deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-0043
Published: 2019-04-10
Description: In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS : 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D75 on SRX Series; 14.1X53 versions prior to 14.1X53-D48 on EX/QFX series; 15.1 versions prior to 15.1R4-S9, 15.1R7-S2; 15.1F6 versions prior to 15.1F6-S11; 15.1X49 versions prior to 15.1X49-D141, 15.1X49-D144, 15.1X49-D150 on SRX Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX Series; 15.1X53 versions prior to 15.1X53-D590 on EX2300/EX3400 Series; 15.1X54 on ACX Series; 16.1 versions prior to 16.1R3-S10, 16.1R4-S11, 16.1R6-S5, 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S8, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R1-S1, 18.1R2-S1, 18.1R3; 18.2X75 versions prior to 18.2X75-D10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://kb.juniper.net/JSA10935; https://kb.juniper.net/JSA10935
CVE: CVE-2019-0044
Published: 2019-04-10
Description: Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: http://www.securityfocus.com/bid/107872; https://kb.juniper.net/JSA10936; http://www.securityfocus.com/bid/107872
CVE: CVE-2019-0216
Published: 2019-04-10
Description: A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/04/10/6; http://www.securityfocus.com/bid/107869; https://lists.apache.org/thread.html/2de387213d45bc626d27554a1bde7b8c67d08720901f82a50b6f4231%40%3Cdev.airflow.apache.org%3E
CVE: CVE-2019-0229
Published: 2019-04-10
Description: A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/04/10/6; http://www.securityfocus.com/bid/107869; https://lists.apache.org/thread.html/2de387213d45bc626d27554a1bde7b8c67d08720901f82a50b6f4231%40%3Cdev.airflow.apache.org%3E
CVE: CVE-2019-11068
Published: 2019-04-10
Description: libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00048.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00053.html
CVE: CVE-2019-3612
Published: 2019-04-10
Description: Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10279; https://kc.mcafee.com/corporate/index?page=content&id=SB10279
CVE: CVE-2019-6556
Published: 2019-04-10
Description: When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-094-01; https://www.zerodayinitiative.com/advisories/ZDI-19-344/; https://ics-cert.us-cert.gov/advisories/ICSA-19-094-01
CVE: CVE-2019-9694
Published: 2019-04-10
Description: Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
CVSS Score: 7.8 (HIGH)
References: https://support.symantec.com/en_US/article.SYMSA1478.html; https://support.symantec.com/en_US/article.SYMSA1478.html
CVE: CVE-2018-19453
Published: 2019-04-10
Description: Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.hivint.com/advisory-upload-malicious-file-in-kentico-cms-cve-2018-19453-36debbf85216; https://blog.hivint.com/advisory-upload-malicious-file-in-kentico-cms-cve-2018-19453-36debbf85216
CVE: CVE-2019-0278
Published: 2019-04-10
Description: Under certain conditions the Monitoring Servlet of the SAP NetWeaver Process Integration (Messaging System), fixed in versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to see the names of database tables used by the application, leading to information disclosure.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2741201; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114; https://launchpad.support.sap.com/#/notes/2741201
CVE: CVE-2019-0279
Published: 2019-04-10
Description: ABAP BASIS function modules INST_CREATE_R3_RFC_DEST, INST_CREATE_TCPIP_RFCDEST, and INST_CREATE_TCPIP_RFC_DEST in SAP BASIS (fixed in versions 7.0 to 7.02, 7.10 to 7.30, 7.31, 7.40, 7.50 to 7.53) do not perform necessary authorization checks in all circumstances for an authenticated user, resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2753629; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114; https://launchpad.support.sap.com/#/notes/2753629
CVE: CVE-2019-0282
Published: 2019-04-10
Description: Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; can be accessed without user authentication, which might expose internal data like release information, Java package and Java object names which can be misused by the attacker.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://launchpad.support.sap.com/#/notes/2742758; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114; https://launchpad.support.sap.com/#/notes/2742758
CVE: CVE-2019-0283
Published: 2019-04-10
Description: SAP NetWeaver Process Integration (Adapter Engine), fixed in versions 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; is vulnerable to Digital Signature Spoofing. It is possible to spoof XML signatures and send arbitrary requests to the server via PI Axis adapter. These requests will be accepted by the PI Axis adapter even if the payload has been altered, especially when the signed element is the body of the xml document.
