deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7229
Published: 2020-01-21
Description: An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search engine. The parameter is landing_location. The function is countSearchedJobs(). The file is _lib/class.Job.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/niteosoft/simplejobscript/issues/7; https://simplejobscript.com; https://github.com/niteosoft/simplejobscript/issues/7
CVE: CVE-2015-1861
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2015-2784
Published: 2020-01-21
Description: The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/rsantamaria/papercrop/blob/master/CHANGELOG.md; https://github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579; https://github.com/rsantamaria/papercrop/blob/master/CHANGELOG.md
CVE: CVE-2019-14902
Published: 2020-01-21
Description: There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902; https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
CVE: CVE-2019-14907
Published: 2020-01-21
Description: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907; https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
CVE: CVE-2019-18932
Published: 2020-01-21
Description: log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and place symlinks in it (after winning a /tmp/sarg/denied.int_unsort race condition). The outcome will be corrupted or newly created files in privileged file system locations.
CVSS Score: 7.0 (HIGH)
CWE: CWE-59, CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00063.html; http://www.openwall.com/lists/oss-security/2020/01/20/6
CVE: CVE-2019-19344
Published: 2020-01-21
Description: There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19344; https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
CVE: CVE-2020-5202
Published: 2020-01-21
Description: apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket command-line option is passed. The cron job /etc/cron.daily/apt-cacher-ng (which is active by default) attempts this periodically. Because 3142 is an unprivileged port, any local user can try to bind to this port and will receive requests from acngtool. There can be sensitive data in these requests, e.g., if AdminAuth is enabled in /etc/apt-cacher-ng/security.conf. This sensitive data can leak to unprivileged local users that manage to bind to this port before the apt-cacher-ng daemon can.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00065.html; http://www.openwall.com/lists/oss-security/2020/01/20/4
CVE: CVE-2014-2680
Published: 2020-01-21
Description: The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.
CVSS Score: 8.1 (HIGH)
References: https://web.archive.org/web/[PII_REDACTED]4252/http://rampartssecurity.com/docs/Xmind-MITM.pdf; https://web.archive.org/web/[PII_REDACTED]4252/http://rampartssecurity.com/docs/Xmind-MITM.pdf
CVE: CVE-2016-11018
Published: 2020-01-21
Description: An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://10degres.net/cve-2016-11018-image-gallery-sql-injection/; https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.8.9; https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.9.0
CVE: CVE-2019-17357
Published: 2020-01-21
Description: Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when a string and id composite value are used to identify the template type and id. An authenticated attacker can exploit this to extract data from the database, or an unauthenticated remote attacker could exploit this via Cross-Site Request Forgery.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html
CVE: CVE-2019-19411
Published: 2020-01-21
Description: USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector used in a specific encryption algorithm, an attacker who gains access to this cryptographic primitive may exploit this vulnerability to cause the value of the confidentiality associated with its use to be diminished.
CVSS Score: 3.7 (LOW)
CWE: CWE-665
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-firewall-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-firewall-en
CVE: CVE-2019-19592
Published: 2020-01-21
Description: Jama Connect 8.44.0 is vulnerable to stored Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumukh30.blogspot.com/2020/01/normal-0-false-false-false-en-us-x-none.html?m=1; https://sumukh30.blogspot.com/2020/01/normal-0-false-false-false-en-us-x-none.html?m=1
CVE: CVE-2019-5703
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5704
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5705
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5706
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5707
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5708
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5709
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5710
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5711
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5712
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5713
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2019-5714
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019. Notes: none
CVE: CVE-2020-1840
Published: 2020-01-21
Description: HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8)
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-smartphone-en
CVE: CVE-2020-6849
Published: 2020-01-21
Description: The marketo-forms-and-tracking plugin through 1.0.2 for WordPress allows wp-admin/admin.php?page=marketo_fat CSRF with resultant XSS.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/marketo-forms-and-tracking/#developers; https://wpvulndb.com/vulnerabilities/10031; https://zeroauth.ltd/blog/
CVE: CVE-2019-17584
Published: 2020-01-21
Description: The Meinberg SyncBox/PTP/PTPv2 devices have default SSH keys which allow attackers to get root access to the devices. All firmware versions up to v5.34o, v5.34s, v5.32* or 5.34g are affected. The private key is also used in an internal interface of another Meinberg Device and can be extracted from a firmware update of this device. An update to fix the vulnerability was published by the vendor.
