bfb65647
CVE: CVE-2019-10908
Published: 2019-04-07
Description: In Airsonic 10.2.1, RecoverController.java generates passwords via org.apache.commons.lang.RandomStringUtils, which uses java.util.Random internally. This PRNG has a 48-bit seed that can easily be bruteforced, leading to trivial privilege escalation attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-335
References: https://github.com/airsonic/airsonic/commit/61c842923a6d60d4aedd126445a8437b53b752c8; https://github.com/airsonic/airsonic/commit/61c842923a6d60d4aedd126445a8437b53b752c8
CVE: CVE-2019-10732
Published: 2019-04-07
Description: In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://bugs.kde.org/show_bug.cgi?id=404698; https://lists.debian.org/debian-lts-announce/2019/06/msg00012.html; https://bugs.kde.org/show_bug.cgi?id=404698
CVE: CVE-2019-10734
Published: 2019-04-07
Description: In KDE Trojita 0.7, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://bugs.kde.org/show_bug.cgi?id=404697; https://bugs.kde.org/show_bug.cgi?id=404697
CVE: CVE-2019-10735
Published: 2019-04-07
Description: In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4159; https://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=4159
CVE: CVE-2019-10740
Published: 2019-04-07
Description: In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html; https://github.com/roundcube/roundcubemail/issues/6638; https://github.com/roundcube/roundcubemail/releases/tag/1.3.10
CVE: CVE-2019-10741
Published: 2019-04-07
Description: K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within (digitally signed) reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an attacker to obtain valid S/MIME or PGP signatures for arbitrary content to be displayed to a third party. NOTE: the vendor states "We don't plan to take any action because of this."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: https://github.com/k9mail/k-9/issues/3925; https://github.com/k9mail/k-9/issues/3925
CVE: CVE-2016-10745
Published: 2019-04-08
Description: In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
CVSS Score: 8.6 (HIGH)
CWE: CWE-134
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html; https://access.redhat.com/errata/RHSA-2019:1022
CVE: CVE-2019-10914
Published: 2019-04-08
Description: pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295, CWE-787
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1785; https://github.com/matrixssl/matrixssl/issues/26; https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open
CVE: CVE-2017-7912
Published: 2019-04-08
Description: Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03; https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03
CVE: CVE-2018-1787
Published: 2019-04-08
Description: IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-732
References: http://www.ibm.com/support/docview.wss?uid=ibm10869602; https://exchange.xforce.ibmcloud.com/vulnerabilities/148872; http://www.ibm.com/support/docview.wss?uid=ibm10869602
CVE: CVE-2018-1853
Published: 2019-04-08
Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 151014.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: http://www.ibm.com/support/docview.wss?uid=ibm10870718; https://exchange.xforce.ibmcloud.com/vulnerabilities/151014; http://www.ibm.com/support/docview.wss?uid=ibm10870718
CVE: CVE-2018-1882
Published: 2019-04-08
Description: In a certain atypical IBM Spectrum Protect 7.1 and 8.1 configurations, the node password could be displayed in plain text in the IBM Spectrum Protect client trace file. IBM X-Force ID: 151968.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-312
References: http://www.ibm.com/support/docview.wss?uid=ibm10869208; http://www.ibm.com/support/docview.wss?uid=ibm10869436; http://www.securityfocus.com/bid/107861
CVE: CVE-2018-1885
Published: 2019-04-08
Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107863; https://exchange.xforce.ibmcloud.com/vulnerabilities/152020; https://www.ibm.com/support/docview.wss?uid=ibm10878106
CVE: CVE-2018-19006
Published: 2019-04-08
Description: OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 2017 R2, The application contains a cross-site scripting vulnerability where displays that reference AF elements and attributes containing JavaScript are affected. This vulnerability requires the ability of authorized AF users to store JavaScript in AF elements and attributes.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-043-01; https://ics-cert.us-cert.gov/advisories/ICSA-19-043-01
CVE: CVE-2018-1943
Published: 2019-04-08
Description: IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 153385.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: http://www.securityfocus.com/bid/107828; https://exchange.xforce.ibmcloud.com/vulnerabilities/153385; https://www.ibm.com/support/docview.wss?uid=ibm10871656
CVE: CVE-2018-1997
Published: 2019-04-08
Description: IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/154774; https://www.ibm.com/support/docview.wss?uid=ibm10794831; https://exchange.xforce.ibmcloud.com/vulnerabilities/154774
CVE: CVE-2018-1999
Published: 2019-04-08
Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/154889; https://www.ibm.com/support/docview.wss?uid=ibm10870502; https://exchange.xforce.ibmcloud.com/vulnerabilities/154889
CVE: CVE-2018-2000
Published: 2019-04-08
Description: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154890.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/107851; https://exchange.xforce.ibmcloud.com/vulnerabilities/154890; https://www.ibm.com/support/docview.wss?uid=ibm10870496
CVE: CVE-2018-20341
Published: 2019-04-08
Description: WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system. If the executable is enclosed in quote tags "" then the system will know where to find it. However if the path of where the application binary is located doesn't contain any quotes then Windows will try to find it and execute it inside every folder of this path until they reach the executable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: http://downloads.winmagic.info/manuals/Release_Notes_8.3.pdf; http://downloads.winmagic.info/manuals/Release_Notes_8.3.pdf
CVE: CVE-2019-4045
Published: 2019-04-08
Description: IBM Business Automation Workflow and IBM Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 provide embedded document management features. Because of a missing restriction in an API, a client might spoof the last modified by value of a document. IBM X-Force ID: 156241.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/156241; https://www.ibm.com/support/docview.wss?uid=ibm10870494; https://exchange.xforce.ibmcloud.com/vulnerabilities/156241
CVE: CVE-2019-4051
Published: 2019-04-08
Description: Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107841; https://exchange.xforce.ibmcloud.com/vulnerabilities/156542; https://www.ibm.com/support/docview.wss?uid=ibm10879395
CVE: CVE-2019-4143
Published: 2019-04-08
Description: The IBM Cloud Private Key Management Service (IBM Cloud Private 3.1.1 and 3.1.2) could allow a local user to obtain sensitive from the KMS plugin container log. IBM X-Force ID: 158348.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://www.securityfocus.com/bid/107849; https://exchange.xforce.ibmcloud.com/vulnerabilities/158348; https://www.ibm.com/support/docview.wss?uid=ibm10878180
CVE: CVE-2019-4155
Published: 2019-04-08
Description: IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry. IBM X-Force ID: 158544.
