deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-0502
Published: 2020-03-12
Description: Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 5.3 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0503
Published: 2020-03-12
Description: Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0504
Published: 2020-03-12
Description: Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0505
Published: 2020-03-12
Description: Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure and denial of service via local
CVSS Score: 6.1 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0506
Published: 2020-03-12
Description: Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 2.3 (LOW)
CWE: CWE-665
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0507
Published: 2020-03-12
Description: Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-428
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-1739
Published: 2020-03-12
Description: A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn command line, disclosing to other users within the same node. An attacker could take advantage by reading the cmdline file from that particular PID on the procfs.
CVSS Score: 3.9 (LOW)
CWE: CWE-200, CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1739; https://github.com/ansible/ansible/issues/67797; https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
CVE: CVE-2020-10531
Published: 2020-03-12
Description: An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00004.html; https://access.redhat.com/errata/RHSA-2020:0738; https://bugs.chromium.org/p/chromium/issues/detail?id=1044570
CVE: CVE-2020-10532
Published: 2020-03-12
Description: The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-001/-credential-disclosure-in-watchguard-fireware-ad-helper-component; https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdr_ad_helper_c.html; https://www.redteam-pentesting.de/en/advisories/rt-sa-2020-001/-credential-disclosure-in-watchguard-fireware-ad-helper-component
CVE: CVE-2020-0508
Published: 2020-03-12
Description: Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0511
Published: 2020-03-12
Description: Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0514
Published: 2020-03-12
Description: Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0515
Published: 2020-03-12
Description: Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00369.html
CVE: CVE-2020-0516
Published: 2020-03-12
Description: Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/156761/ShaderCache-Arbitrary-File-Creation-Privilege-Escalation.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html
CVE: CVE-2020-0517
Published: 2020-03-12
Description: Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0519
Published: 2020-03-12
Description: Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0520
Published: 2020-03-12
Description: Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-5959
Published: 2020-03-12
Description: NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4996; https://nvidia.custhelp.com/app/answers/detail/a_id/4996
CVE: CVE-2020-5960
Published: 2020-03-12
Description: NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4996; https://nvidia.custhelp.com/app/answers/detail/a_id/4996
CVE: CVE-2020-5961
Published: 2020-03-12
Description: NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4996; https://nvidia.custhelp.com/app/answers/detail/a_id/4996
CVE: CVE-2015-3641
Published: 2020-03-12
Description: bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.
CVSS Score: 7.5 (HIGH)
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2017-18350
Published: 2020-03-12
Description: bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server responds with an acknowledgement of an unexpected target domain name.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-120
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://medium.com/%40lukedashjr/cve-2017-18350-disclosure-fe6d695f45d5; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures
CVE: CVE-2018-10704
Published: 2020-03-12
Description: yidashi yii2cmf 2.0 has XSS via the /search q parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://testh5shanglv.minshengec.com:1024/phpmyadmin/doc/yii2cmf_xss.htm; https://github.com/yidashi/yii2cmf; http://testh5shanglv.minshengec.com:1024/phpmyadmin/doc/yii2cmf_xss.htm
CVE: CVE-2018-19516
Published: 2020-03-12
Description: messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://cgit.kde.org/messagelib.git/commit/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp?id=34765909cdf8e55402a8567b48fb288839c61612; https://cgit.kde.org/messagelib.git/commit/messageviewer/src/messagepartthemes/default/defaultrenderer.cpp?id=34765909cdf8e55402a8567b48fb288839c61612
CVE: CVE-2018-20586
Published: 2020-03-12
Description: bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20586
CVE: CVE-2019-11343
Published: 2020-03-12
Description: Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/xjodoin/torpedoquery/commit/3c20b874fba9cc2a78b9ace10208de1602b56c3f; https://github.com/xjodoin/torpedoquery/compare/v2.5.2...v2.5.3; https://github.com/xjodoin/torpedoquery/commit/3c20b874fba9cc2a78b9ace10208de1602b56c3f
CVE: CVE-2019-11355
Published: 2020-03-12
Description: An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certificate, on the administrator's page. The value received from the user is the factor value of a shell script on the equipment. By entering a special character (such as a single quote) in a CN or other CSR field, one can insert a command into a factor value. A system command can be executed as root.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://support.polycom.com/content/dam/polycom-support/global/documentation/hdx-3-1-14-advisory.pdf; https://support.polycom.com/content/dam/polycom-support/global/documentation/hdx-3-1-14-advisory.pdf
CVE: CVE-2020-0526
Published: 2020-03-12
Description: Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
CVE: CVE-2020-0530
Published: 2020-03-12
Description: Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html
CVE: CVE-2020-0546
Published: 2020-03-12
Description: Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00326.html
CVE: CVE-2020-0556
Published: 2020-03-12
Description: Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access
CVSS Score: 7.1 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00055.html; https://lists.debian.org/debian-lts-announce/2020/06/msg00008.html
CVE: CVE-2020-0565
Published: 2020-03-12
Description: Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0567
Published: 2020-03-12
Description: Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00315.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0574
Published: 2020-03-12
Description: Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access.