CVSS Score: 7.1 (HIGH)
CWE: CWE-290
References: https://launchpad.support.sap.com/#/notes/2747683; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114; https://launchpad.support.sap.com/#/notes/2747683
CVE: CVE-2019-0284
Published: 2019-04-10
Description: SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity (XXE). This can cause SLDREG to, for example, continuously loop, read arbitrary files and even send local files.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-611
References: https://launchpad.support.sap.com/#/notes/2772376; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114; https://launchpad.support.sap.com/#/notes/2772376
CVE: CVE-2019-0285
Published: 2019-04-10
Description: The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: http://packetstormsecurity.com/files/153471/SAP-Crystal-Reports-Information-Disclosure.html; https://launchpad.support.sap.com/#/notes/2687663; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-10
Description: Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2[PII_REDACTED] in these releases did not reject existing remoting-based CLI authentication caches.
CVSS Score: 8.1 (HIGH)
CWE: CWE-613
References: http://www.securityfocus.com/bid/107901; https://access.redhat.com/errata/RHBA-2019:1605; https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1289
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-10
Description: The f:validateButton form control for the Jenkins UI did not properly escape job URLs in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, resulting in a cross-site scripting (XSS) vulnerability exploitable by users with the ability to control job names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107889; https://access.redhat.com/errata/RHBA-2019:1605; https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1327
CVE: CVE-2019-11069
Published: 2019-04-10
Description: Sequelize version 5 before 5.3.0 does not properly ensure that standard conforming strings are used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/sequelize/sequelize/blob/98cb17c17f73e2aa1792aa5a1d31216ba984b456/lib/dialects/postgres/connection-manager.js#L158-L160; https://github.com/sequelize/sequelize/commit/850c7fd04669e0fef9238b6dc4f8d6ee93ed71e9; https://github.com/sequelize/sequelize/pull/10746/files
CVE: CVE-2019-11070
Published: 2019-04-10
Description: WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-19
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html; http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html
CVE: CVE-2019-11071
Published: 2019-04-10
Description: SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-1-10-et-SPIP-3-2-4.html; https://github.com/spip/SPIP/commit/3ef87c525bc0768c926646f999a54222b37b5d36; https://github.com/spip/SPIP/commit/824d17f424bf77d17af89c18c3dc807a3199567e
CVE: CVE-2019-3943
Published: 2019-04-10
Description: MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).
CVSS Score: 8.1 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.tenable.com/security/research/tra-2019-16; https://www.tenable.com/security/research/tra-2019-16
CVE: CVE-2018-14683
Published: 2019-04-10
Description: PRTG before 19.1.49.1966 has Cross Site Scripting (XSS) in the WEBGUI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.paessler.com/prtg/history/stable; https://www.paessler.com/prtg/history/stable
CVE: CVE-2019-11072
Published: 2019-04-10
Description: lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107907; https://github.com/lighttpd/lighttpd1.4/commit/32120d5b8b3203fc21ccb9eafb0eaf824bb59354; https://redmine.lighttpd.net/issues/2945
CVE: CVE-2019-11077
Published: 2019-04-11
Description: FastAdmin V1.0.0.20190111_beta has a CSRF vulnerability to add a new admin user via the admin/auth/admin/add?dialog=1 URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/191/; http://www.iwantacve.cn/index.php/archives/191/
CVE: CVE-2019-11078
Published: 2019-04-11
Description: MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/193/; http://www.iwantacve.cn/index.php/archives/193/
CVE: CVE-2019-3914
Published: 2019-04-11
Description: Remote command injection vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows a remote, authenticated attacker to execute arbitrary commands on the target device by adding an access control rule for a network object with a crafted hostname.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2019-17; https://www.tenable.com/security/research/tra-2019-17
CVE: CVE-2019-3915
Published: 2019-04-11
Description: Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294
References: http://www.securityfocus.com/bid/107883; https://www.tenable.com/security/research/tra-2019-17; http://www.securityfocus.com/bid/107883
CVE: CVE-2019-3837
Published: 2019-04-11
Description: It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same network socket in parallel executed on ioatdma-enabled hardware with net_dma enabled can leak the memory, crash the host leading to a denial-of-service or cause a random memory corruption.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3837; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3837
CVE: CVE-2019-3845
Published: 2019-04-11
Description: A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite (or Capsule) can use this flaw to access QMF methods to any host also registered to Satellite (or Capsule) and execute privileged commands.