CVSS Score: 8.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=ibm10879575; http://www.securityfocus.com/bid/107806; https://exchange.xforce.ibmcloud.com/vulnerabilities/158544
CVE: CVE-2019-4210
Published: 2019-04-08
Description: IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/107859; https://exchange.xforce.ibmcloud.com/vulnerabilities/158986; https://www.ibm.com/support/docview.wss?uid=ibm10879913
CVE: CVE-2014-5435
Published: 2019-04-08
Description: An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-123, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE: CVE-2014-5436
Published: 2019-04-08
Description: A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE: CVE-2014-9186
Published: 2019-04-08
Description: A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, which could lead to accepting an arbitrary file into the function, and potential information disclosure or remote code execution. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-98, CWE-20
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE: CVE-2019-10676
Published: 2019-04-08
Description: An issue was discovered in Uniqkey Password Manager 1.14. Upon entering new credentials to a site that is not registered within this product, a pop-up window will appear prompting the user if they want to save this new password. This pop-up window will persist on any page the user enters within the browser until a decision is made. The code of the pop-up window can be read by remote servers and contains the login credentials and URL in cleartext. A malicious server could easily grab this information from the pop-up. This is related to id="uniqkey-password-popup" and password-popup/popup.html.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/152410/Uniqkey-Password-Manager-1.14-Credential-Disclosure.html; https://seclists.org/fulldisclosure/2019/Apr/1
CVE: CVE-2019-11001
Published: 2019-04-08
Description: On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an authenticated admin can use the "TestEmail" functionality to inject and run OS commands as root, as demonstrated by shell metacharacters in the addr1 field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/mcw0/PoC/blob/master/Reolink-IPC-RCE.py; https://www.vdoo.com/blog/working-with-the-community-%E2%80%93-significant-vulnerabilities-in-reolink-cameras/; https://github.com/mcw0/PoC/blob/master/Reolink-IPC-RCE.py
CVE: CVE-2019-10845
Published: 2019-04-08
Description: An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product, a pop-up window will appear asking the user if they want to save these new credentials. The code of the pop-up window can be read and, to some extent, manipulated by remote servers. This pop-up window will stay on any page the user visits within the browser until a decision is made. A malicious web server can forcefully manipulate the pop-up and cause it not to appear, stopping users from securing their credentials. This vulnerability is related to id="uniqkey-password-popup" and password-popup/popup.html, but is a different vulnerability than CVE-2019-10676.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/152452/Uniqkey-Password-Manager-1.14-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2019/Apr/8; https://vuldb.com/?id.132960
CVE: CVE-2019-11002
Published: 2019-04-08
Description: In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dogfalo/materialize/issues/6286; https://github.com/Dogfalo/materialize/issues/6286
CVE: CVE-2019-11003
Published: 2019-04-08
Description: In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dogfalo/materialize/issues/6286; https://github.com/Dogfalo/materialize/issues/6286
CVE: CVE-2019-11004
Published: 2019-04-08
Description: In Materialize through 1.0.0, XSS is possible via the Toast feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dogfalo/materialize/issues/6286; https://github.com/Dogfalo/materialize/issues/6286
CVE: CVE-2019-11005
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a quoted font family value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/b6fb77d7d54d; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html
CVE: CVE-2019-11006
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/f7610c1281c1; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html
CVE: CVE-2019-11007
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c, which allows attackers to cause a denial of service or information disclosure via an image colormap.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/40fc71472b98; http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/86a9295e7c83; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html
CVE: CVE-2019-11008
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/d823d23a474b; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html