deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11249
Published: 2019-08-29
Description: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-61, CWE-22
References: https://access.redhat.com/errata/RHBA-2019:2794; https://access.redhat.com/errata/RHBA-2019:2816; https://access.redhat.com/errata/RHBA-2019:2824
CVE: CVE-2019-11250
Published: 2019-08-29
Description: The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic or bearer token authentication, and run at high verbosity levels, are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: http://www.openwall.com/lists/oss-security/2020/10/16/2; https://access.redhat.com/errata/RHSA-2019:4052; https://access.redhat.com/errata/RHSA-2019:4087
CVE: CVE-2019-13405
Published: 2019-08-29
Description: A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://surl.twcert.org.tw/VeNHn; https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md; https://tvn.twcert.org.tw/taiwanvn/TVN-201906006
CVE: CVE-2019-13406
Published: 2019-08-29
Description: A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to install arbitrary APK without any authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://surl.twcert.org.tw/hVut7; https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md; https://tvn.twcert.org.tw/taiwanvn/TVN-201906007
CVE: CVE-2019-13407
Published: 2019-08-29
Description: A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://surl.twcert.org.tw/SpTwh; https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md; https://tvn.twcert.org.tw/taiwanvn/TVN-201906008
CVE: CVE-2019-13408
Published: 2019-08-29
Description: A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22, CWE-862
References: http://surl.twcert.org.tw/2bvXq; https://gist.github.com/keniver/f5155b42eb278ec0273b83565b64235b#file-androvideo-advan-vd-1-multiple-vulnerabilities-md; https://tvn.twcert.org.tw/taiwanvn/TVN-201906009
CVE: CVE-2019-15757
Published: 2019-08-29
Description: libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00037.html
CVE: CVE-2019-5530
Published: 2019-08-29
Description: Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authenticode signature.
CVSS Score: 7.8 (HIGH)
References: https://blog.bitrock.com/2019/08/installer-tampering-while-preserving.html; https://blog.bitrock.com/2019/08/installer-tampering-while-preserving.html
CVE: CVE-2019-15758
Published: 2019-08-29
Description: An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/WebAssembly/binaryen/issues/2288; https://github.com/WebAssembly/binaryen/pull/2290; https://github.com/WebAssembly/binaryen/issues/2288
CVE: CVE-2019-15759
Published: 2019-08-29
Description: An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/WebAssembly/binaryen/issues/2288; https://github.com/WebAssembly/binaryen/pull/2289; https://github.com/WebAssembly/binaryen/issues/2288
CVE: CVE-2019-15767
Published: 2019-08-29
Description: In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZA4UCVURQXNLUNFAMRLZBAFRHSEVC6Q/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TB4FURVE4C35UDXGAAHJL5NIHJQ3WDZT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGIICRUZRFAK5M7SNHZKR7SKE77SFKWE/
CVE: CVE-2018-21007
Published: 2019-08-29
Description: The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://wordpress.org/plugins/woo-confirmation-email/#developers; https://wpvulndb.com/vulnerabilities/9847; https://wordpress.org/plugins/woo-confirmation-email/#developers
CVE: CVE-2019-14943
Published: 2019-08-29
Description: An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://about.gitlab.com/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/; https://about.gitlab.com/blog/categories/releases/; https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4530
CVE: CVE-2019-15769
Published: 2019-08-29
Description: The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/handl-utm-grabber/#developers; https://wpvulndb.com/vulnerabilities/9848; https://www.pluginvulnerabilities.com/2019/08/26/our-proactive-monitoring-caught-an-authenticated-option-update-vulnerability-in-handl-utm-grabber/
CVE: CVE-2019-15770
Published: 2019-08-29
Description: The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/woo-address-book/#developers; https://wpvulndb.com/vulnerabilities/9849; https://wordpress.org/plugins/woo-address-book/#developers
CVE: CVE-2019-15772
Published: 2019-08-29
Description: The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/nd-donations/#developers; https://wpvulndb.com/vulnerabilities/9493
CVE: CVE-2019-15773
Published: 2019-08-29
Description: The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/nd-travel/#developers; https://wpvulndb.com/vulnerabilities/9491
CVE: CVE-2019-15774
Published: 2019-08-29
Description: The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/nd-booking/#developers; https://wpvulndb.com/vulnerabilities/9494
CVE: CVE-2019-15775
Published: 2019-08-29
Description: The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/nd-learning/#developers; https://wpvulndb.com/vulnerabilities/9496
CVE: CVE-2019-15776
Published: 2019-08-29
Description: The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/simple-301-redirects-addon-bulk-uploader/#developers; https://wpvulndb.com/vulnerabilities/9503
