deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9896
Published: 2019-03-21
Description: In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-9897
Published: 2019-03-21
Description: Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html; https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
CVE: CVE-2019-9898
Published: 2019-03-21
Description: Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html; http://www.securityfocus.com/bid/107523
CVE: CVE-2018-3963
Published: 2019-03-21
Description: An exploitable command injection vulnerability exists in the DHCP daemon configuration of the CUJO Smart Firewall. When adding a new static DHCP address, its corresponding hostname is inserted into the dhcpd.conf file without prior sanitization, allowing for arbitrary execution of system commands. To trigger this vulnerability, an attacker can send a DHCP request message and set up the corresponding static DHCP entry.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0627; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0627
CVE: CVE-2018-3969
Published: 2019-03-21
Description: An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerability, a local attacker needs to be able to write into /config/dhcpd.conf.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0634; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0634
CVE: CVE-2018-3985
Published: 2019-03-21
Description: An exploitable double free vulnerability exists in the mdnscap binary of the CUJO Smart Firewall. When parsing mDNS packets, a memory space is freed twice if an invalid query name is encountered, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0653
CVE: CVE-2018-4003
Published: 2019-03-21
Description: An exploitable heap overflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. The string lengths are handled incorrectly when parsing character strings in mDNS resource records, leading to arbitrary code execution in the context of the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0672
CVE: CVE-2018-4011
Published: 2019-03-21
Description: An exploitable integer underflow vulnerability exists in the mdnscap binary of the CUJO Smart Firewall, version 7003. When parsing SRV records in an mDNS packet, the "RDLENGTH" value is handled incorrectly, leading to an out-of-bounds access that crashes the mdnscap process. An unauthenticated attacker can send an mDNS message to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0681; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0681
CVE: CVE-2018-4030
Published: 2019-03-21
Description: An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe browsing function parses HTTP requests. The "Host" header is incorrectly extracted from captured HTTP requests, which would allow an attacker to visit any malicious websites and bypass the firewall. An attacker could send an HTTP request to exploit this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0702
CVE: CVE-2019-6491
Published: 2019-03-21
Description: RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.0x90.zone/web/sqli/2019/02/01/risi-gestaohorario.html; https://www.0x90.zone/web/sqli/2019/02/01/risi-gestaohorario.html
CVE: CVE-2017-16253
Published: 2019-03-21
Description: An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483
CVE: CVE-2017-16254
Published: 2019-03-21
Description: An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at 0x9d014e4c the value for the flg key is copied using strcpy to the buffer at $sp+0x270. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483
CVE: CVE-2017-16255
Published: 2019-03-21
Description: An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request at At 0x9d014e84 the value for the cmd1 key is copied using strcpy to the buffer at $sp+0x280. This buffer is 16 bytes large.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0483
CVE: CVE-2018-3968
Published: 2019-03-21
Description: An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy image format. To trigger this vulnerability, a local attacker needs to be able to supply the image to boot.
CVSS Score: 7.0 (HIGH)
CWE: CWE-347
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0633; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0633
CVE: CVE-2019-7238
Published: 2019-03-21
Description: Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]93-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]93-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7238
CVE: CVE-2019-0198
Published: 2019-03-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-8997
Published: 2019-03-21
Description: An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering maliciously crafted XML in an existing field.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-611
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000047227; http://support.blackberry.com/kb/articleDetail?articleNumber=000047227
CVE: CVE-2019-9903
Published: 2019-03-21
Description: PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/107560; https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/issues/741
CVE: CVE-2019-9904
Published: 2019-03-21
Description: An issue was discovered in lib\cdt\dttree.c in libcdt.a in graphviz 2.40.1. Stack consumption occurs because of recursive agclose calls in lib\cgraph\graph.c in libcgraph.a, related to agfstsubg in lib\cgraph\subg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://gitlab.com/graphviz/graphviz/issues/1512; https://research.loginsoft.com/bugs/stack-buffer-overflow-in-function-agclose-graphviz/; https://security.gentoo.org/glsa/202107-04
CVE: CVE-2015-6461
Published: 2019-03-21
Description: Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC web server, which, when launched, will result in the browser redirecting to a remote file via a Java script loaded with the web page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-98, CWE-20
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02
CVE: CVE-2015-6462
Published: 2019-03-21
Description: Reflected Cross-Site Scripting (nonpersistent) allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, or BMXP342030H PLC client browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02; https://ics-cert.us-cert.gov/advisories/ICSA-15-246-02
CVE: CVE-2018-13798
Published: 2019-03-21
Description: A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-579309.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-579309.pdf
