deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12458
Published: 2019-05-30
Description: FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://emreovunc.com/blog/en/FileRun-DirectoryListing-2.png; https://filerun.com/changelog; https://github.com/EmreOvunc/FileRun-Vulnerabilities/
CVE: CVE-2019-12459
Published: 2019-05-30
Description: FileRun 2019.05.21 allows customizables/plugins/audio_player Directory Listing. This issue has been fixed in FileRun 2019.06.01.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://emreovunc.com/blog/en/FileRun-DirectoryListing-3.png; https://filerun.com/changelog; https://github.com/EmreOvunc/FileRun-Vulnerabilities/
CVE: CVE-2019-12460
Published: 2019-05-30
Description: Web Port 1.19.1 allows XSS via the /access/setup type parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158174/WebPort-1.19.1-Cross-Site-Scripting.html; https://emreovunc.com/blog/en/WebPort-Reflected-XSS-01.png; https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/
CVE: CVE-2019-12461
Published: 2019-05-30
Description: Web Port 1.19.1 allows XSS via the /log type parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158174/WebPort-1.19.1-Cross-Site-Scripting.html; https://emreovunc.com/blog/en/WebPort-Reflected-XSS-02.png; https://github.com/EmreOvunc/WebPort-v1.19.1-Reflected-XSS/
CVE: CVE-2018-12126
Published: 2019-05-30
Description: Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html
CVE: CVE-2018-12127
Published: 2019-05-30
Description: Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html
CVE: CVE-2018-12130
Published: 2019-05-30
Description: Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html
CVE: CVE-2018-15131
Published: 2019-05-30
Description: An issue was discovered in Synacor Zimbra Collaboration Suite 8.6.x before 8.6.0 Patch 11, 8.7.x before 8.7.11 Patch 6, 8.8.x before 8.8.8 Patch 9, and 8.8.9 before 8.8.9 Patch 3. Account number enumeration is possible via inconsistent responses for specific types of authentication requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109012; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=109012
CVE: CVE-2018-20840
Published: 2019-05-30
Description: An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of misinterpretation of an integer as a string, resulting in denial-of-service and then other users can no longer login/sign-in to the affected third-party service. Once this third-party service uses Google Sign-In with google-api-cpp-client, a malicious user can trigger this client/auth/oauth2_authorization.cc vulnerability by requesting the client to receive the ID token from a Google authentication server.
CVSS Score: 8.6 (HIGH)
CWE: CWE-754
References: https://github.com/google/google-api-cpp-client/issues/57; https://github.com/google/google-api-cpp-client/pull/58; https://github.com/google/google-api-cpp-client/issues/57
CVE: CVE-2018-8029
Published: 2019-05-30
Description: In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/108518; https://lists.apache.org/thread.html/0b8d58e02dbd0fb8bf7320c514fe58da1d6728bdc150f1ba04e0d9fc%40%3Cissues.hbase.apache.org%3E; https://lists.apache.org/thread.html/17084c09e6dedf60efe08028b429c92ffd28aacc28454e4fa924578a%40%3Cgeneral.hadoop.apache.org%3E
CVE: CVE-2019-11091
Published: 2019-05-30
Description: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS Score: 5.6 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.html
CVE: CVE-2019-8457
Published: 2019-05-30
Description: SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html; https://kc.mcafee.com/corporate/index?page=content&id=SB10365; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/
CVE: CVE-2018-13368
Published: 2019-05-30
Description: A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the command injection.
CVSS Score: 7.8 (HIGH)
References: https://fortiguard.com/advisory/FG-IR-18-108; https://fortiguard.com/advisory/FG-IR-18-108
CVE: CVE-2018-4048
Published: 2019-05-30
Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0722; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0722
CVE: CVE-2018-9191
Published: 2019-05-30
Description: A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates.
CVSS Score: 7.8 (HIGH)
References: https://fortiguard.com/advisory/FG-IR-18-108; https://fortiguard.com/advisory/FG-IR-18-108
CVE: CVE-2018-9193
Published: 2019-05-30
Description: A researcher has disclosed several vulnerabilities against FortiClient for Windows version 6.0.5 and below, version 5.6.6, the combination of these vulnerabilities can turn into an exploit chain, which allows a user to gain system privileges on Microsoft Windows.
