deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-1577
Published: 2020-08-17
Description: An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.
The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1577; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1577
CVE: CVE-2020-1578
Published: 2020-08-17
Description: An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited the vulnerability could retrieve the memory address of a kernel object.
To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.
The security update addresses the vulnerability by correcting how the Windows kernel handles memory addresses.
CVSS Score: 4.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1578; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1578
CVE: CVE-2020-1579
Published: 2020-08-17
Description: An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows Function Discovery SSDP Provider handles memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1579; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1579
CVE: CVE-2020-1580
Published: 2020-08-17
Description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1580; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1580
CVE: CVE-2020-1581
Published: 2020-08-17
Description: An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system.
An attacker could exploit this vulnerability by running a specially crafted application on the victim system.
The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581
CVE: CVE-2020-1582
Published: 2020-08-17
Description: A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Access. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.
The security update addresses the vulnerability by correcting how Microsoft Access handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1582; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1582
CVE: CVE-2020-1583
Published: 2020-08-17
Description: An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.
To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.
The update addresses the vulnerability by changing the way certain Word functions handle objects in memory.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1583; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1583
CVE: CVE-2020-1584
Published: 2020-08-17
Description: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the dnsrslvr.dll properly handles objects in memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1584; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1584
CVE: CVE-2020-1585
Published: 2020-08-17
Description: A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Exploitation of the vulnerability requires that a program process a specially crafted image file.
The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1585; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1585
CVE: CVE-2020-1587
Published: 2020-08-17
Description: An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows Ancillary Function Driver for WinSock handles memory.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1587; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1587
CVE: CVE-2020-1591
Published: 2020-08-17
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics server.
The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current authenticated user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions within Dynamics Server on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
The security update addresses the vulnerability by helping to ensure that Dynamics Server properly sanitizes web requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1591; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1591
CVE: CVE-2020-1597
Published: 2020-08-17
Description: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication.
A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application.
The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
CVSS Score: 7.5 (HIGH)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WH5FQ5VT3JGHXFXOETHCTBWJUIAPGHHT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZW4CBI26KSO3PRL3HLVVISXPPOYUHSXO/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1597
CVE: CVE-2020-12480
Published: 2020-08-17
Description: In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.playframework.com/security/vulnerability; https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass; https://www.playframework.com/security/vulnerability
CVE: CVE-2020-13183
Published: 2020-08-17
Description: Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://advisory.teradici.com/security-advisories/63/; https://advisory.teradici.com/security-advisories/63/
CVE: CVE-2020-13933
Published: 2020-08-17
Description: Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
CVSS Score: 7.5 (HIGH)
References: https://lists.apache.org/thread.html/r18b45d560d76c4260813c802771cc9678aa651fb8340e09366bfa198%40%3Cdev.geode.apache.org%3E; https://lists.apache.org/thread.html/r4506cedc401d6b8de83787f8436aac83956e411d66848c84785db46d%40%3Cdev.shiro.apache.org%3E; https://lists.apache.org/thread.html/r4c1e1249e9e1acb868db0c80728c13f448d07333da06a0f1603c0a33%40%3Cdev.shiro.apache.org%3E
CVE: CVE-2020-15152
Published: 2020-08-17
Description: ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3.4 are vulnerable to Server-Side Request Forgery. The PORT command allows arbitrary IPs which can be used to cause the server to make a connection elsewhere. A possible workaround is blocking the PORT through the configuration. This issue is fixed in version2 2.19.6, 3.1.2, and 4.3.4. More information can be found on the linked advisory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/autovance/ftp-srv/commit/e449e75219d918c400dec65b4b0759f60476abca; https://github.com/autovance/ftp-srv/security/advisories/GHSA-jw37-5gqr-cf9j; https://www.npmjs.com/package/ftp-srv
CVE: CVE-2020-7706
Published: 2020-08-18
Description: The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/mattinsler/connie-lang/commit/ef376d404c712dd28309ba07f28a8f87f24a015a; https://snyk.io/vuln/SNYK-JS-CONNIELANG-598853; https://github.com/mattinsler/connie-lang/commit/ef376d404c712dd28309ba07f28a8f87f24a015a
CVE: CVE-2020-14333
Published: 2020-08-18
Description: A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14333; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14333
CVE: CVE-2020-7707
Published: 2020-08-18
Description: The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/jquense/expr/commit/df846910915d59f711ce63c1f817815bceab5ff7; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-598857; https://snyk.io/vuln/SNYK-JS-PROPERTYEXPR-598800
