deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15664
Published: 2020-03-20
Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges (issue 2 of 2).
CVSS Score: 2.7 (LOW)
CWE: CWE-125
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0008/FEYE-2019-0008.md; https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf; https://www.killernetworking.com
CVE: CVE-2019-15665
Published: 2020-03-20
Description: An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0009/FEYE-2019-0009.md; https://support.killernetworking.com/downloads/ReleaseNotes/KillerSoftware_Release_Notes_2.1.1352.pdf; https://www.killernetworking.com
CVE: CVE-2019-16258
Published: 2020-03-20
Description: The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-306
References: https://store.hom.ee/collections/all/products/homee-brain-cube; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-026.txt; https://store.hom.ee/collections/all/products/homee-brain-cube
CVE: CVE-2019-19148
Published: 2020-03-20
Description: Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148; https://github.com/ellwoodthewood/tellabs_rce; https://docs.tellabs.com/articles/#%21vulnerability-response/cve-2019-19148
CVE: CVE-2019-19324
Published: 2020-03-20
Description: Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://github.com/xmidt-org/cjwt/commit/9304d3e94242c1a6df77b21bde0e949392e1040a; https://github.com/xmidt-org/cjwt/pull/29#issuecomment-558356866; https://github.com/xmidt-org/cjwt/commit/9304d3e94242c1a6df77b21bde0e949392e1040a
CVE: CVE-2020-10792
Published: 2020-03-20
Description: openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: https://github.com/it-novum/openITCOCKPIT/commit/719410b9ffff7d7b29dba7aad58faceb5eff789f; https://openitcockpit.io/2020/2020/03/23/openitcockpit-3-7-3-released/; https://github.com/it-novum/openITCOCKPIT/commit/719410b9ffff7d7b29dba7aad58faceb5eff789f
CVE: CVE-2020-9425
Published: 2020-03-20
Description: An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the rest of the page still executed, resulting in the disclosure of cleartext credentials in the response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://blog.hivint.com/rconfig-3-9-3-unauthenticated-sensitive-information-disclosure-ead4ed88f153; https://github.com/rconfig/rconfig/commit/20f4e3d87e84663d922b937842fddd9af1b68dd9; https://blog.hivint.com/rconfig-3-9-3-unauthenticated-sensitive-information-disclosure-ead4ed88f153
CVE: CVE-2019-12498
Published: 2020-03-20
Description: The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/2098577/wp-live-chat-support/trunk; https://plugins.trac.wordpress.org/log/wp-live-chat-support/; https://wordpress.org/plugins/wp-live-chat-support/#developers
CVE: CVE-2019-13389
Published: 2020-03-20
Description: RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RainLoop/rainloop-webmail/commit/8eb4588917b4741889fdd905d4c32e3e86317693; https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html; https://github.com/RainLoop/rainloop-webmail/commit/8eb4588917b4741889fdd905d4c32e3e86317693
CVE: CVE-2020-10558
Published: 2020-03-20
Description: The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notifications, along with other miscellaneous functions from the main screen.
CVSS Score: 6.5 (MEDIUM)
References: https://cylect.io/blog/Tesla_Model_3_Vuln/; https://safekeepsecurity.com/about/cve-2020-10558/; https://cylect.io/blog/Tesla_Model_3_Vuln/
CVE: CVE-2020-7961
Published: 2020-03-20
Description: Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/157254/Liferay-Portal-Java-Unmarshalling-Remote-Code-Execution.html; http://packetstormsecurity.com/files/158392/Liferay-Portal-Remote-Code-Execution.html; https://portal.liferay.dev/learn/security/known-vulnerabilities
CVE: CVE-2020-8134
Published: 2020-03-20
Description: Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal systems.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://hackerone.com/reports/793704; https://hackerone.com/reports/793704
CVE: CVE-2020-8135
Published: 2020-03-20
Description: The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://hackerone.com/reports/786956; https://hackerone.com/reports/786956
CVE: CVE-2020-8136
Published: 2020-03-20
Description: Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/804772; https://hackerone.com/reports/804772
CVE: CVE-2020-8137
Published: 2020-03-20
Description: Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://hackerone.com/reports/772448; https://hackerone.com/reports/772448
CVE: CVE-2020-8877
Published: 2020-03-20
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9624.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-300/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8878
Published: 2020-03-20
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9625.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-301/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8879
Published: 2020-03-20
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9626.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-302/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8880
Published: 2020-03-20
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of TIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9773.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-303/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8881
Published: 2020-03-20
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of TIF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9774.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-304/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8882
Published: 2020-03-20
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the PSD files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9811.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-305/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2020-8883
Published: 2020-03-20
Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of EPS files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9880.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.zerodayinitiative.com/advisories/ZDI-20-306/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2019-13463