CVSS Score: 7.8 (HIGH)
References: https://fortiguard.com/advisory/FG-IR-18-108; https://fortiguard.com/advisory/FG-IR-18-108
CVE: CVE-2018-10948
Published: 2019-05-30
Description: Synacor Zimbra Admin UI in Zimbra Collaboration Suite before 8.8.0 beta 2 has Persistent XSS via mail addrs.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=107948; https://bugzilla.zimbra.com/show_bug.cgi?id=107948
CVE: CVE-2018-14425
Published: 2019-05-30
Description: There is a Persistent XSS vulnerability in the briefcase component of Synacor Zimbra Collaboration Suite (ZCS) Zimbra Web Client (ZWC) 8.8.8 before 8.8.8 Patch 7 and 8.8.9 before 8.8.9 Patch 1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=108970; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=108970
CVE: CVE-2019-9723
Published: 2019-05-30
Description: LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://blog.ripstech.com/2019/logicaldoc-path-traversal/; https://blog.ripstech.com/2019/logicaldoc-path-traversal/
CVE: CVE-2015-2230
Published: 2019-05-30
Description: Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=97625; https://wiki.zimbra.com/wiki/Security_Center; https://bugzilla.zimbra.com/show_bug.cgi?id=97625
CVE: CVE-2015-7609
Published: 2019-05-30
Description: Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=101435; https://bugzilla.zimbra.com/show_bug.cgi?id=101436; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2019-12480
Published: 2019-05-30
Description: BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in AtomicWriteFile, AtomicReadFile and DeviceCommunicationControl services. An unauthenticated remote attacker could cause a denial of service (bacserv daemon crash) because there is an invalid read in bacdcode.c during parsing of alarm tag numbers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://packetstormsecurity.com/files/153716/BACnet-Stack-0.8.6-Denial-Of-Service.html; https://1modm.github.io/CVE-2019-12480.html; https://sourceforge.net/p/bacnet/bugs/62/
CVE: CVE-2019-12481
Published: 2019-05-30
Description: An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1249; https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html; https://github.com/gpac/gpac/issues/1249
CVE: CVE-2019-12482
Published: 2019-05-30
Description: An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, as demonstrated by MP4Box.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1249; https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html; https://github.com/gpac/gpac/issues/1249
CVE: CVE-2019-12483
Published: 2019-05-30
Description: An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, as demonstrated by MP4Box.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/1249; https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html; https://github.com/gpac/gpac/issues/1249
CVE: CVE-2019-12493
Published: 2019-05-31
Description: A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace mishandle tint transform functions. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41806; https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJJD7X3ES7ZHJUY2R3DAVCJPV23R64VK/
CVE: CVE-2019-12495
Published: 2019-05-31
Description: An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. Compiling a crafted source file leads to a one-byte out-of-bounds write in the gsym_addr function in x86_64-gen.c. This occurs because tccasm.c mishandles section switches.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108541; https://lists.nongnu.org/archive/html/tinycc-devel/2019-05/msg00044.html; https://repo.or.cz/tinycc.git/commit/d04ce7772c2bc2781ab2502e0b1f[PII_REDACTED]b5
CVE: CVE-2019-12496
Published: 2019-05-31
Description: An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/hybridgroup/gobot/compare/ed53198...7f973df; https://github.com/hybridgroup/gobot/releases/tag/v1.13.0; https://github.com/hybridgroup/gobot/compare/ed53198...7f973df
CVE: CVE-2019-12499
Published: 2019-05-31
Description: Firejail before 0.9.60 allows truncation (resizing to length 0) of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail (with the exploit code inside) needs to be started as root, and it also needs to be terminated as root from the host (either by stopping it ungracefully (e.g., SIGKILL), or by using the --shutdown control command). This is similar to CVE-2019-5736.
