deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13384
Published: 2020-05-22
Description: Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php filenames are blocked but .php7 filenames are not, a related issue to CVE-2017-18048.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/48479; https://www.exploit-db.com/exploits/48479
CVE: CVE-2020-3184
Published: 2020-05-22
Description: A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates user input for specific SQL queries. An attacker could exploit this vulnerability by authenticating to the application with valid administrative credentials and sending malicious requests to an affected system. A successful exploit could allow the attacker to view information that they are not authorized to view, make changes to the system that they are not authorized to make, or delete information from the database that they are not authorized to delete.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pcp-sql-inj-22Auwt66; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pcp-sql-inj-22Auwt66
CVE: CVE-2020-3272
Published: 2020-05-22
Description: A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming DHCP traffic. An attacker could exploit this vulnerability by sending a crafted DHCP request to an affected device. A successful exploit could allow the attacker to cause a restart of the DHCP server process, causing a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-dhcp-dos-BkEZfhLP; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-dhcp-dos-BkEZfhLP
CVE: CVE-2020-3280
Published: 2020-05-22
Description: A vulnerability in the Java Remote Management Interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a malicious serialized Java object to a specific listener on an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user on an affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-502
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-rce-GMSC6RKN; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uccx-rce-GMSC6RKN
CVE: CVE-2020-3314
Published: 2020-05-22
Description: A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AMP for Endpoints service. The vulnerability is due to insufficient input validation of specific file attributes. An attacker could exploit this vulnerability by providing a crafted file to a user of an affected system. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash, resulting in missed detection and logging of the potentially malicious file. Continued attempts to scan the file could result in a DoS condition of the Cisco AMP for Endpoints service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4emac-dos-kfKjUGtM; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4emac-dos-kfKjUGtM
CVE: CVE-2020-3343
Published: 2020-05-22
Description: A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-120
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb
CVE: CVE-2020-3344
Published: 2020-05-22
Description: A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted packet to an affected device. A successful exploit could allow the attacker to cause the Cisco AMP for Endpoints service to crash and restart.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-120
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp4elinux-h33dkrvb
CVE: CVE-2020-1956
Published: 2020-05-22
Description: Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.openwall.com/lists/oss-security/2020/07/14/1; https://community.sonarsource.com/t/apache-kylin-3-0-1-command-injection-vulnerability/25706; https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
CVE: CVE-2020-6091
Published: 2020-05-22
Description: An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-288, CWE-287
References: https://epson.com/support/wa00907; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011; https://epson.com/support/wa00907
CVE: CVE-2020-7813
Published: 2020-05-22
Description: Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.kaoni.com/; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428; http://www.kaoni.com/
CVE: CVE-2020-8789
Published: 2020-05-22
Description: Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/157787/Composr-CMS-10.0.30-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2020/May/39; http://packetstormsecurity.com/files/157787/Composr-CMS-10.0.30-Cross-Site-Scripting.html
CVE: CVE-2020-10711
Published: 2020-05-22
Description: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10711
CVE: CVE-2020-11076
Published: 2020-05-22
Description: In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html; https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22
CVE: CVE-2020-11077
Published: 2020-05-22
Description: In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This is a similar but different vulnerability from CVE-2020-11076. The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-444, CWE-444
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00038.html; https://github.com/puma/puma/blob/master/History.md#434435-and-31253126--2020-05-22
CVE: CVE-2020-7658
Published: 2020-05-22
Description: meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-444
References: https://github.com/mopemope/meinheld/blob/master/CHANGES.rst%2C; https://snyk.io/vuln/SNYK-PYTHON-MEINHELD-569140; https://github.com/mopemope/meinheld/blob/master/CHANGES.rst%2C
CVE: CVE-2020-13388
Published: 2020-05-22
Description: An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/27/cve-2020-13388-jw-util-vulnerability/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-13389
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/openSchedWifi schedStartTime and schedEndTime parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13389-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13390
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/addressNat entrys and mitInterface parameters for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13390-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13391
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetSpeedWan speed_dir parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13391-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13392
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/setcfm funcpara1 parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13392-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13393
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/saveParentControlInfo deviceId and time parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13393-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13394
Published: 2020-05-22
Description: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetNetControlList list parameter for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://joel-malwarebenchmark.github.io; https://joel-malwarebenchmark.github.io/blog/2020/04/28/cve-2020-13394-Tenda-vulnerability/; https://joel-malwarebenchmark.github.io
CVE: CVE-2020-13396
Published: 2020-05-22
Description: An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/48361c411e50826cb602c7aab773a8a20e1da6bc; https://github.com/FreeRDP/FreeRDP/commit/8fb6336a4072abcee8ce5bd6ae91104628c7bb69
CVE: CVE-2020-13397
Published: 2020-05-22
Description: An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/8fb6336a4072abcee8ce5bd6ae91104628c7bb69; https://github.com/FreeRDP/FreeRDP/commit/d6cd14059b257318f176c0ba3ee0a348826a9ef8
CVE: CVE-2020-13398
Published: 2020-05-22
Description: An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.
CVSS Score: 8.3 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; https://github.com/FreeRDP/FreeRDP/commit/8305349a943c68b1bc8c158f431dc607655aadea; https://github.com/FreeRDP/FreeRDP/commit/8fb6336a4072abcee8ce5bd6ae91104628c7bb69
CVE: CVE-2020-12397
Published: 2020-05-22
Description: By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1617370; https://security.gentoo.org/glsa/202005-03; https://usn.ubuntu.com/4373-1/
CVE: CVE-2020-13412
Published: 2020-05-22
Description: An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#cross-site-request-forgery-csrf; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#cross-site-request-forgery-csrf
CVE: CVE-2020-13413
Published: 2020-05-22
Description: An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#observable-response-discrepancy-from-api; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#observable-response-discrepancy-from-api
CVE: CVE-2020-13414
Published: 2020-05-22
Description: An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#clean-up-old-code; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#clean-up-old-code
CVE: CVE-2020-13415
Published: 2020-05-22
Description: An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#xml-signature-wrapping-in-saml; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#xml-signature-wrapping-in-saml
CVE: CVE-2020-13416
Published: 2020-05-22
Description: An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#csrf-on-password-reset; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#csrf-on-password-reset
CVE: CVE-2020-13417
Published: 2020-05-22
Description: An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege; https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/; https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege
CVE: CVE-2020-13424
Published: 2020-05-23
Description: The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/; https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/
CVE: CVE-2020-13425
Published: 2020-05-23
Description: TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://secretdiary.ninja/index.php/2020/05/06/trackr-users-private-information-exposed/; https://secretdiary.ninja/index.php/2020/05/06/trackr-users-private-information-exposed/
CVE: CVE-2020-13429
Published: 2020-05-24
Description: legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/grafana/piechart-panel/issues/218; https://github.com/grafana/piechart-panel/releases/tag/v1.5.0; https://github.com/grafana/piechart-panel/issues/218
CVE: CVE-2020-13430
Published: 2020-05-24
Description: Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/grafana/grafana/pull/24539; https://github.com/grafana/grafana/releases/tag/v7.0.0; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-13433
Published: 2020-05-24
Description: Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Jason2605/AdminPanel/pull/41; https://news.websec.nl/news-cve-report-0.html; https://github.com/Jason2605/AdminPanel/pull/41
CVE: CVE-2020-13434
Published: 2020-05-24
Description: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2020/Nov/19; http://seclists.org/fulldisclosure/2020/Nov/20