deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-9442
Published: 2019-09-26
Description: The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/132992/; https://wordpress.org/plugins/avenirsoft-directdownload/#developers; http://packetstormsecurity.com/files/132992/
CVE: CVE-2015-9443
Published: 2019-09-26
Description: The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=Accu_Data_WP.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/132911/; https://wordpress.org/plugins/accurate-form-data-real-time-form-validation/#developers; http://packetstormsecurity.com/files/132911/
CVE: CVE-2015-9444
Published: 2019-09-26
Description: The altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/ PATH_SELF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132908/; https://wordpress.org/plugins/altos-connect/#developers; http://packetstormsecurity.com/files/132908/
CVE: CVE-2015-9445
Published: 2019-09-26
Description: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/132842/; https://wordpress.org/plugins/unite-gallery-lite/#developers; https://wpvulndb.com/vulnerabilities/8113
CVE: CVE-2015-9446
Published: 2019-09-26
Description: The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132842/; https://wordpress.org/plugins/unite-gallery-lite/#developers; https://wpvulndb.com/vulnerabilities/8113
CVE: CVE-2015-9447
Published: 2019-09-26
Description: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/132842/; https://wordpress.org/plugins/unite-gallery-lite/#developers; https://wpvulndb.com/vulnerabilities/8113
CVE: CVE-2015-9448
Published: 2019-09-26
Description: The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_8a2f7613577ea8e613ec274aeec14527.html; https://wordpress.org/plugins/sendpress/#developers; https://wpvulndb.com/vulnerabilities/8324
CVE: CVE-2019-16903
Published: 2019-09-26
Description: Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.iwantacve.cn/index.php/archives/349/; https://github.com/plutinosoft/Platinum/issues/22; http://www.iwantacve.cn/index.php/archives/349/
CVE: CVE-2019-12617
Published: 2019-09-26
Description: In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.
CVSS Score: 2.7 (LOW)
References: https://forum.silverstripe.org/c/releases; https://www.silverstripe.org/blog/tag/release; https://www.silverstripe.org/download/security-releases/
CVE: CVE-2019-14272
Published: 2019-09-26
Description: In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://forum.silverstripe.org/c/releases; https://www.silverstripe.org/blog/tag/release; https://www.silverstripe.org/download/security-releases/
CVE: CVE-2019-14273
Published: 2019-09-26
Description: In SilverStripe assets 4.0, there is broken access control on files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://forum.silverstripe.org/c/releases; https://www.silverstripe.org/blog/tag/release; https://www.silverstripe.org/download/security-releases/
CVE: CVE-2019-14844
Published: 2019-09-26
Description: A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-628
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14844; https://github.com/krb5/krb5/pull/981; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54ZYKEJZ77BXZWGF4NEVKC33ESVROEYC/
CVE: CVE-2019-16904
Published: 2019-09-26
Description: TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the change history of the item or tapping on the item.)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsteampassnet/TeamPass/issues/2685; https://github.com/nilsteampassnet/TeamPass/issues/2685
CVE: CVE-2019-16910
Published: 2019-09-26
Description: Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/ARMmbed/mbedtls/commit/298a43a77ec0ed2c19a8c924ddd8571ef3e65dfd; https://github.com/ARMmbed/mbedtls/commit/33f66ba6fd234114aa37f0209dac031bb2870a9b; https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
CVE: CVE-2019-4262
Published: 2019-09-26
Description: IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160014; https://www.ibm.com/support/pages/node/1074538; https://exchange.xforce.ibmcloud.com/vulnerabilities/160014
CVE: CVE-2019-4378
Published: 2019-09-26
Description: IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authenticated and authorized user using specially crafted PCF messages. IBM X-Force ID: 162084.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/162084; https://supportcontent.ibm.com/support/pages/node/886885; https://exchange.xforce.ibmcloud.com/vulnerabilities/162084
CVE: CVE-2018-11782
Published: 2019-09-26
Description: In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://subversion.apache.org/security/CVE-2018-11782-advisory.txt; http://subversion.apache.org/security/CVE-2018-11782-advisory.txt
CVE: CVE-2019-0203
Published: 2019-09-26
Description: In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a client sends certain sequences of protocol commands. This can lead to disruption for users of the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-755
