deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-21124
Published: 2020-04-22
Description: NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://kb.netgear.com/000060234/Security-Advisory-for-a-Vertical-Privilege-Escalation-on-WAC510-PSV-2018-0260; https://kb.netgear.com/000060234/Security-Advisory-for-a-Vertical-Privilege-Escalation-on-WAC510-PSV-2018-0260
CVE: CVE-2018-21125
Published: 2020-04-22
Description: NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://kb.netgear.com/000060233/Security-Advisory-for-an-Authentication-Bypass-on-WAC510-PSV-2018-0261; https://kb.netgear.com/000060233/Security-Advisory-for-an-Authentication-Bypass-on-WAC510-PSV-2018-0261
CVE: CVE-2018-21126
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://kb.netgear.com/000060232/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0262; https://kb.netgear.com/000060232/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0262
CVE: CVE-2020-10712
Published: 2020-04-22
Description: A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from this vulnerability is to data integrity.
CVSS Score: 7.0 (HIGH)
CWE: CWE-532, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10712; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10712
CVE: CVE-2020-5740
Published: 2020-04-22
Description: Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.tenable.com/security/research/tra-2020-25; https://www.tenable.com/security/research/tra-2020-25
CVE: CVE-2020-7642
Published: 2020-04-22
Description: lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/aFarkas/lazysizes/commit/3720ab8262552d4e063a38d8492f9490a231fd48; https://snyk.io/vuln/SNYK-JS-LAZYSIZES-567144; https://github.com/aFarkas/lazysizes/commit/3720ab8262552d4e063a38d8492f9490a231fd48
CVE: CVE-2017-18752
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6120 before 1.0.0.32, EX6130 before 1.0.0.16, R6300v2 before 1.0.4.12, R6700 before 1.0.1.26, R6900 before 1.0.1.22, R7000 before 1.0.9.6, R7300DST before 1.0.0.52, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.94.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://kb.netgear.com/000051502/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Extenders-PSV-2017-0319; https://kb.netgear.com/000051502/Security-Advisory-for-Arbitrary-File-Read-on-Some-Routers-and-Extenders-PSV-2017-0319
CVE: CVE-2017-18754
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WNDR3700v4 before 1.0.2.88, WNDR4300v1 before 1.0.2.90, and WNR2000v5 before 1.0.0.58.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000051494/Security-Advisory-for-Post-Authentication-Command-Injection-on-Routers-PSV-2017-0329; https://kb.netgear.com/000051494/Security-Advisory-for-Post-Authentication-Command-Injection-on-Routers-PSV-2017-0329
CVE: CVE-2017-18755
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000P before 1.0.0.86, R6900P before 1.0.0.56, R7300 before 1.0.0.54, R8300 before 1.0.2.106, R8500 before 1.0.2.106, DGN2200v4 before 1.0.0.86, DGND2200Bv4 before 1.0.0.86, R6050 before 1.0.0.86, JR6150 before 1.0.1.10, R6220 before 1.1.0.50, and WNDR3700v5 before V1.1.0.48.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://kb.netgear.com/000051493/Security-Advisory-for-Cross-Site-Request-Forgery-on-Routers-and-Modem-Routers-PSV-2017-0333; https://kb.netgear.com/000051493/Security-Advisory-for-Cross-Site-Request-Forgery-on-Routers-and-Modem-Routers-PSV-2017-0333
CVE: CVE-2017-18756
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.66, D8500 before 1.0.3.35, DGN2200Bv4 before 1.0.0.94, DGN2200v4 before 1.0.0.94, R6250 before 1.0.4.14, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.30, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7900 before 1.0.2.4, R8000 before 1.0.4.2, WN2500RPv2 before 1.0.1.50, WNDR3400v3 before 1.0.1.14, and WNDR4000 before 1.0.2.10.
CVSS Score: 8.8 (HIGH)
References: https://kb.netgear.com/000051492/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2756; https://kb.netgear.com/000051492/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-Gateways-and-Extenders-PSV-2017-2756
CVE: CVE-2017-18757
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.16, R7500 before 1.0.0.116, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR4300v2 before 1.0.0.48, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.
CVSS Score: 5.4 (MEDIUM)
References: https://kb.netgear.com/000051491/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0120; https://kb.netgear.com/000051491/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-PSV-2016-0120
CVE: CVE-2017-18758
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.
