deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-8023
Published: 2019-04-01
Description: EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/107712; https://seclists.org/fulldisclosure/2019/Mar/50; http://www.securityfocus.com/bid/107712
CVE: CVE-2018-17563
Published: 2019-04-01
Description: A Malformed Input String to /cgi-bin/api-get_line_status on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to dump the device's configuration in cleartext.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: http://grandstream.com/support/firmware; https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/; http://grandstream.com/support/firmware
CVE: CVE-2018-17564
Published: 2019-04-01
Description: A Malformed Input String to /cgi-bin/delete_CA on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to delete configuration parameters and gain admin access to the device.
CVSS Score: 9.8 (CRITICAL)
References: http://grandstream.com/support/firmware; https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/; http://grandstream.com/support/firmware
CVE: CVE-2018-17565
Published: 2019-04-01
Description: Shell Metacharacter Injection in the SSH configuration interface on Grandstream GXP16xx VoIP 1.0.4.128 phones allows attackers to execute arbitrary system commands and gain a root shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://grandstream.com/support/firmware; https://iridiumxor.wordpress.com/2019/01/03/three-simple-cves-for-a-good-voip-phone/; http://grandstream.com/support/firmware
CVE: CVE-2018-17989
Published: 2019-04-01
Description: A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript or HTML payload inside the ACL page. The injected payload would be executed in a user's browser when "/cgi-bin/New_GUI/Acl.asp" is requested.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://c0mix.github.io/2019/D-Link-DIR-3782-SecAdvisory-OS-Command-Injection-and-Stored-XSS/; https://c0mix.github.io/2019/D-Link-DIR-3782-SecAdvisory-OS-Command-Injection-and-Stored-XSS/
CVE: CVE-2018-17990
Published: 2019-04-01
Description: An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated attacker to execute arbitrary OS commands via the ScrIPaddrEndTXT parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://c0mix.github.io/2019/D-Link-DIR-3782-SecAdvisory-OS-Command-Injection-and-Stored-XSS/; https://c0mix.github.io/2019/D-Link-DIR-3782-SecAdvisory-OS-Command-Injection-and-Stored-XSS/
CVE: CVE-2018-19113
Published: 2019-04-01
Description: The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)" permissions for the "%PROGRAMFILES(X86)%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse PronestorHealthMonitor.exe file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/153275/Pronestor-Health-Monitoring-Privilege-Escalation.html; https://gist.github.com/povlteksttv/8f990e11576e1e90e8fb61acf8646d28; https://www.pronestor.com
CVE: CVE-2018-3979
Published: 2019-04-01
Description: A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to trigger this vulnerability. This vulnerability can be triggered remotely after the user visits a malformed website. No further user interaction is required. Vulnerable versions include Ubuntu 18.04 LTS (linux 4.15.0-29-generic x86_64), Nouveau Display Driver NV117 (vermagic: 4.15.0-29-generic SMP mod_unload).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0647
CVE: CVE-2019-3792
Published: 2019-04-01
Description: Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://pivotal.io/security/cve-2019-3792; https://pivotal.io/security/cve-2019-3792
CVE: CVE-2019-5514
Published: 2019-04-01
Description: VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An attacker may exploit this issue by tricking the host user to execute a JavaScript to perform unauthorized functions on the guest machine where VMware Tools is installed. This may further be exploited to execute commands on the guest machines.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html; http://www.securityfocus.com/bid/107637; https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE: CVE-2019-5518
Published: 2019-04-01
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01, 6.5 before ESXi[PII_REDACTED]01, 6.0 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-125, CWE-787
References: http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html; http://www.securityfocus.com/bid/107541; https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE: CVE-2019-5519
Published: 2019-04-01
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01, 6.5 before ESXi[PII_REDACTED]01, 6.0 before ESXi[PII_REDACTED]01), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-367
References: http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html; http://www.securityfocus.com/bid/107535; http://www.securityfocus.com/bid/108443
CVE: CVE-2019-9193
Published: 2019-04-01
Description: In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.html; http://packetstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.html; http://packetstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.html
CVE: CVE-2018-1618
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144343.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144343; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1622
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144348.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144348; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1623
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144408; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1625
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 144410.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144410; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1626
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 144411.
