deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-3862
Published: 2019-03-21
Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Score: 7.3 (HIGH)
CWE: CWE-130, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html
CVE: CVE-2019-4094
Published: 2019-03-21
Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158014; https://www.ibm.com/support/docview.wss?uid=ibm10875860; https://exchange.xforce.ibmcloud.com/vulnerabilities/158014
CVE: CVE-2019-5011
Published: 2019-03-21
Description: An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0759; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0759
CVE: CVE-2019-5413
Published: 2019-03-21
Description: An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-77
References: https://hackerone.com/reports/390881; https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E; https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef[PII_REDACTED]c39f12d63%40%3Cnotifications.netbeans.apache.org%3E
CVE: CVE-2019-5414
Published: 2019-03-21
Description: If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77, CWE-78
References: https://hackerone.com/reports/389561; https://hackerone.com/reports/389561
CVE: CVE-2019-5415
Published: 2019-03-21
Description: A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548, CWE-269
References: https://hackerone.com/reports/330724; https://hackerone.com/reports/330724
CVE: CVE-2019-5416
Published: 2019-03-21
Description: A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/334837; https://hackerone.com/reports/334837
CVE: CVE-2019-5417
Published: 2019-03-21
Description: A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://hackerone.com/reports/358645; https://hackerone.com/reports/358645
CVE: CVE-2019-5722
Published: 2019-03-21
Description: An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handling, it has various SQL injections, including on the login form, and on the search form for a key ring number.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/151117/PORTIER-4.4.4.2-4.4.4.6-SQL-Injection.html; https://seclists.org/bugtraq/2019/Jan/7; https://www.exploit-db.com/exploits/46163/
CVE: CVE-2019-5723
Published: 2019-03-21
Description: An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Passwords are stored using reversible encryption rather than as a hash value, and the used Vigenere algorithm is badly outdated. Moreover, the encryption key is static and too short. Due to this, the passwords stored by the application can be easily decrypted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327, CWE-522
References: http://packetstormsecurity.com/files/151118/PORTIER-4.4.4.2-4.4.4.6-Cryptographic-Issues.html; https://seclists.org/bugtraq/2019/Jan/8; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-011.txt
CVE: CVE-2019-5729
Published: 2019-03-21
Description: Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://www.splunk.com/view/SP-CAAAQAD; https://www.splunk.com/view/SP-CAAAQAD
CVE: CVE-2019-5885
Published: 2019-03-21
Description: Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/32Y6KD3OAHCG5P33HC2QEX3NUZOSXCGZ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMCLO5PUPBA756UKY72PKUWL4RRM4W6K/; https://matrix.org/blog/2019/01/10/critical-security-update-synapse-0-34-0-1-synapse-0-34-1-1/
CVE: CVE-2019-6116
Published: 2019-03-21
Description: In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.html; http://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.html
CVE: CVE-2019-6272
Published: 2019-03-21
Description: Command injection vulnerability in login_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html; https://www.exploit-db.com/exploits/46179/; http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html
CVE: CVE-2019-6273
Published: 2019-03-21
Description: download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html; https://www.exploit-db.com/exploits/46179/; http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html
CVE: CVE-2019-6274
Published: 2019-03-21
Description: Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via directory traversal sequences.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html; https://www.exploit-db.com/exploits/46179/; http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html
CVE: CVE-2019-6275
Published: 2019-03-21
Description: Command injection vulnerability in firmware_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html; https://www.exploit-db.com/exploits/46179/; http://packetstormsecurity.com/files/151207/GL-AR300M-Lite-2.2.7-Command-Injection-Directory-Traversal.html
CVE: CVE-2019-6279
Published: 2019-03-21
Description: ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/151274/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html; http://packetstormsecurity.com/files/152166/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html; https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-incorrect-access-control/
CVE: CVE-2019-6282
Published: 2019-03-21
Description: ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151275/PLC-Wireless-Router-GPN2.4P21-C-CN-Cross-Site-Request-Forgery.html; http://packetstormsecurity.com/files/152167/PLC-Wireless-Router-GPN2.4P21-C-CN-Cross-Site-Request-Forgery.html; https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-cross-site-request-forgery-csrf/
CVE: CVE-2019-6441
Published: 2019-03-21
Description: An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html; https://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html; https://vulmon.com/exploitdetails?qidtp=EDB&qid=46180
CVE: CVE-2019-6454
Published: 2019-03-21
Description: An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html; http://www.openwall.com/lists/oss-security/2019/02/18/3
CVE: CVE-2019-6492
Published: 2019-03-21
Description: SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2019-6501
Published: 2019-03-21
Description: In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: http://www.openwall.com/lists/oss-security/2019/01/24/1; https://access.redhat.com/errata/RHSA-2019:2166; https://access.redhat.com/errata/RHSA-2019:2425
CVE: CVE-2019-6690
Published: 2019-03-21
Description: python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00058.html; http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.html
CVE: CVE-2019-6702
Published: 2019-03-21
Description: The MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this CVE only applies to obsolete versions from 2016 or earlier.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/151524/Qkr-With-MasterPass-Man-In-The-Middle.html; http://seclists.org/fulldisclosure/2019/Feb/21; https://seclists.org/bugtraq/2019/Feb/28
CVE: CVE-2019-6714
Published: 2019-03-21
Description: An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if an authenticated user uploads a PostView.ascx file using the file manager utility, which is currently allowed. This results in remote code execution for an authenticated user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/151628/BlogEngine.NET-3.3.6-Directory-Traversal-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Jun/26; https://blogengine.io/
CVE: CVE-2019-6716
Published: 2019-03-21
Description: An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-639
References: http://packetstormsecurity.com/files/151373/LongBox-Limited-Access-Manager-Insecure-Direct-Object-Reference.html; https://www.exploit-db.com/exploits/46254/; https://www.logonbox.com/en/
CVE: CVE-2019-6724
Published: 2019-03-21
Description: The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://campus.barracuda.com/product/networkaccessclient/doc/78154147/release-notes-barracuda-vpn-client-for-macos/; https://blog.mirch.io/2019/02/14/cve-2019-6724-barracuda-vpn-client-privilege-escalation-on-linux-and-macos/; https://campus.barracuda.com/product/networkaccessclient/doc/78154149/release-notes-barracuda-vpn-client-for-linux/
CVE: CVE-2019-6727
Published: 2019-03-21
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the XFA remerge method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7347.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-133/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6728
Published: 2019-03-21
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7353.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-134/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6729
Published: 2019-03-21
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7423.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-135/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6730
Published: 2019-03-21
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the popUpMenu method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7368.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-136/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6731
Published: 2019-03-21
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7369.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-137/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6732
Published: 2019-03-21
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AFParseDateEx method. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7453.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-138/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6733
Published: 2019-03-21
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7576.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-139/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6734
Published: 2019-03-21
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the setInterval method. By performing actions in JavaScript, an attacker can cause a pointer to be reused after it has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7452.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-140/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6735
Published: 2019-03-21
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-7355.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-19-141/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-6778
Published: 2019-03-21
Description: In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html; http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
CVE: CVE-2019-6967
Published: 2019-03-21
Description: AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151372/AirTies-Air5341-Modem-1.0.0.12-Cross-Site-Request-Forgery.html; https://alicangonullu.biz/konu/3; https://twitter.com/alicangonullu
CVE: CVE-2019-6970
Published: 2019-03-21
Description: Moodle 3.5.x before 3.5.4 allows SSRF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6970; https://www.excellium-services.com/cert-xlm-advisory; https://www.excellium-services.com/cert-xlm-advisory/cve-2019-6970/