CVE: CVE-2019-5490
Published: 2019-03-21
Description: Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://support.lenovo.com/us/en/solutions/LEN-26771; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://support.lenovo.com/us/en/solutions/LEN-26771
CVE: CVE-2015-6457
Published: 2019-03-21
Description: Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01
CVE: CVE-2015-6458
Published: 2019-03-21
Description: Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-239-01
CVE: CVE-2019-7537
Published: 2019-03-21
Description: An issue was discovered in Donfig 0.3.0. There is a vulnerability in the collect_yaml method in config_obj.py. It can execute arbitrary Python commands, resulting in command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/pytroll/donfig/commits/master; https://github.com/pytroll/donfig/issues/5; https://github.com/pytroll/donfig/commits/master
CVE: CVE-2018-20031
Published: 2019-03-21
Description: A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/109155; https://secuniaresearch.flexerasoftware.com/advisories/85979/; https://www.oracle.com/security-alerts/cpuoct2021.html
CVE: CVE-2018-20032
Published: 2019-03-21
Description: A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/109155; https://secuniaresearch.flexerasoftware.com/advisories/85979/; https://www.oracle.com/security-alerts/cpuoct2021.html
CVE: CVE-2018-20034
Published: 2019-03-21
Description: A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/109155; https://secuniaresearch.flexerasoftware.com/advisories/85979/; https://www.oracle.com/security-alerts/cpuoct2021.html
CVE: CVE-2019-3855
Published: 2019-03-21
Description: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787, CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
CVE: CVE-2019-3858
Published: 2019-03-21
Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
CVE: CVE-2019-3871
Published: 2019-03-21
Description: A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint, or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00022.html; http://www.openwall.com/lists/oss-security/2019/03/18/4; http://www.securityfocus.com/bid/107491
CVE: CVE-2019-7539
Published: 2019-03-21
Description: A code injection issue was discovered in ipycache through 2016-05-31.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/rossant/ipycache/issues/47; https://github.com/rossant/ipycache/issues/47
CVE: CVE-2019-8351
Published: 2019-03-21
Description: Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://support.heimdalsecurity.com/hc/en-us/articles/[PII_REDACTED]58-Release-2-5-172-PROD-Update; https://support.heimdalsecurity.com/hc/en-us/articles/[PII_REDACTED]58-Release-2-5-172-PROD-Update
CVE: CVE-2018-18913
Published: 2019-03-21
Description: Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location within the system. The issue lies in the loading of the shcore.dll and dcomp.dll files: these files are being searched for by the program in the same system-wide directory where the HTML file is executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://blogs.opera.com/desktop/changelog-for-57/; https://lucideustech.blogspot.com/2019/02/opera-search-order-hijacking-cve-2018-18913.html; https://blogs.opera.com/desktop/changelog-for-57/
CVE: CVE-2019-9908
Published: 2019-03-22
Description: The font-organizer plugin 2.1.1 for WordPress has wp-admin/options-general.php manage_font_id XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/37; https://lists.openwall.net/full-disclosure/2019/02/05/8; https://security-consulting.icu/blog/2019/02/wordpress-font-organizer-xss/
CVE: CVE-2019-9909
Published: 2019-03-22
Description: The "Donation Plugin and Fundraising Platform" plugin before 2.3.1 for WordPress has wp-admin/edit.php csv XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/38; https://lists.openwall.net/full-disclosure/2019/02/05/9; https://security-consulting.icu/blog/2019/02/wordpress-give-xss/
CVE: CVE-2019-9910
Published: 2019-03-22
Description: The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/39; https://lists.openwall.net/full-disclosure/2019/02/05/11; https://security-consulting.icu/blog/2019/02/wordpress-kingcomposer-xss/
CVE: CVE-2019-9911
Published: 2019-03-22
Description: The social-networks-auto-poster-facebook-twitter-g plugin before 4.2.8 for WordPress has wp-admin/admin.php?page=nxssnap-reposter&action=edit item XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/40; https://lists.openwall.net/full-disclosure/2019/02/05/12; https://security-consulting.icu/blog/2019/02/wordpress-social-networks-auto-poster-xss/
CVE: CVE-2019-9912
Published: 2019-03-22
Description: The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/41; https://lists.openwall.net/full-disclosure/2019/02/05/13; https://security-consulting.icu/blog/2019/02/wordpress-wpgooglemaps-xss/
CVE: CVE-2019-9913
Published: 2019-03-22
Description: The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/42; https://lists.openwall.net/full-disclosure/2019/02/05/14; https://security-consulting.icu/blog/2019/02/wordpress-wp-livechat-xss/
CVE: CVE-2019-9914
Published: 2019-03-22
Description: The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes poll_id XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Mar/43; https://lists.openwall.net/full-disclosure/2019/02/05/15; https://security-consulting.icu/blog/2019/02/wordpress-yop-poll-xss/
CVE: CVE-2019-9915
Published: 2019-03-22
Description: GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1300; https://www.netsparker.com/web-applications-advisories/ns-18-056-open-redirection-vulnerability-in-getsimplecms/; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1300
CVE: CVE-2019-9923
Published: 2019-03-22
Description: pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://git.savannah.gnu.org/cgit/tar.git/commit/?id=cb07844454d8cc9fb21f53ace75975f91185a120; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html; http://savannah.gnu.org/bugs/?55369
CVE: CVE-2019-9924
Published: 2019-03-22
Description: rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://git.savannah.gnu.org/cgit/bash.git/tree/CHANGES?h=bash-4.4-testing#n65; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00049.html; https://bugs.launchpad.net/ubuntu/+source/bash/+bug/1803441