deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12447
Published: 2019-05-29
Description: An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file ownership because setfsuid is not used.
CVSS Score: 7.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html; http://www.openwall.com/lists/oss-security/2019/07/09/3
CVE: CVE-2019-12448
Published: 2019-05-29
Description: An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html; http://www.openwall.com/lists/oss-security/2019/07/09/3
CVE: CVE-2019-12449
Published: 2019-05-29
Description: An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-755
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00009.html; http://www.openwall.com/lists/oss-security/2019/07/09/3
CVE: CVE-2019-12450
Published: 2019-05-29
Description: file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276, CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00076.html; https://access.redhat.com/errata/RHSA-2019:3530; https://gitlab.gnome.org/GNOME/glib/commit/d8f8f4d637ce43f8699ba94c9b7648beda0ca174
CVE: CVE-2019-9221
Published: 2019-05-29
Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE: CVE-2019-9485
Published: 2019-05-29
Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.
CVSS Score: 9.8 (CRITICAL)
References: https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/
CVE: CVE-2019-9732
Published: 2019-05-29
Description: An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://about.gitlab.com/2019/03/14/gitlab-11-8-2-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/03/14/gitlab-11-8-2-released/
CVE: CVE-2019-9858
Published: 2019-05-29
Description: Remote code execution was discovered in Horde Groupware Webmail 5.2.22 and 5.2.17. Horde/Form/Type.php contains a vulnerable class that handles image upload in forms. When the Horde_Form_Type_image method onSubmit() is called on uploads, it invokes the functions getImage() and _getUpload(), which uses unsanitized user input as a path to save the image. The unsanitized POST parameter object[photo][img][file] is saved in the $upload[img][file] PHP variable, allowing an attacker to manipulate the $tmp_file passed to move_uploaded_file() to save the uploaded file. By setting the parameter to (for example) ../usr/share/horde/static/bd.php, one can write a PHP backdoor inside the web root. The static/ destination folder is a good candidate to drop the backdoor because it is always writable in Horde installations. (The unsanitized POST parameter went probably unnoticed because it's never submitted by the forms, which default to securely using a random path.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/152476/Horde-Form-Shell-Upload.html; https://lists.debian.org/debian-lts-announce/2019/06/msg00007.html; https://seclists.org/bugtraq/2019/Jun/31
CVE: CVE-2019-9865
Published: 2019-05-29
Description: When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1, a specially crafted RPC request can trigger an integer overflow leading to an out-of-bounds memory copy. It may allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: https://support2.windriver.com/index.php?page=security-notices; https://www.windriver.com/feeds/wind_river_security_notices.xml; https://support2.windriver.com/index.php?page=security-notices
CVE: CVE-2019-9866
Published: 2019-05-29
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x before 11.8.3. It allows Information Disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://about.gitlab.com/2019/03/20/critical-security-release-gitlab-11-dot-8-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/59003; https://about.gitlab.com/2019/03/20/critical-security-release-gitlab-11-dot-8-dot-3-released/
CVE: CVE-2018-13383
Published: 2019-05-29
Description: A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://fortiguard.com/advisory/FG-IR-18-388; https://fortiguard.com/advisory/FG-IR-20-229; https://fortiguard.com/advisory/FG-IR-18-388
CVE: CVE-2018-16217
Published: 2019-05-29
Description: The network diagnostic function (ping) in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.sit.fraunhofer.de/de/securitytestlab/; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=[PII_REDACTED]; https://www.sit.fraunhofer.de/de/securitytestlab/
CVE: CVE-2018-16218
Published: 2019-05-29
Description: A CSRF (Cross Site Request Forgery) in the web interface of the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware version 66.83.0.35 allows a remote attacker to trigger code execution or settings modification on the device by providing a crafted link to the victim.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.sit.fraunhofer.de/de/securitytestlab/; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=[PII_REDACTED]; https://www.sit.fraunhofer.de/de/securitytestlab/
CVE: CVE-2018-16221
Published: 2019-05-29
Description: The diagnostics web interface in the Yeahlink Ultra-elegant IP Phone SIP-T41P (firmware 66.83.0.35) does not validate (escape) the path information (path traversal), which allows an authenticated remote attacker to get access to privileged information (e.g., /etc/passwd) via path traversal (relative path information in the file parameter of the corresponding POST request).
