deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-13991
Published: 2020-09-24
Description: vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.
CVSS Score: 7.5 (HIGH)
References: https://github.com/googleprojectzero/fuzzilli#JerryScript; https://github.com/jerryscript-project/jerryscript/issues/3858; https://github.com/jerryscript-project/jerryscript/issues/3859
CVE: CVE-2020-15160
Published: 2020-09-24
Description: PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/162140/PrestaShop-1.7.6.7-SQL-Injection.html; https://github.com/PrestaShop/PrestaShop/commit/3fa0dfa5a8f4b149c7c90b948a12b4f5999a5ef8; https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.6.8
CVE: CVE-2020-15162
Published: 2020-09-24
Description: In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attachments allowed people to input malicious JavaScript which triggered an XSS payload. The problem is fixed in version 1.7.6.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/PrestaShop/PrestaShop/commit/2cfcd33c75974a49f17665f294f228454e14d9cf; https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.6.8; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-rc8c-v7rq-q392
CVE: CVE-2020-15843
Published: 2020-09-24
Description: ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client\, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal\. The folder permissions allow "Full Control" to "Everyone". An authenticated local attacker can exploit this to replace the TSClientB.exe binary in the Terminal directory, which is executed on logon for every user. Alternatively, the attacker can replace any of the binaries in the Client or Install directories. The latter requires additional user interaction, for example starting the client.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://blog.to.com/advisory-actfax-7-10-build-0335-privilege-escalation-cve-2020-15843/; https://blog.to.com/advisory-actfax-7-10-build-0335-privilege-escalation-cve-2020-15843/
CVE: CVE-2020-17365
Published: 2020-09-24
Description: Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-732
References: https://cymptom.com/cve-2020-17365-hotspot-shield-vpn-new-privilege-escalation-vulnerability/2020/10/; https://www.pango.co/sec31944/; https://cymptom.com/cve-2020-17365-hotspot-shield-vpn-new-privilege-escalation-vulnerability/2020/10/
CVE: CVE-2017-17477
Published: 2020-09-25
Description: Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.pexip.com/admin/security_bulletins.htm; https://www.pexip.com/security-bulletins; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2018-10432
Published: 2020-09-25
Description: Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/whats_new.htm; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2018-10585
Published: 2020-09-25
Description: Pexip Infinity before 18 allows remote Denial of Service (XML parsing).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/whats_new.htm; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2019-7177
Published: 2020-09-25
Description: Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://docs.pexip.com/admin/release_notes.htm; https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/release_notes.htm
CVE: CVE-2019-7178
Published: 2020-09-25
Description: Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://docs.pexip.com/admin/release_notes.htm; https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/release_notes.htm
CVE: CVE-2020-11805
Published: 2020-09-25
Description: Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://docs.pexip.com/admin/security_bulletins.htm; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2020-12824
Published: 2020-09-25
Description: Pexip Infinity 23.x before 23.3 has improper input validation, leading to a temporary software abort via RTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://docs.pexip.com/admin/security_bulletins.htm; https://www.pexip.com; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2020-13387
Published: 2020-09-25
Description: Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://docs.pexip.com/admin/security_bulletins.htm; https://www.pexip.com; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2020-23837
Published: 2020-09-25
Description: A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-party site or clicks on a URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://get-simple.info/extend/plugin/multi-user/133/; https://www.exploit-db.com/exploits/48745; http://get-simple.info/extend/plugin/multi-user/133/
CVE: CVE-2020-24592
Published: 2020-09-25
Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-24593
Published: 2020-09-25
Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-89
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-24594
Published: 2020-09-25
Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-24595
Published: 2020-09-25
Description: Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.
CVSS Score: 5.3 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-24615
Published: 2020-09-25
Description: Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://docs.pexip.com/admin/security_bulletins.htm; https://www.pexip.com; https://docs.pexip.com/admin/security_bulletins.htm
CVE: CVE-2020-24621
Published: 2020-09-25
Description: A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/openmrs/openmrs-module-htmlformentry/pull/178; https://github.com/openmrs/openmrs-module-uiframework/pull/59; https://issues.openmrs.org/browse/HTML-730
CVE: CVE-2020-24692
Published: 2020-09-25
Description: The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to gain access to a user session.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20, CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0011; https://www.mitel.com/support/security-advisories
CVE: CVE-2020-24718
Published: 2020-09-25
Description: bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demonstrated by a root user in a container on an Intel system, who can gain privileges by modifying VMCS_HOST_RIP.