CVSS Score: 8.1 (HIGH)
References: https://github.com/netblue30/firejail/issues/2401; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CDY7B73YDRBURA25APSHD5PFEO4TNSFW/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGVULJ6IKVDO6UAVIQRHQVSKOUD6QDWM/
CVE: CVE-2019-12500
Published: 2019-05-31
Description: The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://blog.zimperium.com/dont-give-me-a-brake-xiaomi-scooter-hack-enables-dangerous-accelerations-and-stops-for-unsuspecting-riders/; https://blog.zimperium.com/dont-give-me-a-brake-xiaomi-scooter-hack-enables-dangerous-accelerations-and-stops-for-unsuspecting-riders/
CVE: CVE-2019-12502
Published: 2019-05-31
Description: There is a lack of CSRF countermeasures on MOBOTIX S14 MX-V4.2.1.61 cameras, as demonstrated by adding an admin account via the /admin/access URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/llandeilocymro/55a61e3730cdef56ab5806a677ba0891; https://gist.github.com/llandeilocymro/55a61e3730cdef56ab5806a677ba0891
CVE: CVE-2019-12507
Published: 2019-05-31
Description: An XSS vulnerability exists in PHPRelativePath (aka Relative Path) through 1.0.2 via the RelativePath.Example1.php path parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Grandt/PHPRelativePath/pull/5; https://github.com/Grandt/PHPRelativePath/pull/5/commits/13273e019d737f8eb4d7b1fe1eb665185dddfb5a; https://github.com/Grandt/PHPRelativePath/pull/5
CVE: CVE-2019-10321
Published: 2019-05-31
Description: A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20%281%29
CVE: CVE-2019-10322
Published: 2019-05-31
Description: A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20%281%29
CVE: CVE-2019-10323
Published: 2019-05-31
Description: A missing permission check in Jenkins Artifactory Plugin 3.2.3 and earlier in various 'fillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1015%20%282%29
CVE: CVE-2019-10324
Published: 2019-05-31
Description: A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseAction#doSubmit, GradleReleaseApiAction#doStaging, MavenReleaseApiAction#doStaging, and UnifiedPromoteBuildAction#doSubmit allowed attackers to schedule a release build, perform release staging for Gradle and Maven projects, and promote previously staged builds, respectively.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1347
CVE: CVE-2019-10325
Published: 2019-05-31
Description: A cross-site scripting vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attacker with Job/Configure permission to inject arbitrary JavaScript in build overview pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1373
CVE: CVE-2019-10326
Published: 2019-05-31
Description: A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1391
CVE: CVE-2019-10327
Published: 2019-05-31
Description: An XML external entities (XXE) vulnerability in Jenkins Pipeline Maven Integration Plugin 1.7.0 and earlier allowed attackers able to control a temporary directory's content on the agent running the Maven build to have Jenkins parse a maliciously crafted XML file that uses external entities for extraction of secrets from the Jenkins master, server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1409
CVE: CVE-2019-10328
Published: 2019-05-31
Description: Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-693
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://access.redhat.com/errata/RHBA-2019:1605
CVE: CVE-2019-10329
Published: 2019-05-31
Description: Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1403
CVE: CVE-2019-10330
Published: 2019-05-31
Description: Jenkins Gitea Plugin 1.1.1 and earlier did not implement trusted revisions, allowing attackers without commit access to the Git repo to change Jenkinsfiles even if Jenkins is configured to consider them to be untrusted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/05/31/2; http://www.securityfocus.com/bid/108540; https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1046
CVE: CVE-2019-9871
Published: 2019-05-31
Description: Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.nccst.nat.gov.tw; https://github.com/cvereveal/CVEs/tree/master/CVE-2019-9871; http://www.nccst.nat.gov.tw
CVE: CVE-2019-10981
Published: 2019-05-31
Description: In Vijeo Citect 7.30 and 7.40, and CitectSCADA 7.30 and 7.40, a vulnerability has been identified that may allow an authenticated local user access to Citect user credentials.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522, CWE-522
References: http://www.securityfocus.com/bid/108543; https://ics-cert.us-cert.gov/advisories/ICSA-19-150-01; https://security.cse.iitk.ac.in/responsible-disclosure
CVE: CVE-2019-9874
Published: 2019-05-31
Description: Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://dev.sitecore.net/Downloads.aspx; https://www.synacktiv.com/blog.html; https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf
CVE: CVE-2019-9875
Published: 2019-05-31
Description: Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://dev.sitecore.net/Downloads.aspx; https://www.synacktiv.com/blog.html; https://www.synacktiv.com/ressources/advisories/Sitecore_CSRF_deserialize_RCE.pdf
CVE: CVE-2019-9891
Published: 2019-05-31
Description: The function getopt_simple as described in Advanced Bash Scripting Guide (ISBN[PII_REDACTED]184) allows privilege escalation and execution of commands when used in a shell script called, for example, via sudo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.redteam-pentesting.de/advisories/rt-sa-2019-007; https://www.redteam-pentesting.de/advisories/rt-sa-2019-007