CVSS Score: 8.0 (HIGH)
CWE: CWE-22
References: https://www.sit.fraunhofer.de/de/securitytestlab/; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Yealink_Ultra-elegantIPPhone_SIPT41P.pdf?_=[PII_REDACTED]; https://www.sit.fraunhofer.de/de/securitytestlab/
CVE: CVE-2018-19977
Published: 2019-05-29
Description: A command injection (missing input validation, escaping) in the ftp upgrade configuration interface on the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows an authenticated remote attacker (simple user) -- in the same network as the device -- to trigger OS commands (like starting telnetd or opening a reverse shell) via a POST request to the web server.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=[PII_REDACTED]; https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html
CVE: CVE-2018-19978
Published: 2019-05-29
Description: A buffer overflow vulnerability in the DHCP and PPPOE configuration interface of the Auerswald COMfort 1200 IP phone 3.4.4.1-10589 allows a remote attacker (authenticated as simple user in the same network as the device) to trigger remote code execution via a POST request (ManufacturerName parameter) to the web server on the device. The web server is running with root privileges and the injected code will also run with root privileges.
CVSS Score: 8.0 (HIGH)
CWE: CWE-119
References: https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Auerswald_COMfortel_1200_IP.pdf?_=[PII_REDACTED]; https://www.auerswald.de/de/service/81-telefone/schnurgebundene-telefone/1568-comfortel-1200-ip.html
CVE: CVE-2019-7129
Published: 2019-05-29
Description: Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html; https://helpx.adobe.com/security/products/aem-forms/apsb19-24.html
CVE: CVE-2019-11872
Published: 2019-05-29
Description: The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window. Successful exploitation grants an attacker with a right to execute malicious code on the administrator's computer through Excel functions as the plugin does not sanitize the user's input and allows insertion of any text.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://blog.reddy.io/2019/05/24/reddy-solutions-found-a-csv-injection-vulnerability-in-hustle-wordpress-plugin/; https://blog.reddy.io/category/cybersecurity/; https://wordpress.org/plugins/wordpress-popup/#developers
CVE: CVE-2019-12347
Published: 2019-05-29
Description: In pfSense 2.4.4-p3, a stored XSS vulnerability occurs when attackers inject a payload into the Name or Description field via an acme_accountkeys_edit.php action. The vulnerability occurs due to input validation errors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153112/pfSense-2.4.4-p3-Cross-Site-Scripting.html; https://ctrsec.io/index.php/2019/05/28/stored-xss-acme-pfsense-2-4-4-p3/; https://github.com/pfsense/FreeBSD-ports/commit/[PII_REDACTED]79e540689dbdbed3a579483c614275
CVE: CVE-2019-12452
Published: 2019-05-29
Description: types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control (which is contrary to the API documentation), allows remote authenticated users to discover password hashes by reading the Basic HTTP Authentication or Digest HTTP Authentication section, or discover a key by reading the ClientTLS section. These can be found in the JSON response to a /api request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://docs.traefik.io/configuration/api/#security; https://github.com/containous/traefik/issues/4917; https://github.com/containous/traefik/pull/4918
CVE: CVE-2019-6957
Published: 2019-05-29
Description: A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0403bt-cve-2019-6957_security_advisory_software_buffer_overflow.pdf; https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0403bt-cve-2019-6957_security_advisory_software_buffer_overflow.pdf
CVE: CVE-2019-6958
Published: 2019-05-29
Description: A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdf; https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdf
CVE: CVE-2019-11891
Published: 2019-05-29
Description: A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the SHC during the attack.
CVSS Score: 8.0 (HIGH)
CWE: CWE-266, CWE-269
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2019-11892
Published: 2019-05-29
Description: A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
CVSS Score: 8.0 (HIGH)
CWE: CWE-284
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2019-11893
Published: 2019-05-29
Description: A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app with restricted permissions, which required user interaction.
CVSS Score: 8.0 (HIGH)
CWE: CWE-266, CWE-269
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2019-6321
Published: 2019-05-29
Description: HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is disabled by default.
