deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15814
Published: 2019-09-04
Description: Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/47324; https://www.exploit-db.com/exploits/47324
CVE: CVE-2019-13518
Published: 2019-09-04
Description: An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-119
References: https://www.us-cert.gov/ics/advisories/icsa-19-246-01; https://www.us-cert.gov/ics/advisories/icsa-19-246-01
CVE: CVE-2019-13522
Published: 2019-09-04
Description: An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-246-02; https://www.us-cert.gov/ics/advisories/icsa-19-246-02
CVE: CVE-2019-15916
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.1. There is a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://access.redhat.com/errata/RHSA-2019:3309; https://access.redhat.com/errata/RHSA-2019:3517
CVE: CVE-2019-13975
Published: 2019-09-04
Description: eGain Chat 15.0.3 allows HTML Injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40dr.spitfire/html-injection-cve-2019-13975-a33aa8ad4d11; https://medium.com/%40dr.spitfire/html-injection-cve-2019-13975-a33aa8ad4d11
CVE: CVE-2019-13976
Published: 2019-09-04
Description: eGain Chat 15.0.3 allows unrestricted file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://medium.com/%40dr.spitfire/bypass-file-upload-restrictions-cve-2019-13976-35682bd1fdd3; https://medium.com/%40dr.spitfire/bypass-file-upload-restrictions-cve-2019-13976-35682bd1fdd3
CVE: CVE-2019-6645
Published: 2019-09-04
Description: On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured may lead to a TMM crash causing the configured HA action to be taken.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K15759349; https://support.f5.com/csp/article/K15759349?utm_source=f5support&amp%3Butm_medium=RSS; https://support.f5.com/csp/article/K15759349
CVE: CVE-2019-6648
Published: 2019-09-04
Description: On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k8s-bigip-ctlr) log files may contain BIG-IP secrets such as SSL Private Keys and Private key Passphrases as provided as inputs by an AS3 Declaration.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://support.f5.com/csp/article/K74327432; https://support.f5.com/csp/article/K74327432?utm_source=f5support&amp%3Butm_medium=RSS; https://support.f5.com/csp/article/K74327432
CVE: CVE-2019-6644
Published: 2019-09-04
Description: Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.
CVSS Score: 9.4 (CRITICAL)
References: https://support.f5.com/csp/article/K75532331; https://support.f5.com/csp/article/K75532331
CVE: CVE-2019-6647
Published: 2019-09-04
Description: On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://support.f5.com/csp/article/K87920510; https://support.f5.com/csp/article/K87920510
CVE: CVE-2019-6643
Published: 2019-09-04
Description: On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM process to produce a core file.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K36228121; https://support.f5.com/csp/article/K36228121?utm_source=f5support&amp%3Butm_medium=RSS; https://support.f5.com/csp/article/K36228121
CVE: CVE-2019-6646
Published: 2019-09-04
Description: On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges.
CVSS Score: 8.8 (HIGH)
References: https://support.f5.com/csp/article/K53990093; https://support.f5.com/csp/article/K53990093
CVE: CVE-2019-15917
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
CVE: CVE-2019-15918
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10; https://github.com/torvalds/linux/commit/b57a55e2200ede754e4dc9cce4ba9402544b9365; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-15919
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_write in fs/cifs/smb2pdu.c has a use-after-free.
CVSS Score: 3.3 (LOW)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
CVE: CVE-2019-15920
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.10. SMB2_read in fs/cifs/smb2pdu.c has a use-after-free. NOTE: this was not fixed correctly in 5.0.10; see the 5.0.11 ChangeLog, which documents a memory leak.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.10
CVE: CVE-2019-15921
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.6. There is a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
CVE: CVE-2019-15922
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a pf data structure if alloc_disk fails in drivers/block/paride/pf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.9; https://github.com/torvalds/linux/commit/58ccd2d31e502c37e108b285bf3d343eb00c235b; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-15923
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.9. There is a NULL pointer dereference for a cd data structure if alloc_disk fails in drivers/block/paride/pf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.9; https://github.com/torvalds/linux/commit/f0d[PII_REDACTED]ce0ae347b9f0d088f2c157c8c72; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-15924
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
CVE: CVE-2019-12586
Published: 2019-09-04
Description: The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 processes EAP Success messages before any EAP method completion or failure, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/Matheus-Garbelini/esp32_esp8266_attacks; https://github.com/espressif; https://matheus-garbelini.github.io/home/post/esp32-esp8266-eap-crash/
CVE: CVE-2019-14319
Published: 2019-09-04
Description: The TikTok (formerly Musical.ly) application 12.2.0 for Android and iOS performs unencrypted transmission of images, videos, and likes. This allows an attacker to extract private sensitive information by sniffing network traffic.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: http://p16.muscdn.com/img/musically-maliva-obj/[PII_REDACTED]~c5_100x100.jpeg; http://p16.muscdn.com/img/tos-maliva-p-0068/d9e7889f4f2d43028b41947cb0950c32~noop.image; https://github.com/MelroyB/CVE-2019-14319/blob/master/CVE%[PII_REDACTED]9%20.pdf
CVE: CVE-2019-14470
Published: 2019-09-04
Description: cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154206/WordPress-UserPro-4.9.32-Cross-Site-Scripting.html; https://github.com/cosenary/Instagram-PHP-API/commits/master; https://wpvulndb.com/vulnerabilities/9815
CVE: CVE-2017-18595
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11
CVE: CVE-2018-21008
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE: CVE-2019-15925
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_mode_vnet_base_cfg in the file drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_tm.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04f25edb48c441fc278ecc154c270f16966cbb90; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-15926
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3
CVE: CVE-2019-15927
Published: 2019-09-04
Description: An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.2
CVE: CVE-2019-12632
Published: 2019-09-05