CVSS Score: 5.9 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00349.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00349.html
CVE: CVE-2019-12278
Published: 2020-03-12
Description: Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode characters. The rendering mechanism, in conjunction with the "first strong character" concept, may improperly operate on a numerical IP address or an alphabetic string, leading to a spoofed URL.
CVSS Score: 4.3 (MEDIUM)
References: https://help.opera.com/en/latest/security-and-privacy/; https://medium.com/bugbountywriteup/opera-android-address-bar-spoofing-cve-2019-12278-9ffcfd6c508c; https://help.opera.com/en/latest/security-and-privacy/
CVE: CVE-2019-16156
Published: 2020-03-12
Description: An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-19-265; https://fortiguard.com/advisory/FG-IR-19-265
CVE: CVE-2019-17658
Published: 2020-03-12
Description: An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-428
References: https://fortiguard.com/advisory/FG-IR-19-281; https://fortiguard.com/advisory/FG-IR-19-281
CVE: CVE-2020-0550
Published: 2020-03-12
Description: Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products is provided in intel-sa-00330: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html
CVSS Score: 5.6 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00330.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0551
Published: 2020-03-12
Description: Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
CVSS Score: 5.6 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-0583
Published: 2020-03-12
Description: Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local access. This affects Intel® Smart Sound Technology before versions: 10th Generation Intel® Core™ i7 Processors, version 3431 and 8th Generation Intel® Core™ Processors, version 3349.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00354.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00354.html
CVE: CVE-2020-6643
Published: 2020-03-12
Description: An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-19-270; https://fortiguard.com/advisory/FG-IR-19-270
CVE: CVE-2020-9064
Published: 2020-03-12
Description: Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-202003116-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-202003116-01-smartphone-en
CVE: CVE-2019-17653
Published: 2020-03-12
Description: A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://fortiguard.com/psirt/FG-IR-19-240; https://fortiguard.com/psirt/%20FG-IR-19-240; https://fortiguard.com/psirt/FG-IR-19-240
CVE: CVE-2020-10534
Published: 2020-03-12
Description: In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://gerrit.wikimedia.org/r/#/q/I9cc5fb2c08c78bbd797a5fc6d89f4577c8cc118b; https://phabricator.wikimedia.org/T229731; https://gerrit.wikimedia.org/r/#/q/I9cc5fb2c08c78bbd797a5fc6d89f4577c8cc118b
CVE: CVE-2020-10535
Published: 2020-03-12
Description: GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email address.
CVSS Score: 5.3 (MEDIUM)
References: https://about.gitlab.com/releases/2020/03/11/critical-security-release-gitlab-12-dot-8-dot-6-released/; https://about.gitlab.com/releases/2020/03/11/critical-security-release-gitlab-12-dot-8-dot-6-released/
CVE: CVE-2020-1863
Published: 2020-03-12
Description: Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en