deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10933
Published: 2019-07-11
Description: A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate User Interface) (Version v4.75), Spectrum Power 5 (Corporate User Interface) (All versions < v5.50), Spectrum Power 7 (Corporate User Interface) (All versions <= v2.20). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user does not need to be logged into the web interface in order for the exploitation to succeed.At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-747162.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-747162.pdf
CVE: CVE-2019-10935
Published: 2019-07-11
Description: A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions < V14 SP1 Upd 9), SIMATIC WinCC Professional (TIA Portal V15) (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://cert-portal.siemens.com/productcert/pdf/ssa-121293.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-121293.pdf
CVE: CVE-2019-13574
Published: 2019-07-12
Description: In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://benjamin-bouchet.com/blog/vulnerabilite-dans-la-gem-mini_magick-version-4-9-4/; https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851; https://github.com/minimagick/minimagick/compare/d484786...293f9bb
CVE: CVE-2019-13494
Published: 2019-07-12
Description: nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html; https://www.mogozobo.com/?p=3534; http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
CVE: CVE-2019-13567
Published: 2019-07-12
Description: The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b; https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS; https://twitter.com/JLLeitschuh/status/[PII_REDACTED]05708295
CVE: CVE-2019-11360
Published: 2019-07-12
Description: A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787
References: https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/; https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e; https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/
CVE: CVE-2019-13027
Published: 2019-07-12
Description: Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/IckoGZ/CVE-2019-13027/blob/master/README.md; https://github.com/IckoGZ/CVE-2019-13027/blob/master/README.md
CVE: CVE-2019-8998
Published: 2019-07-12
Description: An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.
CVSS Score: 7.8 (HIGH)
CWE: CWE-413
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000057178; http://support.blackberry.com/kb/articleDetail?articleNumber=000057178
CVE: CVE-2019-12731
Published: 2019-07-12
Description: The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow local attackers to escalate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.detack.de/en/cve-2019-12731; https://www.detack.de/en/cve-2019-12731
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9686. Reason: This candidate is a reservation duplicate of CVE-2019-9686. Notes: All CVE users should reference CVE-2019-9686 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-12
Description: GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools > Reminder > Description .. Set the description to any iframe/form tags and apply. The attack vector is: The attacker puts a login form, the user fills it and clicks on submit .. the request is sent to the attacker domain saving the data. The fixed version is: 9.4.1.
CVSS Score: 3.5 (LOW)
CWE: CWE-74
References: https://github.com/glpi-project/glpi/pull/5519; https://github.com/glpi-project/glpi/releases/tag/9.3.1; https://github.com/glpi-project/glpi/pull/5519
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11454. Reason: This candidate is a reservation duplicate of CVE-2019-11454. Notes: All CVE users should reference CVE-2019-11454 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11455. Reason: This candidate is a reservation duplicate of CVE-2019-11455. Notes: All CVE users should reference CVE-2019-11455 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-11242
Published: 2019-07-12
Description: A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://github.com/cohesity/SecAdvisory/blob/master/README.md; https://github.com/cohesity/SecAdvisory/blob/master/README.md
CVE: CVE-2019-12827
Published: 2019-07-12
Description: Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://downloads.digium.com/pub/security/AST-2019-002.html; https://issues.asterisk.org/jira/browse/ASTERISK-28447; http://downloads.digium.com/pub/security/AST-2019-002.html
CVE: CVE-2019-13161
Published: 2019-07-12
Description: An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: http://downloads.digium.com/pub/security/AST-2019-003.html; https://issues.asterisk.org/jira/browse/ASTERISK-28465; https://lists.debian.org/debian-lts-announce/2019/11/msg00038.html
CVE: CVE-2019-5629
Published: 2019-07-13
Description: Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent's startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 2.6.4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://packetstormsecurity.com/files/153159/Rapid7-Windows-InsightIDR-Agent-2.6.3.14-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2019/Jun/13; https://bogner.sh/2019/06/local-privilege-escalation-in-rapid7s-windows-insight-idr-agent/
CVE: CVE-2018-20852
Published: 2019-07-13
Description: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE: CVE-2019-13589
Published: 2019-07-14
Description: The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-829