Description: A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-918
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-finesse-ssrf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-finesse-ssrf
CVE: CVE-2019-12633
Published: 2019-09-05
Description: A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the affected system. An attacker could exploit this vulnerability by sending the user of the web application a crafted request. If the request is processed, the attacker could access the system and perform unauthorized actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-918
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-unified-ccx-ssrf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-unified-ccx-ssrf
CVE: CVE-2019-12635
Published: 2019-09-05
Description: A vulnerability in the authorization module of Cisco Content Security Management Appliance (SMA) Software could allow an authenticated, remote attacker to gain out-of-scope access to email. The vulnerability exists because the affected software does not correctly implement role permission controls. An attacker could exploit this vulnerability by using a custom role with specific permissions. A successful exploit could allow the attacker to access the spam quarantine of other users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-732
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-sma-info-dis; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-sma-info-dis
CVE: CVE-2019-12644
Published: 2019-09-05
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface of the affected device does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-ise-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-ise-xss
CVE: CVE-2019-12645
Published: 2019-09-05
Description: A vulnerability in Cisco Jabber Client Framework (JCF) for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected device when it is running Cisco JCF for Mac Software. An attacker could exploit this vulnerability by authenticating to the affected device and executing arbitrary code or potentially modifying certain configuration files. A successful exploit could allow the attacker to execute arbitrary code or modify certain configuration files on the device using the privileges of the installed Cisco JCF for Mac Software.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-732
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-jcf-codex; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-jcf-codex
CVE: CVE-2019-1939
Published: 2019-09-05
Description: A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. This vulnerability is due to improper restrictions on software logging features used by the application on Windows operating systems. An attacker could exploit this vulnerability by convincing a targeted user to visit a website designed to submit malicious input to the affected application. A successful exploit could allow the attacker to cause the application to modify files and execute arbitrary commands on the system with the privileges of the targeted user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-webex-teams; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-webex-teams
CVE: CVE-2019-1976
Published: 2019-09-05
Description: A vulnerability in the &ldquo;plug-and-play&rdquo; services component of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper access restrictions on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to access running configuration information about devices managed by the IND, including administrative credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-ind; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-ind
CVE: CVE-2018-21009
Published: 2019-09-05
Description: Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://gitlab.freedesktop.org/poppler/poppler/commit/0868c499a9f5f37f8df5c9fef03c37496b40fc8a; https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html; https://lists.debian.org/debian-lts-announce/2020/07/msg00018.html
CVE: CVE-2018-21010
Published: 2019-09-05
Description: OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/uclouvain/openjpeg/commit/2e5ab1d9987831c981ff05862e8ccf1381ed58ea; https://lists.debian.org/debian-lts-announce/2019/10/msg00009.html; https://security.gentoo.org/glsa/202101-29
CVE: CVE-2019-10677
Published: 2019-09-05
Description: Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdisplay.cmd (name), /wlsecrefresh.wl (wlWscCfgMethod, wl_wsc_reg).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154357/DASAN-Zhone-ZNID-GPON-2426A-EU-Cross-Site-Scripting.html; https://adamziaja.com/poc/201903-xss-zhone.html; https://blog.redteam.pl/2019/09/cve-2019-10677-dasan-zhone-znid.html
CVE: CVE-2019-12223
Published: 2019-09-05
Description: An issue was discovered in NVR WebViewer on Hanwah Techwin SRN-472s 1.07_190502 devices, and other SRN-x devices before 2019-05-03. A system crash and reboot can be achieved by submitting a long username in excess of 117 characters. The username triggers a buffer overflow in the main process controlling operation of the DVR system, rendering services unavailable during the reboot operation. A repeated attack affects availability as long as the attacker has network access to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://gist.github.com/dustinnoe/66f91573a0080c9fb2c21819d8805a82; https://medium.com/%40noe.dustin/samsung-webviewer-remote-dos-vulberability-cve-2019-12223-5f4afbc83fbd; https://www.hanwha-security.com/en/products/video-recorder/nvr/ch4/SRN-472S/overview/
CVE: CVE-2019-15937
Published: 2019-09-05
Description: Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=84986ca[PII_REDACTED]74432b5483f4bf9136c538d; https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=84986ca[PII_REDACTED]74432b5483f4bf9136c538d
CVE: CVE-2019-15938
Published: 2019-09-05
Description: Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://git.pengutronix.de/cgit/barebox/commit/fs/nfs.c?h=next&id=574ce994016107ad8ab0f845a785f28d7eaa5208; https://git.pengutronix.de/cgit/barebox/commit/fs/nfs.c?h=next&id=574ce994016107ad8ab0f845a785f28d7eaa5208
CVE: CVE-2019-4149
Published: 2019-09-05
Description: IBM Business Automation Workflow V18.0.0.0 through V18.0.0.2 and IBM Business Process Manager V8.6.0.0 through V8.6.0.0 Cumulative Fix 2018.03, V8.5.7.0 through V8.5.7.0 Cumulative Fix 2017.06, and V8.5.6.0 through V8.5.6.0 CF2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158415.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158415; https://www.ibm.com/support/docview.wss?uid=ibm10885104; https://exchange.xforce.ibmcloud.com/vulnerabilities/158415
CVE: CVE-2019-4186
Published: 2019-09-05
Description: IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-force ID: 158976.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158976; https://supportcontent.ibm.com/support/pages/node/1071966; https://exchange.xforce.ibmcloud.com/vulnerabilities/158976