References: http://subversion.apache.org/security/CVE-2019-0203-advisory.txt; http://subversion.apache.org/security/CVE-2019-0203-advisory.txt
CVE: CVE-2019-10082
Published: 2019-09-26
Description: In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E; https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E
CVE: CVE-2019-10092
Published: 2019-09-26
Description: In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html; http://www.openwall.com/lists/oss-security/2019/08/15/4; http://www.openwall.com/lists/oss-security/2020/08/08/1
CVE: CVE-2019-10097
Published: 2019-09-26
Description: In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
CVSS Score: 7.2 (HIGH)
CWE: CWE-476, CWE-787
References: https://access.redhat.com/errata/RHSA-2019:4126; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E
CVE: CVE-2019-10882
Published: 2019-09-26
Description: The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://airbus-seclab.github.io/advisories/netskope.html; https://support.netskope.com/hc/article_attachments/[PII_REDACTED]53/Sprint_62_Release_Notes.pdf; https://support.netskope.com/hc/en-us/articles/[PII_REDACTED]94-Netskope-Client
CVE: CVE-2019-12091
Published: 2019-09-26
Description: The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability. Local users can use this vulnerability to execute code with NT\SYSTEM privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://airbus-seclab.github.io/advisories/netskope.html; https://support.netskope.com/hc/article_attachments/[PII_REDACTED]53/Sprint_62_Release_Notes.pdf; https://support.netskope.com/hc/en-us/articles/[PII_REDACTED]94-Netskope-Client
CVE: CVE-2019-13523
Published: 2019-09-26
Description: In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-306
References: https://www.us-cert.gov/ics/advisories/icsa-19-260-03; https://www.us-cert.gov/ics/advisories/icsa-19-260-03
CVE: CVE-2019-16409
Published: 2019-09-26
Description: In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. (Users who upgrade from SilverStripe 3.x to 4.x and had Versioned Files installed have no further need for this module, because the 4.x release has built-in versioning. However, nothing in the upgrade process automates the destruction of these insecure artefacts, nor alerts the user to the criticality of destruction.)
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/silverstripe/silverstripe-framework; https://github.com/symbiote/silverstripe-versionedfiles; https://www.silverstripe.org/download/security-releases/cve-2019-16409
CVE: CVE-2019-16524
Published: 2019-09-26
Description: The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/sbaresearch/advisories/tree/public/2019/SBA-ADV-20190911-01_Easy_FancyBox_WP_Plugin_Stored_XSS; https://wordpress.org/plugins/easy-fancybox/#developers; https://wpvulndb.com/vulnerabilities/9891
CVE: CVE-2019-16532
Published: 2019-09-26
Description: An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://github.com/yzmcms/yzmcms/issues/28; https://www.exploit-db.com/exploits/47422; https://github.com/yzmcms/yzmcms/issues/28
CVE: CVE-2019-16755
Published: 2019-09-26
Description: BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Operating System running the targeted application. Affected DWP versions: versions: 3.x to 18.x, all versions, service packs, and patches are affected by this vulnerability. Affected SmartIT versions: 1.x, 2.0, 18.05, 18.08, and 19.02, all versions, service packs, and patches are affected by this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA21O000000gnYQSAY&type=Solution; https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA21O000000gnYQSAY&type=Solution
CVE: CVE-2019-16869
Published: 2019-09-26
Description: Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2019:3892; https://access.redhat.com/errata/RHSA-2019:3901; https://access.redhat.com/errata/RHSA-2020:0159
CVE: CVE-2019-16894
Published: 2019-09-26
Description: download.php in inoERP 4.15 allows SQL injection through insecure deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-502
References: https://www.exploit-db.com/exploits/47426; https://www.exploit-db.com/exploits/47426
CVE: CVE-2019-16895
Published: 2019-09-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-16894. Reason: This candidate is a reservation duplicate of CVE-2019-16894. Notes: All CVE users should reference CVE-2019-16894 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-6161
Published: 2019-09-26
Description: An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain circumstances. This vulnerability does not affect ThinkSystem XCC, System x IMM2, or other BMCs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: https://support.lenovo.com/solutions/LEN-26957; https://support.lenovo.com/solutions/LEN-26957
CVE: CVE-2019-6175
Published: 2019-09-26
Description: A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.