References: http://www.securityfocus.com/bid/109281; https://github.com/rubygems/rubygems.org/issues/2051; https://rubygems.org/gems/paranoid2/versions
CVE: CVE-2019-13590
Published: 2019-07-14
Description: An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-476
References: https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html; https://sourceforge.net/p/sox/bugs/325/; https://lists.debian.org/debian-lts-announce/2023/02/msg00009.html
CVE: CVE-2019-13594
Published: 2019-07-14
Description: In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/mirumee/saleor/releases/tag/2.8.0; https://github.com/mirumee/saleor/releases/tag/2.8.0
CVE: CVE-2019-13597
Published: 2019-07-14
Description: _s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the _execute() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html; https://www.exploit-db.com/exploits/47110; https://pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html
CVE: CVE-2019-13598
Published: 2019-07-14
Description: LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the "No unsafe lua allowed" code block is skipped.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/; https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/
CVE: CVE-2019-13602
Published: 2019-07-14
Description: An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://sourceforge.net/p/sox/bugs/299/; https://sourceforge.net/p/sox/code/ci/master/tree/src/xa.c#l219; https://sourceforge.net/p/sox/bugs/299/
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: HexoEditor v1.1.8-beta is affected by: XSS to code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Moeditor/Moeditor/issues/156; https://github.com/zhuzhuyule/HexoEditor/issues/3; https://github.com/Moeditor/Moeditor/issues/156
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2745; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00046.html; https://bugzilla.gnome.org/show_bug.cgi?id=788980
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, but might potentially enable persistent XSS (user could embed mal. code). The component is: Javascript code execution in "Name", "Location", "Bio" and "Starting Page" fields in the "My Account" page. File: Lib/listjs/list.js, line 67. The attack vector is: unknown, victim must open profile page if persistent was possible.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/emoncms/emoncms/issues/763; https://github.com/emoncms/emoncms/issues/763
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote Execution, Credential Leaks. The component is: IoT API. The attack vector is: Any Accessible Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://gist.github.com/kaendfinger/3ad1dbeb62f902cc3ac2867f4e01ae38; https://gist.github.com/kaendfinger/3ad1dbeb62f902cc3ac2867f4e01ae38
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10753, CVE-2018-10771. Reason: This candidate is a reservation duplicate of CVE-2018-10753 and CVE-2018-10771. Notes: All CVE users should reference CVE-2018-10753 and CVE-2018-10771 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/issues/7962; https://github.com/Dolibarr/dolibarr/issues/7962
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-91
References: https://github.com/savon-noir/python-libnmap/issues/87; https://github.com/savon-noir/python-libnmap/issues/87
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://security-tracker.debian.org/tracker/CVE-2[PII_REDACTED]; https://sourceware.org/bugzilla/show_bug.cgi?id=22850; https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/109167; https://security-tracker.debian.org/tracker/CVE-2[PII_REDACTED]; https://sourceware.org/bugzilla/show_bug.cgi?id=22851
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/109162; https://security-tracker.debian.org/tracker/CVE-2[PII_REDACTED]; https://sourceware.org/bugzilla/show_bug.cgi?id=22852
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://security-tracker.debian.org/tracker/CVE-2[PII_REDACTED]; https://sourceware.org/bugzilla/show_bug.cgi?id=22853; https://support.f5.com/csp/article/K06046097
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/send_reply/. The attack vector is: <img src=x onerror=alert(document.domain) />.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://whitehatck01.blogspot.com/2018/02/school-college-portal-with-erp-script.html; https://whitehatck01.blogspot.com/2018/02/school-college-portal-with-erp-script.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11501. Reason: This candidate is a reservation duplicate of CVE-2018-11501. Notes: All CVE users should reference CVE-2018-11501 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-10374
Published: 2019-07-15
Description: On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low Energy (BLE) advertising packets with a TxAdd flag indicating random addresses, but the addresses remain constant. If devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary can determine whether the same device has entered one of these locations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://petsymposium.org/2019/files/papers/issue3/popets-2019-0036.pdf; https://twitter.com/TedOnPrivacy/status/[PII_REDACTED]90187008; https://petsymposium.org/2019/files/papers/issue3/popets-2019-0036.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2019-07-15
Description: Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESC.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/weblibrarian/trunk/includes/database_code.php; https://wpvulndb.com/vulnerabilities/9553; https://plugins.trac.wordpress.org/browser/weblibrarian/trunk/includes/database_code.php