CVSS Score: 3.1 (LOW)
CWE: CWE-384
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144411; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1640
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 144580.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/144580; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1680
Published: 2019-04-02
Description: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-521
References: http://www.ibm.com/support/docview.wss?uid=ibm10879093; https://exchange.xforce.ibmcloud.com/vulnerabilities/145236; http://www.ibm.com/support/docview.wss?uid=ibm10879093
CVE: CVE-2018-1874
Published: 2019-04-02
Description: IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access to the system. IBM X-Force ID: 151636.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107733; https://exchange.xforce.ibmcloud.com/vulnerabilities/151636; https://www.ibm.com/support/docview.wss?uid=ibm10876994
CVE: CVE-2018-1906
Published: 2019-04-02
Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7could allow an authenticated user to download code using a specially crafted HTTP request. IBM X-Force ID: 152663.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/107735; https://exchange.xforce.ibmcloud.com/vulnerabilities/152663; https://www.ibm.com/support/docview.wss?uid=ibm10872320
CVE: CVE-2018-1917
Published: 2019-04-02
Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107688; https://exchange.xforce.ibmcloud.com/vulnerabilities/152784; https://www.ibm.com/support/docview.wss?uid=ibm10872274
CVE: CVE-2019-4043
Published: 2019-04-02
Description: IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107778; https://exchange.xforce.ibmcloud.com/vulnerabilities/156239; https://www.ibm.com/support/docview.wss?uid=ibm10874238
CVE: CVE-2019-4080
Published: 2019-04-02
Description: IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parameter parsing. A remote attacker could exploit this to consume all available CPU resources. IBM X-Force ID: 157380.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/107683; https://exchange.xforce.ibmcloud.com/vulnerabilities/157380; https://www.ibm.com/support/docview.wss?uid=ibm10875692
CVE: CVE-2019-4093
Published: 2019-04-02
Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 8.1.7) could allow a user to restore files and directories using IBM Spectrum Prootect Client Web User Interface on Windows that they should not have access to due to incorrect file permissions. IBM X-Force ID: 157981.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-732
References: http://www.ibm.com/support/docview.wss?uid=ibm10875518; https://exchange.xforce.ibmcloud.com/vulnerabilities/157981; http://www.ibm.com/support/docview.wss?uid=ibm10875518
CVE: CVE-2019-9759
Published: 2019-04-02
Description: An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://expzh.com/TONGDA-OA-SQL-Injection.pdf; http://expzh.com/TONGDA-OA-SQL-Injection.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-02
Description: Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a MITM. This attack is exploitable via Man in the Middle of the HTTP connection to the artifact servers. This vulnerability appears to have been fixed in 0.30.0 and later; after commit 5e547b287d6c260d328a2cb658dbe6b7a7ff2261.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319
References: https://github.com/shyiko/ktlint/pull/332; https://github.com/shyiko/ktlint/pull/332
CVE: CVE-2019-5515
Published: 2019-04-02
Description: VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds write vulnerability in the e1000 and e1000e virtual network adapters. Exploitation of this issue may lead to code execution on the host from the guest but it is more likely to result in a denial of service of the guest.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html; https://www.securityfocus.com/bid/107634; https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE: CVE-2019-5524
Published: 2019-04-02
Description: VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html; http://www.securityfocus.com/bid/107635; https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE: CVE-2018-3974
Published: 2019-04-02
Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0640; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0640
CVE: CVE-2018-4049
Published: 2019-04-02
Description: An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0723; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0723
CVE: CVE-2018-4051
Published: 2019-04-02
Description: An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0725; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0725
CVE: CVE-2018-4052
Published: 2019-04-02
Description: An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0726; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0726
CVE: CVE-2018-4053
Published: 2019-04-02
Description: An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727
CVE: CVE-2018-15180
Published: 2019-04-02
Description: qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://drive.google.com/file/d/0B60g8JcPElCCNHd1R2pPNzVGdy1ITjIza1VubWlUekoyNGhR/view; https://drive.google.com/file/d/0B60g8JcPElCCNHd1R2pPNzVGdy1ITjIza1VubWlUekoyNGhR/view
CVE: CVE-2018-19275
Published: 2019-04-02
Description: The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf; https://www.mitel.com/en-gb/support/security-advisories/mitel-product-security-advisory-19-0002; https://www.mitel.com/-/media/mitel/pdf/security-advisories/security-bulletin-190002001-v10.pdf
CVE: CVE-2019-10692
Published: 2019-04-02
Description: In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/159640/WordPress-Rest-Google-Maps-SQL-Injection.html; http://www.rapid7.com/db/modules/auxiliary/admin/http/wp_google_maps_sqli; https://plugins.trac.wordpress.org/changeset?old_path=%2Fwp-google-maps&old=2061433&new_path=%2Fwp-google-maps&new=2061434&sfp_email=&sfph_mail=#file755
CVE: CVE-2019-7474
Published: 2019-04-02
Description: A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an unstable state by downloading certificate with specific extension. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248, CWE-755
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0001; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0001
CVE: CVE-2019-7475
Published: 2019-04-02
Description: A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow unprivileged user to access advanced routing services. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0002; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0002
CVE: CVE-2019-7477
Published: 2019-04-02
Description: A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8, 6.0.5.3-86o and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0003
CVE: CVE-2019-9946
Published: 2019-04-02
Description: Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://access.redhat.com/errata/RHBA-2019:0862; https://github.com/containernetworking/plugins/pull/269#issuecomment-477683272; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCN66VYB3XS76SYH567SO7N3I254JOCT/