CVSS Score: 7.5 (HIGH)
References: https://support.lenovo.com/solutions/LEN-28093; https://support.lenovo.com/solutions/LEN-28093
CVE: CVE-2019-16914
Published: 2019-09-26
Description: An XSS issue was discovered in pfSense through 2.4.4-p3. In services_captiveportal_mac.php, the username and delmac parameters are displayed without sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pfsense/pfsense/commit/d31362b69d5d52dc196dc72f66e830cd1e6e9a4f; https://redmine.pfsense.org/issues/9609; https://www.seebug.org/vuldb/ssvid-98023
CVE: CVE-2019-16915
Published: 2019-09-26
Description: An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pathname to file_get_contents or file_put_contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/pfsense/pfsense/commit/2c544ac61ce98f716d50b8e5961d7dfba66804b5; https://redmine.pfsense.org/issues/9610; https://www.seebug.org/vuldb/ssvid-98024
CVE: CVE-2019-16667
Published: 2019-09-26
Description: diag_command.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrf_callback() produces a "CSRF token expired" error and a Try Again button when a CSRF token is missing.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/158614/pfSense-2.4.4-p3-Cross-Site-Request-Forgery.html; https://pastebin.com/TEJdu9LN; http://packetstormsecurity.com/files/158614/pfSense-2.4.4-p3-Cross-Site-Request-Forgery.html
CVE: CVE-2019-12562
Published: 2019-09-26
Description: Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html; https://mayaseven.com/cve-2019-12562-stored-cross-site-scripting-in-dotnetnuke-dnn-version-v9-3-2/; http://packetstormsecurity.com/files/154673/DotNetNuke-Cross-Site-Scripting.html
CVE: CVE-2019-11278
Published: 2019-09-26
Description: CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft a SCIM query, which leaks information that allows an escalation of privileges, ultimately allowing the malicious user to gain control of UAA scopes they should not have.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.cloudfoundry.org/blog/cve-2019-11278; https://www.cloudfoundry.org/blog/cve-2019-11278
CVE: CVE-2019-15862
Published: 2019-09-26
Description: An issue was discovered in CKFinder through 2.6.2.1. Improper checks of file names allows remote attackers to upload files without any extension (even if the application was configured to accept files only with a defined set of extensions). This affects CKFinder for ASP, CKFinder for ASP.NET, CKFinder for ColdFusion, and CKFinder for PHP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released/; https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released/
CVE: CVE-2019-15891
Published: 2019-09-26
Description: An issue was discovered in CKFinder through 2.6.2.1 and 3.x through 3.5.0. The documentation has misleading information that could lead to a conclusion that the application has a built-in bulletproof content sniffing protection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released/; https://ckeditor.com/blog/CKFinder-3.5.1-and-CKFinder-2.6.3-released/
CVE: CVE-2019-11279
Published: 2019-09-26
Description: CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user can escalate their own privileges to any scope, allowing them to take control of UAA and the resources it controls.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.cloudfoundry.org/blog/cve-2019-11279; https://www.cloudfoundry.org/blog/cve-2019-11279
CVE: CVE-2019-16902
Published: 2019-09-27
Description: In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full pathname.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://almorabea.net/cve-2019-16902.txt; https://www.arformsplugin.com/documentation/changelog/; http://almorabea.net/cve-2019-16902.txt
CVE: CVE-2019-16920
Published: 2019-09-27
Description: Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/zeroday/FG-VD-19-117; https://medium.com/%4080vul/determine-the-device-model-affected-by-cve-2019-16920-by-zoomeye-bf6fec7f9bb3; https://www.kb.cert.org/vuls/id/766427
CVE: CVE-2019-13376
Published: 2019-09-27
Description: phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://blog.phpbb.com/category/security/; https://ssd-disclosure.com/archives/4007/ssd-advisory-phpbb-csrf-token-hijacking-leading-to-stored-xss; https://blog.phpbb.com/category/security/
CVE: CVE-2019-16921
Published: 2019-09-27
Description: In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df7e40425813c50cd252e6f5e348a81ef1acae56; https://github.com/torvalds/linux/commit/df7e40425813c50cd252e6f5e348a81ef1acae56; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df7e40425813c50cd252e6f5e348a81ef1acae56
CVE: CVE-2019-4141
Published: 2019-09-27
Description: IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158337; https://www.ibm.com/support/pages/node/876772; https://exchange.xforce.ibmcloud.com/vulnerabilities/158337