Published: 2020-03-20
Description: An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term->name" statement.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?old_path=%2Fsimple-link-directory&old=2111131&new_path=%2Fsimple-link-directory&new=2111132&sfp_email=&sfph_mail=; https://wordpress.org/plugins/simple-link-directory/#developers; https://plugins.trac.wordpress.org/changeset?old_path=%2Fsimple-link-directory&old=2111131&new_path=%2Fsimple-link-directory&new=2111132&sfp_email=&sfph_mail=
CVE: CVE-2019-15522
Published: 2020-03-20
Description: An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/LINBIT/csync2/commit/416f1de878ef97e27e27508914f7ba8599a0be22; https://github.com/LINBIT/csync2/commit/416f1de878ef97e27e27508914f7ba8599a0be22
CVE: CVE-2019-16528
Published: 2020-03-20
Description: An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL1_32 and REL1_33.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538051/; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538053/; https://gerrit.wikimedia.org/r/c/mediawiki/extensions/AbuseFilter/+/538054/
CVE: CVE-2019-18641
Published: 2020-03-20
Description: Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/160766/Rock-RMS-File-Upload-Account-Takeover-Information-Disclosure.html; http://seclists.org/fulldisclosure/2021/Jan/1; https://github.com/SparkDevNetwork/Rock/commit/576f5ec22b1c43f123a377612981c68538167c61
CVE: CVE-2019-18860
Published: 2020-03-20
Description: Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00018.html; https://github.com/squid-cache/squid/pull/504; https://github.com/squid-cache/squid/pull/505
CVE: CVE-2020-10194
Published: 2020-03-20
Description: cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the galsync account in the request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/Zimbra/zm-mailbox/commit/1df440e0efa624d1772a05fb6d397d9beb4bda1e; https://github.com/Zimbra/zm-mailbox/compare/8.8.15.p7...8.8.15.p8; https://github.com/Zimbra/zm-mailbox/pull/1020
CVE: CVE-2020-8138
Published: 2020-03-20
Description: A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability when subscribing to a malicious calendar URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://hackerone.com/reports/736867; https://nextcloud.com/security/advisory/?id=NC-SA-2020-014; https://hackerone.com/reports/736867
CVE: CVE-2020-8139
Published: 2020-03-20
Description: A missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide-download shares to be downloadable when appending /download to the URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://hackerone.com/reports/788257; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP/; https://nextcloud.com/security/advisory/?id=NC-SA-2020-015
CVE: CVE-2020-8140
Published: 2020-03-20
Description: A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://hackerone.com/reports/633266; https://nextcloud.com/security/advisory/?id=NC-SA-2020-016; https://hackerone.com/reports/633266
CVE: CVE-2019-11574
Published: 2020-03-20
Description: An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://pastebin.com/raw/prE3iiLm; https://www.simplemachines.org/community/index.php?board=1.0; https://pastebin.com/raw/prE3iiLm
CVE: CVE-2020-10799
Published: 2020-03-20
Description: The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/deeplook/svglib/issues/229; https://github.com/deeplook/svglib/issues/229
CVE: CVE-2013-7487
Published: 2020-03-21
Description: On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html; http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html
CVE: CVE-2019-12767
Published: 2020-03-21
Description: An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf
CVE: CVE-2019-17185
Published: 2020-03-21
Description: In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-662
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html; https://freeradius.org/security/; https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20
CVE: CVE-2019-18936
Published: 2020-03-21
Description: UniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class internal data reaches an inconsistent state) via input data that triggers an error.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://github.com/jgarzik/univalue/compare/v1.0.4...v1.0.5; https://github.com/jgarzik/univalue/pull/58; https://github.com/jgarzik/univalue/compare/v1.0.4...v1.0.5
CVE: CVE-2020-10800
Published: 2020-03-21
Description: lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is associated with attacker-controlled executable content in the postDownload field.
CVSS Score: 8.1 (HIGH)
References: https://www.npmjs.com/advisories/1306; https://www.npmjs.com/advisories/1306
CVE: CVE-2020-10804
Published: 2020-03-22
Description: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). A malicious user with access to the server could create a crafted username, and then trick the victim into performing specific actions with that user account (such as editing its privileges).
CVSS Score: 8.0 (HIGH)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00050.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00005.html
CVE: CVE-2020-10802
Published: 2020-03-22
Description: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.
CVSS Score: 8.0 (HIGH)
CWE: CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00050.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00005.html
CVE: CVE-2020-10803
Published: 2020-03-22
Description: In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results (in tbl_get_field.php and libraries/classes/Display/Results.php). The attacker must be able to insert crafted data into certain database tables, which when retrieved (for instance, through the Browse tab) can trigger the XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-89
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00050.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00005.html
CVE: CVE-2020-10806
Published: 2020-03-22
Description: eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads; https://ezplatform.com/security-advisories/ezsa-2020-001-remote-code-execution-in-file-uploads