deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-20215
Published: 2020-01-29
Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/156250/D-Link-ssdpcgi-Unauthenticated-Remote-Command-Execution.html; https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-rce-in-ssdpcgi-http-st-cve-2019-20215-en-2e799acb8a73; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
CVE: CVE-2019-20216
Published: 2020-01-29
Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because REMOTE_PORT is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae; https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
CVE: CVE-2019-20217
Published: 2020-01-29
Description: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because SERVER_ID is mishandled. The value of the urn: service/device is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-en-6bca043500ae; https://medium.com/%40s1kr10s/d-link-dir-859-rce-unauthenticated-cve-2019-20216-cve-2019-20217-es-e11ca6168d35; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147
CVE: CVE-2012-4383
Published: 2020-01-29
Description: contao prior to 2.11.4 has a sql injection vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2012/08/31/14; http://www.openwall.com/lists/oss-security/2012/08/31/14
CVE: CVE-2012-5776
Published: 2020-01-29
Description: Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2012/11/02/10; https://cxsecurity.com/issue/WLB[PII_REDACTED]; http://www.openwall.com/lists/oss-security/2012/11/02/10
CVE: CVE-2013-0161
Published: 2020-01-29
Description: Havalite CMS 1.1.7 has a stored XSS vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2013/01/08/4; http://www.openwall.com/lists/oss-security/2013/01/08/4
CVE: CVE-2020-7965
Published: 2020-01-29
Description: flaskparser.py in Webargs 5.x through 5.5.2 doesn't check that the Content-Type header is application/json when receiving JSON input. If the request body is valid JSON, it will accept it even if the content type is application/x-www-form-urlencoded. This allows for JSON POST requests to be made across domains, leading to CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://webargs.readthedocs.io/en/latest/changelog.html; https://webargs.readthedocs.io/en/latest/changelog.html
CVE: CVE-2019-7654
Published: 2020-01-29
Description: Wowza Streaming Engine 4.8.0 and earlier suffers from multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as adding another admin user via enginemanager/server/user/edit.htm in the Server->Users component. This issue was resolved in Wowza Streaming Engine 4.8.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-7654-CSRF-Wowza; https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-7654.txt; https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes
CVE: CVE-2019-7655
Published: 2020-01-29
Description: Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the (1) customList%5B0%5D.value field in enginemanager/server/serversetup/edit_adv.htm of the Server Setup configuration or the (2) host field in enginemanager/j_spring_security_check of the login form. This issue was resolved in Wowza Streaming Engine 4.8.5.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-7655-XSS-Wowza; https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-7655.txt; https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes
CVE: CVE-2019-7656
Published: 2020-01-29
Description: A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/* core program files. By injecting a payload into one of those files, it will run with the same privileges as the Wowza server, root. For example, /usr/local/WowzaStreamingEngine/bin/tune.sh could be replaced with a Trojan horse. This issue was resolved in Wowza Streaming Engine 4.8.5.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-7656-PrivEscal-Wowza; https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-7656.txt; https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes
CVE: CVE-2020-2099
Published: 2020-01-29
Description: Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.
CVSS Score: 8.6 (HIGH)
CWE: CWE-330
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2100
Published: 2020-01-29
Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.
CVSS Score: 5.8 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2101
Published: 2020-01-29
Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which could potentially allow an attacker to use a timing attack to obtain this secret.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2102
Published: 2020-01-29
Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2103
Published: 2020-01-29
Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2104
Published: 2020-01-29
Description: Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2105
Published: 2020-01-29
Description: REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://access.redhat.com/errata/RHBA-2020:0402; https://access.redhat.com/errata/RHBA-2020:0675
CVE: CVE-2020-2106
Published: 2020-01-29
Description: Jenkins Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view, resulting in a stored XSS vulnerability exploitable by users able to change job configurations.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1680; http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE: CVE-2020-2107
Published: 2020-01-29
Description: Jenkins Fortify Plugin 19.1.29 and earlier stores proxy server passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1565; http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE: CVE-2020-2108
Published: 2020-01-29
Description: Jenkins WebSphere Deployer Plugin 1.6.1 and earlier does not configure the XML parser to prevent XXE attacks which can be exploited by a user with Job/Configure permissions.