CVSS Score: 8.2 (HIGH)
CWE: CWE-862
References: https://github.com/illumos/illumos-gate/blob/84971882a96ac0fecd538b02208054a872ff8af3/usr/src/uts/i86pc/io/vmm/intel/vmcs.c#L246-L249; https://security.FreeBSD.org/advisories/FreeBSD-SA-20:28.bhyve_vmcs.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-25203
Published: 2020-09-25
Description: The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html; https://rcesecurity.com; http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html
CVE: CVE-2020-25223
Published: 2020-09-25
Description: A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/164697/Sophos-UTM-WebAdmin-SID-Command-Injection.html; https://community.sophos.com/b/security-blog; https://community.sophos.com/b/security-blog/posts/advisory-resolved-rce-in-sg-utm-webadmin-cve-2020-25223
CVE: CVE-2020-25726
Published: 2020-09-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-25747
Published: 2020-09-25
Description: The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV services without authentication. Thus, the attacker can watch live streams from the camera, rotate the camera, change some settings (brightness, clarity, time), restart the camera, or reset it to factory settings.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-306
References: https://github.com/jet-pentest/CVE-2020-25747; https://github.com/jet-pentest/CVE-2020-25747
CVE: CVE-2020-25748
Published: 2020-09-25
Description: A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339). Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can also modify responses from NTP and RTSP servers and force the camera to use the changed values.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319
References: https://github.com/jet-pentest/CVE-2020-25748; https://github.com/jet-pentest/CVE-2020-25748
CVE: CVE-2020-25749
Published: 2020-09-25
Description: The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telnet service cannot be disabled and this password cannot be changed via standard functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/jet-pentest/CVE-2020-25749; https://github.com/jet-pentest/CVE-2020-25749
CVE: CVE-2020-25084
Published: 2020-09-25
Description: QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.
CVSS Score: 3.2 (LOW)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2020/09/16/5; https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE: CVE-2020-25085
Published: 2020-09-25
Description: QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2020/09/16/6; http://www.openwall.com/lists/oss-security/2021/03/09/1; https://bugs.launchpad.net/qemu/+bug/1892960
CVE: CVE-2020-25625
Published: 2020-09-25
Description: hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-835
References: http://www.openwall.com/lists/oss-security/2020/09/17/1; https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE: CVE-2019-11556
Published: 2020-09-25
Description: Pagure before 5.6 allows XSS via the templates/blame.html blame view.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00007.html; https://docs.pagure.org/pagure/changelog.html
CVE: CVE-2020-26098
Published: 2020-09-25
Description: cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution (SEC-485).
CVSS Score: 9.8 (CRITICAL)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26099
Published: 2020-09-25
Description: cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting protection mechanism (SEC-491).
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26100
Published: 2020-09-25
Description: chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497).
CVSS Score: 9.8 (CRITICAL)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26101
Published: 2020-09-25
Description: In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM (SEC-549).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26102
Published: 2020-09-25
Description: In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550).
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26103
Published: 2020-09-25
Description: In cPanel before 88.0.3, an insecure site password is used for Mailman on a templated VM (SEC-551).
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26104
Published: 2020-09-25
Description: In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552).
CVSS Score: 7.5 (HIGH)
CWE: CWE-922
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26105
Published: 2020-09-25
Description: In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26106
Published: 2020-09-25
Description: cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558).
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26107
Published: 2020-09-25
Description: cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26108
Published: 2020-09-25
Description: cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488).
CVSS Score: 9.8 (CRITICAL)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26109
Published: 2020-09-25
Description: cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557).
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26110
Published: 2020-09-25
Description: cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/88-change-log/; https://docs.cpanel.net/changelogs/88-change-log/
CVE: CVE-2020-26111
Published: 2020-09-25
Description: cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/90-change-log/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-26112
Published: 2020-09-25
Description: The email quota cache in cPanel before 90.0.10 allows overwriting of files.
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/90-change-log/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-26113
Published: 2020-09-25
Description: cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/90-change-log/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-26114
Published: 2020-09-25
Description: cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC-573).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/90-change-log/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-26115
Published: 2020-09-25
Description: cPanel before 90.0.10 allows self XSS via the Cron Editor interface (SEC-574).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cpanel.net/changelogs/90-change-log/; https://docs.cpanel.net/changelogs/90-change-log/
CVE: CVE-2020-15394
Published: 2020-09-25
Description: The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com; https://www.manageengine.com/products/applications_manager/issues.html#v14740; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-15394.html
CVE: CVE-2020-15521
Published: 2020-09-25
Description: Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com; https://www.manageengine.com/products/applications_manager/issues.html#v14730; https://www.manageengine.com
CVE: CVE-2020-7735
Published: 2020-09-25
Description: The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d; https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427; https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d
CVE: CVE-2020-13995
Published: 2020-09-25
Description: U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable (sBuffer) leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DES_info or image_info. By controlling that pointer, one achieves an arbitrary write when its fields are assigned. The data written is from a potentially untrusted NITF file in the form of an integer. The attacker can gain control of the instruction pointer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.riverloopsecurity.com/blog/2020/09/nitf-extract75-cve-2020-13995/; https://www.riverloopsecurity.com/blog/2020/09/nitf-extract75-cve-2020-13995/
CVE: CVE-2018-6447
Published: 2020-09-25
Description: A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1073
CVE: CVE-2018-6448
Published: 2020-09-25
Description: A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host.
CVSS Score: 7.5 (HIGH)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1075; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1075
CVE: CVE-2018-6449
Published: 2020-09-25
Description: Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTTP headers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1077; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1077