CVSS Score: 8.0 (HIGH)
CWE: CWE-787
References: https://kb.netgear.com/000051487/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2157; https://kb.netgear.com/000051487/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-PSV-2017-2157
CVE: CVE-2019-20787
Published: 2020-04-22
Description: Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00045.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVYG7CCPS5F3OPOQMJKVNXTQ7BXSEX2V/
CVE: CVE-2020-11011
Published: 2020-04-22
Description: In Phproject before version 1.7.8, there's a vulnerability which allows users with access to file uploads to execute arbitrary code. This is patched in version 1.7.8.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/Alanaktion/phproject/commit/b49d642e035d835f824bd39babd964ec0e3a285f; https://github.com/Alanaktion/phproject/security/advisories/GHSA-4j97-6w6q-gxjx; https://github.com/Alanaktion/phproject/commit/b49d642e035d835f824bd39babd964ec0e3a285f
CVE: CVE-2020-12066
Published: 2020-04-22
Description: CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00045.html; https://github.com/teeworlds/teeworlds/commit/c68402fa7e279d42886d5951d1ea8ac2facc1ea5
CVE: CVE-2018-18405
Published: 2020-04-22
Description: jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gitter.im/jquery/jquery?at=5ea844a05cd4fe50a3d7ddc9; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W/
CVE: CVE-2018-21127
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://kb.netgear.com/000060231/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0263; https://kb.netgear.com/000060231/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0263
CVE: CVE-2018-21128
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://kb.netgear.com/000060230/Security-Advisory-for-Authentication-Bypass-on-Some-Wireless-Access-Points-PSV-2018-0264; https://kb.netgear.com/000060230/Security-Advisory-for-Authentication-Bypass-on-Some-Wireless-Access-Points-PSV-2018-0264
CVE: CVE-2018-21129
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://kb.netgear.com/000060245/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Access-Points-PSV-2018-0266; https://kb.netgear.com/000060245/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Wireless-Access-Points-PSV-2018-0266
CVE: CVE-2018-21130
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://kb.netgear.com/000060229/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0267; https://kb.netgear.com/000060229/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-Wireless-Access-Points-PSV-2018-0267
CVE: CVE-2020-7055
Published: 2020-04-22
Description: An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://pentest.co.uk/labs/advisory/cve-2020-7055/; https://pentest.co.uk/labs/vulnerability-disclosure-cve-2020-7055/; https://pentest.co.uk/labs/advisory/cve-2020-7055/
CVE: CVE-2019-6859
Published: 2020-04-22
Description: A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-798
References: https://www.se.com/ww/en/download/document/SEVD-2019-316-02; https://www.se.com/ww/en/download/document/SEVD-2019-316-02
CVE: CVE-2020-7487
Published: 2020-04-22
Description: A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345, CWE-345
References: https://www.se.com/ww/en/download/document/SEVD-2020-105-02; https://www.se.com/ww/en/download/document/SEVD-2020-105-02
CVE: CVE-2020-7488
Published: 2020-04-22
Description: A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.se.com/ww/en/download/document/SEVD-2020-105-02; https://www.se.com/ww/en/download/document/SEVD-2020-105-02
CVE: CVE-2020-7489
Published: 2020-04-22
Description: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://www.se.com/ww/en/download/document/SEVD-2020-105-01; https://www.se.com/ww/en/download/document/SEVD-2020-105-01
CVE: CVE-2020-7490
Published: 2020-04-22
Description: A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://www.se.com/ww/en/download/document/SEVD-2020-105-03; https://www.se.com/ww/en/download/document/SEVD-2020-105-03
CVE: CVE-2018-21150
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://kb.netgear.com/000059483/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Gateways-and-Routers-PSV-2017-3155; https://kb.netgear.com/000059483/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Gateways-and-Routers-PSV-2017-3155
CVE: CVE-2018-21151
Published: 2020-04-22
Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: https://kb.netgear.com/000059482/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Gateways-and-Routers-PSV-2017-3154; https://kb.netgear.com/000059482/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Gateways-and-Routers-PSV-2017-3154
CVE: CVE-2020-11505
Published: 2020-04-22
Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2020-11506
Published: 2020-04-22
Description: An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2020-11649
Published: 2020-04-22
Description: An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/releases/2020/04/14/critical-security-release-gitlab-12-dot-9-dot-3-released/; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2020-1983
Published: 2020-04-22
Description: A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00001.html; https://gitlab.freedesktop.org/slirp/libslirp/-/commit/9ac0371bb8c0a40f5d9f82a1c25129660e81df04
CVE: CVE-2020-10889
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-511/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10890
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication API. The issue lies in the handling of the ConvertToPDF command, which allows an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9829.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-512/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10891
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Save command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9831.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-514/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10892
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication API. The issue lies in the handling of the CombineFiles command, which allows an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9830.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-513/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10893
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in a PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10189.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-521/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10894
Published: 2020-04-22
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in a PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-10190.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-522/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-10895
Published: 2020-04-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10191.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-523/; https://www.foxitsoftware.com/support/security-bulletins.php