CVSS Score: 7.6 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2020/01/29/1; https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1719; http://www.openwall.com/lists/oss-security/2020/01/29/1
CVE: CVE-2020-7247
Published: 2020-01-29
Description: smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-755, CWE-755
References: http://packetstormsecurity.com/files/156137/OpenBSD-OpenSMTPD-Privilege-Escalation-Code-Execution.html; http://packetstormsecurity.com/files/156145/OpenSMTPD-6.6.2-Remote-Code-Execution.html; http://packetstormsecurity.com/files/156249/OpenSMTPD-MAIL-FROM-Remote-Code-Execution.html
CVE: CVE-2013-2567
Published: 2020-01-29
Description: An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.coresecurity.com/advisories/zavio-IP-cameras-multiple-vulnerabilities; http://www.exploit-db.com/exploits/25815; http://www.securityfocus.com/bid/60189
CVE: CVE-2020-8416
Published: 2020-01-29
Description: IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://packetstormsecurity.com/files/156170/BearFTP-0.1.0-Denial-Of-Service.html; https://github.com/kolya5544/BearFTP/blob/0.2.0/CHANGELOG.txt; https://github.com/kolya5544/BearFTP/commit/9965337f9d4c0325e4aab324dcd485e4cbb7b428
CVE: CVE-2013-2568
Published: 2020-01-29
Description: A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/60190; https://exchange.xforce.ibmcloud.com/vulnerabilities/84569; https://packetstormsecurity.com/files/cve/CVE-2013-2568/page1/
CVE: CVE-2013-2569
Published: 2020-01-29
Description: A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, which could let a malicious user obtain unauthorized access to the live video stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/60191; https://exchange.xforce.ibmcloud.com/vulnerabilities/84570; https://packetstormsecurity.com/files/cve/CVE-2013-2569
CVE: CVE-2013-2570
Published: 2020-01-29
Description: A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/60188; https://exchange.xforce.ibmcloud.com/vulnerabilities/84567; https://packetstormsecurity.com/files/cve/CVE-2013-2570
CVE: CVE-2013-3215
Published: 2020-01-29
Description: vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/61559; https://exchange.xforce.ibmcloud.com/vulnerabilities/86163; http://www.securityfocus.com/bid/61559
CVE: CVE-2019-18634
Published: 2020-01-29
Description: In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html; http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html; http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html
CVE: CVE-2013-2572
Published: 2020-01-29
Description: A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-coded credentials for the administrative Web interface, which could let a malicious user obtain unauthorized access to CGI files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.exploit-db.com/exploits/25812; http://www.securityfocus.com/bid/60194; https://exchange.xforce.ibmcloud.com/vulnerabilities/84573
CVE: CVE-2013-2573
Published: 2020-01-29
Description: A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/60195; https://exchange.xforce.ibmcloud.com/vulnerabilities/84574; https://packetstormsecurity.com/files/cve/CVE-2013-2573
CVE: CVE-2013-2574
Published: 2020-01-29
Description: An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://www.coresecurity.com/advisories/foscam-ip-cameras-improper-access-restrictions; http://www.exploit-db.com/exploits/27076; http://www.securityfocus.com/bid/61415
CVE: CVE-2020-3710
Published: 2020-01-29
Description: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-03.html; https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE: CVE-2020-3711
Published: 2020-01-29
Description: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-03.html; https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE: CVE-2020-3712
Published: 2020-01-29
Description: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-03.html; https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE: CVE-2020-3713
Published: 2020-01-29
Description: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-03.html; https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE: CVE-2020-3714
Published: 2020-01-29
Description: Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-03.html; https://helpx.adobe.com/security/products/illustrator/apsb20-03.html
CVE: CVE-2020-3715
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-3716
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-3717
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a path traversal vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-3718
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-3719
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-3758
Published: 2020-01-29
Description: Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb20-02.html; https://helpx.adobe.com/security/products/magento/apsb20-02.html
CVE: CVE-2020-8432
Published: 2020-01-29
Description: In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html; https://www.mail-archive.com/u-boot%40lists.denx.de/msg354060.html; https://www.mail-archive.com/u-boot%40lists.denx.de/msg354114.html
CVE: CVE-2019-20444
Published: 2020-01-29
Description: HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2020:0497; https://access.redhat.com/errata/RHSA-2020:0567; https://access.redhat.com/errata/RHSA-2020:0601
CVE: CVE-2019-20445
Published: 2020-01-29
Description: HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://access.redhat.com/errata/RHSA-2020:0497; https://access.redhat.com/errata/RHSA-2020:0567; https://access.redhat.com/errata/RHSA-2020:0601
CVE: CVE-2013-3316
Published: 2020-01-29
Description: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass due to the server skipping checks for URLs containing a ".jpg".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/24916/; http://www.exploit-db.com/exploits/24916/
CVE: CVE-2013-3317
Published: 2020-01-29
Description: Netgear WNR1000v3 with firmware before 1.0.2.60 contains an Authentication Bypass via the NtgrBak key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.exploit-db.com/exploits/24916/; http://www.exploit-db.com/exploits/24916/
CVE: CVE-2013-3320
Published: 2020-01-29
Description: Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject arbitrary web script or HTML via the 'full-name' and 'comment' fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/59688; https://exchange.xforce.ibmcloud.com/vulnerabilities/84060; https://exchange.xforce.ibmcloud.com/vulnerabilities/84061
CVE: CVE-2013-3321
Published: 2020-01-29
Description: NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-829
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84062; https://www.securityfocus.com/archive/1/526552; https://exchange.xforce.ibmcloud.com/vulnerabilities/84062
CVE: CVE-2019-10783
Published: 2020-01-29
Description: All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-LSOF-543632; https://snyk.io/vuln/SNYK-JS-LSOF-543632