CVSS Score: 7.5 (HIGH)
References: https://w1n73r.de/CVE/2019/17584/; https://www.meinbergglobal.com/english/news/meinberg-security-advisory-mbgsa-1904-syncbox-ptp-ptpv2.htm; https://w1n73r.de/CVE/2019/17584/
CVE: CVE-2020-6638
Published: 2020-01-21
Description: Grin through 2.1.1 has Insufficient Validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-6638.md; https://github.com/mimblewimble/grin/compare/v2.1.1...v3.0.0; https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-6638.md
CVE: CVE-2019-18426
Published: 2020-01-21
Description: A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/157097/WhatsApp-Desktop-0.3.9308-Cross-Site-Scripting.html; https://www.facebook.com/security/advisories/cve-2019-18426; http://packetstormsecurity.com/files/157097/WhatsApp-Desktop-0.3.9308-Cross-Site-Scripting.html
CVE: CVE-2020-5498
Published: 2020-01-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-7040
Published: 2020-01-21
Description: storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00054.html; http://www.openwall.com/lists/oss-security/2020/01/20/3; http://www.openwall.com/lists/oss-security/2020/01/21/2
CVE: CVE-2019-19886
Published: 2020-01-21
Description: Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive (Denial of Service) because of a flaw in Transaction::addRequestHeader in transaction.cc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWVUC54OPU7ICFYIXXVGQ5DOTMR4Z6ZY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JI3MNFRNUZD6RAJ5CPQZSUXQXDZ2K7IL/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IIUNYIEZOWHRWWRVT3FR45MLE6HGDY/
CVE: CVE-2020-7594
Published: 2020-01-21
Description: MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Debug Options page and entering shell metacharacters in the interface JSON field of the ping function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.html; https://sku11army.blogspot.com/2020/01/multitech-authenticated-remote-code.html
CVE: CVE-2019-19413
Published: 2020-01-21
Description: There is an integer overflow vulnerability in LDAP client of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-ldap-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-ldap-en
CVE: CVE-2019-19414
Published: 2020-01-21
Description: There is an integer overflow vulnerability in LDAP server of some Huawei products. Due to insufficient input validation, a remote attacker could exploit this vulnerability by sending malformed packets to the target devices. Successful exploit could cause the affected system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-ldap-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-ldap-en
CVE: CVE-2019-20387
Published: 2020-01-21
Description: repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/openSUSE/libsolv/commit/fdb9c9c03508990e4583046b590c30d958f272da; https://github.com/openSUSE/libsolv/compare/0.7.5...0.7.6; https://lists.debian.org/debian-lts-announce/2020/01/msg00034.html
CVE: CVE-2019-20388
Published: 2020-01-21
Description: xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html; https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68; https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html
CVE: CVE-2020-1788
Published: 2020-01-21
Description: Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious application. Successful exploit could allow unauthorized actions leading to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-02-smartphone-en
CVE: CVE-2020-7595
Published: 2020-01-21
Description: xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html; https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf; https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076
CVE: CVE-2018-17981
Published: 2020-01-22
Description: Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/lifesize-devices-allow-xss-via.html; https://sku11army.blogspot.com/2020/01/lifesize-devices-allow-xss-via.html
CVE: CVE-2019-16791
Published: 2020-01-22
Description: In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-757
References: https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b; https://github.com/Snawoot/postfix-mta-sts-resolver/security/advisories/GHSA-h92m-42h4-82f6; https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b
CVE: CVE-2019-12490
Published: 2020-01-22
Description: An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _blank for external links.
CVSS Score: 6.5 (MEDIUM)
References: https://www.simplemachines.org/community/index.php?topic=570986.0; https://www.youtube.com/watch?v=gCVeFoxZ1DI; https://www.simplemachines.org/community/index.php?topic=570986.0
CVE: CVE-2011-4943
Published: 2020-01-22
Description: ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2012/03/23/16; http://www.openwall.com/lists/oss-security/2012/03/23/16
CVE: CVE-2018-16262
Published: 2020-01-22
Description: The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to improper D-Bus security policy configurations. Such actions include installing, decrypting, and killing other packages. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf; https://review.tizen.org/git/?p=platform/core/appfw/pkgmgr-server.git%3Ba=commit%3Bh=aac8a95859828a058d8e06893982b11ebc81dd78; https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be
CVE: CVE-2018-16263
Published: 2020-01-22
Description: The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf; https://review.tizen.org/git/?p=platform/upstream/pulseaudio.git%3Ba=commit%3Bh=81e8ba9f3ab0917da4fdfa094f49333be57964c6; https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be
CVE: CVE-2018-16264
Published: 2020-01-22
Description: The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive information, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf; https://review.tizen.org/git/?p=platform/upstream/bluez.git%3Ba=commit%3Bh=ff9878c95efc12d4a4495153ab51e3a09f8d3c01; https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be
CVE: CVE-2018-16265
Published: 2020-01-22
Description: The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf; https://review.tizen.org/git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=074dfc9709d8cee84564fc815796b0ef0c3273f5; https://review.tizen.org/git/?p=platform/core/connectivity/bluetooth-frwk.git%3Ba=commit%3Bh=bafbd66906ae5712874dc0d7dd6288d2c1ae4db2
CVE: CVE-2018-16266
Published: 2020-01-22
Description: The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf; https://review.tizen.org/git/?p=platform/upstream/enlightenment.git%3Ba=commit%3Bh=8ff5c24d04f97b1c84b[PII_REDACTED]00b22128fb4; https://www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be