CVE: CVE-2019-15777
Published: 2019-08-29
Description: The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/shapepress-dsgvo/#developers; https://wpvulndb.com/vulnerabilities/9850; https://www.pluginvulnerabilities.com/2019/08/22/gdpr-plugins-for-wordpress-continue-to-be-insecure/
CVE: CVE-2019-15780
Published: 2019-08-29
Description: The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://pentest.co.uk/labs/advisory/cve-2019-15780/; https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt; https://wordpress.org/plugins/formidable/#developers
CVE: CVE-2019-15782
Published: 2019-08-29
Description: WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/webtorrent/webtorrent/compare/v0.107.5...v0.107.6; https://github.com/webtorrent/webtorrent/pull/1714; https://hackerone.com/reports/681617
CVE: CVE-2019-15783
Published: 2019-08-29
Description: Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/mandovinnie/Lute-Tab/pull/2; https://github.com/mandovinnie/Lute-Tab/pull/2
CVE: CVE-2019-15787
Published: 2019-08-29
Description: libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/Inner-Heaven/libzetta-rs/pull/89; https://github.com/Inner-Heaven/libzetta-rs/pull/89
CVE: CVE-2019-15745
Published: 2019-08-29
Description: The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP port 27431. An attacker on the local network can use the same key to encrypt and send commands to discover all smart plugs in a network, take over control of a device, and perform actions such as turning it on and off.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://github.com/iamckn/eques; https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-four/; https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-one/
CVE: CVE-2019-15771
Published: 2019-08-29
Description: The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/; https://wordpress.org/plugins/nd-shortcodes/#developers; https://wpvulndb.com/vulnerabilities/9485
CVE: CVE-2019-15778
Published: 2019-08-29
Description: The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/woo-variation-gallery/#developers; https://wpvulndb.com/vulnerabilities/9852; https://www.pluginvulnerabilities.com/2019/08/20/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce/
CVE: CVE-2019-15779
Published: 2019-08-29
Description: The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/insta-gallery/#developers; https://wpvulndb.com/vulnerabilities/9853; https://wordpress.org/plugins/insta-gallery/#developers
CVE: CVE-2019-15781
Published: 2019-08-29
Description: The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/facebook-by-weblizar/#developers; https://wpvulndb.com/vulnerabilities/9851; https://wordpress.org/plugins/facebook-by-weblizar/#developers
CVE: CVE-2019-15784
Published: 2019-08-29
Description: Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html; https://github.com/Haivision/srt/pull/811
CVE: CVE-2019-15785
Published: 2019-08-29
Description: FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/fontforge/fontforge/commit/626f751752875a0ddd74b9e217b6f[PII_REDACTED]c; https://github.com/fontforge/fontforge/pull/3886; https://security.gentoo.org/glsa/202004-14
CVE: CVE-2019-15786
Published: 2019-08-29
Description: ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/ROBOTIS-GIT/DynamixelSDK/pull/339; https://github.com/ROBOTIS-GIT/DynamixelSDK/pull/339
CVE: CVE-2019-15788
Published: 2019-08-29
Description: Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/clara-genomics/ClaraGenomicsAnalysis/compare/6dc3061...416af9f; https://github.com/clara-genomics/ClaraGenomicsAnalysis/pull/70; https://github.com/clara-genomics/ClaraGenomicsAnalysis/compare/6dc3061...416af9f
CVE: CVE-2019-11500
Published: 2019-08-29
Description: In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00026.html; http://www.openwall.com/lists/oss-security/2019/08/28/3
CVE: CVE-2019-11476
Published: 2019-08-29
Description: An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html; https://bugs.launchpad.net/ubuntu/%2Bsource/whoopsie/%2Bbug/1830863; https://usn.ubuntu.com/4052-1/
CVE: CVE-2019-3394
Published: 2019-08-29
Description: There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under <install-directory>/confluence/WEB-INF directory, which may contain configuration files used for integrating with other services, which could potentially leak credentials or other sensitive information such as LDAP credentials. The LDAP credential will be potentially leaked only if the Confluence server is configured to use LDAP as user repository. All versions of Confluence Server from 6.1.0 before 6.6.16 (the fixed version for 6.6.x), from 6.7.0 before 6.13.7 (the fixed version for 6.13.x), and from 6.14.0 before 6.15.8 (the fixed version for 6.15.x) are affected by this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://confluence.atlassian.com/x/uAsvOg; https://jira.atlassian.com/browse/CONFSERVER-58734; https://confluence.atlassian.com/x/uAsvOg
CVE: CVE-2019-4132
Published: 2019-08-29
Description: IBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain sensitive information rather than receive a 404 error message. IBM X-Force ID: 158274.