CVE: CVE-2020-7708
Published: 2020-08-18
Description: The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3; https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672; https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673
CVE: CVE-2020-14937
Published: 2020-08-18
Description: Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access in BER decoding and encoding functions.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://drive.google.com/file/d/1mAkJBVZNv5PMVwLojru0njH38zEXpWui/view?usp=sharing; https://github.com/contiki-ng/contiki-ng/issues/1354; https://drive.google.com/file/d/1mAkJBVZNv5PMVwLojru0njH38zEXpWui/view?usp=sharing
CVE: CVE-2019-6258
Published: 2020-08-18
Description: D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/pr0v3rbs/CVE/tree/master/CVE-2019-6258; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10175; https://github.com/pr0v3rbs/CVE/tree/master/CVE-2019-6258
CVE: CVE-2020-14934
Published: 2020-08-18
Description: Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. If the number of variables in the request exceeds the allocated buffer, a memory write out of the buffer boundaries occurs. This write operation provides a possibility to overwrite other variables allocated in the .bss section by the application. Because the sender of the frame is in control of the content that will be written beyond the buffer limits, and there is no strict process memory separation, this issue may allow overwriting of sensitive memory areas of an IoT device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/file/d/1NIf0Y0S47Lu85uSi29kt9tgSh0jYZYfj/view?usp=sharing; https://github.com/contiki-ng/contiki-ng/issues/1352; https://drive.google.com/file/d/1NIf0Y0S47Lu85uSi29kt9tgSh0jYZYfj/view?usp=sharing
CVE: CVE-2020-14935
Published: 2020-08-18
Description: Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get request response is assembled, a stack buffer dedicated for OIDs (with a limited capacity) is allocated in snmp_engine_get_bulk(). When snmp_engine_get_bulk() is populating the stack buffer, an overflow condition may occur due to lack of input length validation. This makes it possible to overwrite stack regions beyond the allocated buffer, including the return address from the function. As a result, the code execution path may be redirected to an address provided in the SNMP bulk get payload. If the target architecture uses common addressing space for program and data memory, it may also be possible to supply code in the SNMP request payload, and redirect the execution path to the remotely injected code, by modifying the function's return address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/file/d/1qp3ZXaFRiR_imWg0lUbI7-D-hIT268EB/view?usp=sharing; https://github.com/contiki-ng/contiki-ng/issues/1353; https://drive.google.com/file/d/1qp3ZXaFRiR_imWg0lUbI7-D-hIT268EB/view?usp=sharing
CVE: CVE-2020-14936
Published: 2020-08-18
Description: Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocated target-buffer capacity verification when writing parsed OID values. The function snmp_oid_decode_oid() may overwrite memory areas beyond the provided target buffer, when called from snmp_message_decode() upon an SNMP request reception. Because the content of the write operations is externally provided in the SNMP requests, it enables a remote overwrite of an IoT device's memory regions beyond the allocated buffer. This overflow may allow remote overwrite of stack and statically allocated variables memory regions by sending a crafted SNMP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/file/d/1FypWH_g475jSL0mDFzquaATCeRIHQ2kj/view?usp=sharing; https://github.com/contiki-ng/contiki-ng/issues/1351; https://drive.google.com/file/d/1FypWH_g475jSL0mDFzquaATCeRIHQ2kj/view?usp=sharing
CVE: CVE-2020-23938
Published: 2020-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. This candidate was erroneously published without a public reference containing the required information
CVE: CVE-2020-24212
Published: 2020-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. This candidate was erroneously published without a public reference containing the required information
CVE: CVE-2020-7018
Published: 2020-08-18
Description: Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the ï¿½developerï¿½ role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266, CWE-269
References: https://discuss.elastic.co/t/enterprise-search-7-9-0-security-update/245457; https://discuss.elastic.co/t/enterprise-search-7-9-0-security-update/245457
CVE: CVE-2020-7019
Published: 2020-08-18
Description: In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-270, CWE-269
References: https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456
CVE: CVE-2020-23933
Published: 2020-08-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-9415
Published: 2020-08-18
Description: The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user must be authenticated and have privileges required to monitor the server in an operational capacity. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 7.0.8 and below, versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 and TIBCO Data Virtualization for AWS Marketplace: versions 8.2.0 and below.
CVSS Score: 5.3 (MEDIUM)
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2020/08/tibco-security-advisory-august-18-2020-tibco-data-virtualization; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-15865
Published: 2020-08-18
Description: A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://burninatorsec.blogspot.com/2018/11/reporting-c-serialization-remote-code.html; http://burninatorsec.blogspot.com/2018/11/reporting-c-serialization-remote-code.html
CVE: CVE-2020-15926
Published: 2020-08-18
Description: Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the client which results in remote code execution on the client side.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.redteam.pl/2020/08/rocket-chat-xss-rce-cve-2020-15926.html; https://github.com/RocketChat/Rocket.Chat/commits/develop; https://github.com/RocketChat/Rocket.Chat/pull/18356
CVE: CVE-2020-23934
Published: 2020-08-18
Description: An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23934; https://www.exploit-db.com/exploits/48636; https://github.com/enesozeser/Vulnerabilities/blob/master/CVE-2020-23934
CVE: CVE-2020-24032
Published: 2020-08-18
Description: tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://pastebin.com/G8981Fj8; https://pastebin.com/dHhawgx8; https://www.stor2rrd.com/download.php