deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-3651
Published: 2019-11-13
Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2019-3660
Published: 2019-11-13
Description: Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.
CVSS Score: 8.4 (HIGH)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2019-5029
Published: 2019-11-13
Description: An exploitable command injection vulnerability exists in the Config editor of the Exhibitor Web UI versions 1.0.9 to 1.7.1. Arbitrary shell commands surrounded by backticks or $() can be inserted into the editor and will be executed by the Exhibitor process when it launches ZooKeeper. An attacker can execute any command as the user running the Exhibitor process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0790; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0790
CVE: CVE-2011-0544
Published: 2019-11-14
Description: phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/security/cve/cve-2011-0544; https://security-tracker.debian.org/tracker/CVE-2011-0544; https://access.redhat.com/security/cve/cve-2011-0544
CVE: CVE-2019-18954
Published: 2019-11-14
Description: Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious attacker can manipulate internal attributes by adding additional attributes to user input.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://github.com/NetEase/pomelo/issues/1149; https://github.com/cl0udz/vulnerabilities/tree/master/pomelo-critical-state-manipulation; https://github.com/NetEase/pomelo/issues/1149
CVE: CVE-2019-3640
Published: 2019-11-14
Description: Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-319
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10298; https://kc.mcafee.com/corporate/index?page=content&id=SB10298
CVE: CVE-2019-3661
Published: 2019-11-14
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2019-3662
Published: 2019-11-14
Description: Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2019-3663
Published: 2019-11-14
Description: Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2011-1070
Published: 2019-11-14
Description: v86d before 0.1.10 do not verify if received netlink messages are sent by the kernel. This could allow unprivileged users to manipulate the video mode and potentially other consequences.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://access.redhat.com/security/cve/cve-2011-1070; https://seclists.org/oss-sec/2011/q1/315; https://security-tracker.debian.org/tracker/CVE-2011-1070
CVE: CVE-2011-1136
Published: 2019-11-14
Description: In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-59
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612032; https://bugs.launchpad.net/ubuntu/+source/tesseract/+bug/607297; https://security-tracker.debian.org/tracker/CVE-2011-1136
CVE: CVE-2011-1145
Published: 2019-11-14
Description: The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://access.redhat.com/security/cve/cve-2011-1145; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1145; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-1145
CVE: CVE-2011-1488
Published: 2019-11-14
Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html; https://access.redhat.com/security/cve/cve-2011-1488; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488
CVE: CVE-2011-1489
Published: 2019-11-14
Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html; https://access.redhat.com/security/cve/cve-2011-1489; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489
CVE: CVE-2011-1490
Published: 2019-11-14
Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html; https://access.redhat.com/security/cve/cve-2011-1490; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490
CVE: CVE-2011-1588
Published: 2019-11-14
Description: Thunar before 1.3.1 could crash when copy and pasting a file name with % format characters due to a format string error.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00008.html; https://access.redhat.com/security/cve/cve-2011-1588; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1588
CVE: CVE-2011-1930
Published: 2019-11-14
Description: In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHCP reply which could execute arbitrary code with the privileges of any process which sources DHCP options.