CVSS Score: 7.2 (HIGH)
CWE: CWE-667
References: https://support.hp.com/us-en/document/c06318199; https://support.hp.com/us-en/document/c06318199
CVE: CVE-2019-6322
Published: 2019-05-29
Description: HP has identified a security vulnerability with some versions of Workstation BIOS (UEFI Firmware) where the runtime BIOS code could be tampered with if the TPM is disabled. This vulnerability relates to Workstations whose TPM is enabled by default.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-667
References: https://support.hp.com/us-en/document/c06318199; https://support.hp.com/us-en/document/c06318199
CVE: CVE-2018-13365
Published: 2019-05-29
Description: An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/advisory/FG-IR-18-085; https://fortiguard.com/advisory/FG-IR-18-085
CVE: CVE-2019-11894
Published: 2019-05-29
Description: A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2019-11895
Published: 2019-05-29
Description: A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2019-11896
Published: 2019-05-29
Description: A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284, CWE-269
References: https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html; https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
CVE: CVE-2018-14013
Published: 2019-05-29
Description: Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151472/Zimbra-Collaboration-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/3; http://www.openwall.com/lists/oss-security/2019/01/30/1
CVE: CVE-2018-18631
Published: 2019-05-29
Description: mailboxd component in Synacor Zimbra Collaboration Suite 8.6, 8.7 before 8.7.11 Patch 7, and 8.8 before 8.8.10 Patch 2 has Persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109020; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=109020
CVE: CVE-2018-20160
Published: 2019-05-29
Description: ZxChat (aka ZeXtras Chat), as used for zimbra-chat and zimbra-talk in Synacor Zimbra Collaboration Suite 8.7 and 8.8 and in other products, allows XXE attacks, as demonstrated by a crafted XML request to mailboxd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109093; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2019-6980
Published: 2019-05-29
Description: Synacor Zimbra Collaboration Suite 8.7.x through 8.8.11 allows insecure object deserialization in the IMAP component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109097; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=109097
CVE: CVE-2019-6981
Published: 2019-05-29
Description: Zimbra Collaboration Suite 8.7.x through 8.8.11 allows Blind SSRF in the Feed component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://bugzilla.zimbra.com/show_bug.cgi?id=109096; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=109096
CVE: CVE-2019-9670
Published: 2019-05-29
Description: mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as demonstrated by Autodiscover/Autodiscover.xml.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: http://packetstormsecurity.com/files/152487/Zimbra-Collaboration-Autodiscover-Servlet-XXE-ProxyServlet-SSRF.html; http://www.rapid7.com/db/modules/exploit/linux/http/zimbra_xxe_rce; https://bugzilla.zimbra.com/show_bug.cgi?id=109129
CVE: CVE-2019-12454
Published: 2019-05-30
Description: An issue was discovered in wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c in the Linux kernel through 5.1.5. It uses kstrndup instead of kmemdup_nul, which allows attackers to have an unspecified impact via unknown vectors. NOTE: The vendor disputes this issues as not being a vulnerability because switching to kmemdup_nul() would only fix a security issue if the source string wasn't NUL-terminated, which is not the case
CVSS Score: 7.8 (HIGH)
References: https://bugzilla.suse.com/show_bug.cgi?id=1136963#c1; https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound.git/commit/?h=for-5.3&id=a[PII_REDACTED]5ca22e414e132054f234fc8a92604; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/
CVE: CVE-2019-12455
Published: 2019-05-30
Description: An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5.1.5. There is an unchecked kstrndup of derived_name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This id is disputed as not being an issue because “The memory allocation that was not checked is part of a code that only runs at boot time, before user processes are started. Therefore, there is no possibility for an unprivileged user to control it, and no denial of service.”
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/pub/scm/linux/kernel/git/sunxi/linux.git/commit/?h=sunxi/clk-for-5.3&id=fcdf445ff42f036d22178b49cf64e92d527c1330; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J36BIJTKEPUOZKJNHQBUZA47RQONUKOI/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-12456
Published: 2019-05-30
Description: An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in the Linux kernel through 5.1.5. It allows local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a "double fetch" vulnerability. NOTE: a third party reports that this is unexploitable because the doubly fetched value is not used
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
CVE: CVE-2019-12457
Published: 2019-05-30
Description: FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://emreovunc.com/blog/en/FileRun-DirectoryListing-1.png; https://filerun.com/changelog; https://github.com/EmreOvunc/FileRun-Vulnerabilities/