CVSS Score: 3.3 (LOW)
References: http://www.ibm.com/support/docview.wss?uid=ibm10967477; https://exchange.xforce.ibmcloud.com/vulnerabilities/158274; http://www.ibm.com/support/docview.wss?uid=ibm10967477
CVE: CVE-2019-4133
Published: 2019-08-29
Description: IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to run a custom script. IBM X-Force ID: 158278.
CVSS Score: 5.2 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158278; https://www.ibm.com/support/docview.wss?uid=ibm10967359; https://exchange.xforce.ibmcloud.com/vulnerabilities/158278
CVE: CVE-2019-4536
Published: 2019-08-29
Description: IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165592; https://www.ibm.com/support/docview.wss?uid=ibm11071586; https://exchange.xforce.ibmcloud.com/vulnerabilities/165592
CVE: CVE-2019-7307
Published: 2019-08-29
Description: Apport before versions 2.14.1-0ubuntu3.29+esm1, 2.20.1-0ubuntu2.19, 2.20.9-0ubuntu7.7, 2.20.10-0ubuntu27.1, 2.20.11-0ubuntu5 contained a TOCTTOU vulnerability when reading the users ~/.apport-ignore.xml file, which allows a local attacker to replace this file with a symlink to any other file on the system and so cause Apport to include the contents of this other file in the resulting crash report. The crash report could then be read by that user either by causing it to be uploaded and reported to Launchpad, or by leveraging some other vulnerability to read the resulting crash report, and so allow the user to read arbitrary files on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html; https://bugs.launchpad.net/ubuntu/%2Bsource/apport/%2Bbug/1830858; https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-7307.html
CVE: CVE-2019-15502
Published: 2019-08-29
Description: The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE).
CVSS Score: 7.5 (HIGH)
References: https://forum.teamspeak.com/threads/141134-Release-TeamSpeak-Client-3-3-2; https://r4p3.net/threads/teamkilled-new-teamspeak-crash.8144/; https://www.youtube.com/watch?v=PlVbPIs75D4
CVE: CVE-2019-15717
Published: 2019-08-29
Description: Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2019/08/29/3; http://www.openwall.com/lists/oss-security/2019/08/29/5; https://irssi.org/security/irssi_sa_2019_08.txt
CVE: CVE-2019-14437
Published: 2019-08-29
Description: The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a result, a heap-based buffer over-read can be triggered via a crafted .ogg file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-129
References: http://git.videolan.org/?p=vlc.git&a=search&h=refs%2Fheads%2Fmaster&st=commit&s=cve-2019; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE: CVE-2019-14438
Published: 2019-08-29
Description: A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer over-read via a crafted .ogg file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://git.videolan.org/?p=vlc.git&a=search&h=refs%2Fheads%2Fmaster&st=commit&s=cve-2019; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE: CVE-2019-14498
Published: 2019-08-29
Description: A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted CAF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-369
References: http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE: CVE-2019-14535
Published: 2019-08-29
Description: A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be triggered via a crafted WMV file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-369
References: http://git.videolan.org/?p=vlc.git&a=search&h=refs/heads/master&st=commit&s=cve-2019; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00046.html
CVE: CVE-2019-15805
Published: 2019-08-29
Description: CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://medium.com/%40v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570; https://medium.com/%40v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570