CVSS Score: 9.8 (CRITICAL)
References: http://security.gentoo.org/glsa/glsa-201309-21.xml; http://www.openwall.com/lists/oss-security/2012/05/22/12; http://www.securityfocus.com/bid/47924
CVE: CVE-2019-16863
Published: 2019-11-14
Description: STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203, CWE-327
References: http://tpm.fail; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190024; https://support.f5.com/csp/article/K32412503?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-18949
Published: 2019-11-14
Description: SnowHaze before 2.6.6 is sometimes too late to honor a per-site JavaScript blocking setting, which leads to unintended JavaScript execution via a chain of webpage redirections targeted to the user's browser configuration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://snowhaze.com/ssa.txt; https://snowhaze.com/ssa.txt
CVE: CVE-2019-18885
Published: 2019-11-14
Description: fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=09ba3bc9dd150457c506e4661380a6183af651c1; https://github.com/bobfuzzer/CVE-2019-18885
CVE: CVE-2019-18895
Published: 2019-11-14
Description: Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://hyp3rlinx.altervista.org; http://seclists.org/fulldisclosure/2019/Nov/5; https://packetstormsecurity.com/files/155319/ScanGuard-Antivirus-Insecure-Permissions.html
CVE: CVE-2019-18957
Published: 2019-11-14
Description: Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155320/MicroStrategy-Library-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Nov/4; https://seclists.org/bugtraq/2019/Nov/23
CVE: CVE-2019-18646
Published: 2019-11-14
Description: The Untangle NG firewall 14.2.0 is vulnerable to authenticated inline-query SQL injection within the timeDataDynamicColumn parameter when logged in as an admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145; https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145
CVE: CVE-2019-18647
Published: 2019-11-14
Description: The Untangle NG firewall 14.2.0 is vulnerable to an authenticated command injection when logged in as an admin user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145; https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145
CVE: CVE-2019-18648
Published: 2019-11-14
Description: When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145; https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145
CVE: CVE-2019-18649
Published: 2019-11-14
Description: When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145; https://gist.github.com/alm4ric/ada44ce7de9a30244c2269106c70a145
CVE: CVE-2012-1155
Published: 2019-11-14
Description: Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1156
Published: 2019-11-14
Description: Moodle before 2.2.2 has users' private files included in course backups
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1168
Published: 2019-11-14
Description: Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2019-7960
Published: 2019-11-14
Description: Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/animate/apsb19-34.html; https://helpx.adobe.com/security/products/animate/apsb19-34.html
CVE: CVE-2019-7962
Published: 2019-11-14
Description: Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/illustrator/apsb19-36.html; https://helpx.adobe.com/security/products/illustrator/apsb19-36.html
CVE: CVE-2019-8239
Published: 2019-11-14
Description: Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb19-53.html; https://helpx.adobe.com/security/products/bridge/apsb19-53.html
CVE: CVE-2019-8240
Published: 2019-11-14
Description: Adobe Bridge CC versions 9.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb19-53.html; https://helpx.adobe.com/security/products/bridge/apsb19-53.html
CVE: CVE-2019-8241
Published: 2019-11-14
Description: Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html; https://www.zerodayinitiative.com/advisories/ZDI-19-905/; https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html
CVE: CVE-2019-8242
Published: 2019-11-14
Description: Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html; https://www.zerodayinitiative.com/advisories/ZDI-19-904/; https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html
CVE: CVE-2019-8243
Published: 2019-11-14
Description: Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html; https://www.zerodayinitiative.com/advisories/ZDI-19-907/; https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html
CVE: CVE-2019-8244
Published: 2019-11-14
Description: Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html; https://www.zerodayinitiative.com/advisories/ZDI-19-906/; https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html
CVE: CVE-2019-8246
Published: 2019-11-14
Description: Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html; https://helpx.adobe.com/security/products/media-encoder/apsb19-52.html
CVE: CVE-2019-8247
Published: 2019-11-14
Description: Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb19-36.html; https://helpx.adobe.com/security/products/illustrator/apsb19-36.html
CVE: CVE-2019-8248
Published: 2019-11-14
Description: Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb19-36.html; https://helpx.adobe.com/security/products/illustrator/apsb19-36.html
CVE: CVE-2012-1157
Published: 2019-11-14
Description: Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1158
Published: 2019-11-14
Description: Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1159
Published: 2019-11-14
Description: Moodle before 2.2.2: Overview report allows users to see hidden courses
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1160
Published: 2019-11-14
Description: Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php
CVSS Score: 2.7 (LOW)
CWE: CWE-732
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1161
Published: 2019-11-14
Description: Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1169
Published: 2019-11-14
Description: Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2012-1170
Published: 2019-11-14
Description: Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
CVE: CVE-2019-11136
Published: 2019-11-14
Description: Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
CVE: CVE-2019-11137
Published: 2019-11-14
Description: Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html
CVE: CVE-2019-11151
Published: 2019-11-14
Description: Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.f5.com/csp/article/K89105210?utm_source=f5support&amp%3Butm_medium=RSS; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00287.html; https://support.f5.com/csp/article/K89105210?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2019-11152
Published: 2019-11-14
Description: Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege, denial of service, and information disclosure via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00287.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00287.html