CVSS Score: 8.0 (HIGH)
CWE: CWE-284
References: https://access.redhat.com/errata/RHSA-2019:1223; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3845; https://access.redhat.com/errata/RHSA-2019:1223
CVE: CVE-2019-3916
Published: 2019-04-11
Description: Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://www.tenable.com/security/research/tra-2019-17; https://www.tenable.com/security/research/tra-2019-17
CVE: CVE-2019-6318
Published: 2019-04-11
Description: HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature validation that potentially allows execution of arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://support.hp.com/us-en/document/c06265454; https://support.hp.com/us-en/document/c06265454
CVE: CVE-2018-19300
Published: 2019-04-11
Description: On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772; https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers; https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/
CVE: CVE-2019-3459
Published: 2019-04-11
Description: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2019/06/27/2; http://www.openwall.com/lists/oss-security/2019/06/27/7; http://www.openwall.com/lists/oss-security/2019/06/28/1
CVE: CVE-2019-3460
Published: 2019-04-11
Description: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2019/06/27/2; http://www.openwall.com/lists/oss-security/2019/06/27/7; http://www.openwall.com/lists/oss-security/2019/06/28/1
CVE: CVE-2018-17305
Published: 2019-04-11
Description: UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://www.uipath.com/product/release-notes/uipath-v2018.1.7; https://www.uipath.com/product/release-notes/uipath-v2018.1.7
CVE: CVE-2019-5672
Published: 2019-04-11
Description: NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootsfs generation and flashing, which may lead to information disclosure.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-320
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4787; https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE: CVE-2019-5673
Published: 2019-04-11
Description: NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3) where the ARM System Memory Management Unit (SMMU) improperly checks for a fault condition, causing transactions to be discarded, which may lead to denial of service.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-754
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4787; https://nvidia.custhelp.com/app/answers/detail/a_id/4787
CVE: CVE-2019-5024
Published: 2019-04-11
Description: A restricted environment escape vulnerability exists in the “kiosk mode” function of Capsule Technologies SmartLinx Neuron 2 medical information collection devices running versions 9.0.3 or lower. A specific series of keyboard inputs can escape the restricted environment, resulting in full administrator access to the underlying operating system. An attacker can connect to the device via USB port with a keyboard or other HID device to trigger this vulnerability.
CVSS Score: 7.6 (HIGH)
CWE: CWE-693
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0785; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0785
CVE: CVE-2019-6610
Published: 2019-04-11
Description: On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack when performing URL classification.
CVSS Score: 8.6 (HIGH)
References: https://support.f5.com/csp/article/K42465020; https://support.f5.com/csp/article/K42465020
CVE: CVE-2019-5715
Published: 2019-04-11
Description: All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.silverstripe.org/download/security-releases/; https://www.silverstripe.org/download/security-releases/ss-2018-021; https://www.silverstripe.org/download/security-releases/
CVE: CVE-2019-7219
Published: 2019-04-11
Description: Unauthenticated reflected cross-site scripting (XSS) exists in Zarafa Webapp 2.0.1.47791 and earlier. NOTE: this is a discontinued product. The issue was fixed in later Zarafa Webapp versions; however, some former Zarafa Webapp customers use the related Kopano product instead.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/verifysecurity/CVE-2019-7219; https://stash.kopano.io/repos?visibility=public; https://github.com/verifysecurity/CVE-2019-7219
CVE: CVE-2019-9733
Published: 2019-04-11
Description: An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case an administrator gets locked out from the Artifactory console. This is only allowable from a connection directly from localhost, but providing a X-Forwarded-For HTTP header to the request allows an unauthenticated user to login with the default credentials of the access-admin account while bypassing the whitelist of allowed IP addresses. The access-admin account can use Artifactory's API to request authentication tokens for all users including the admin account and, in turn, assume full control of all artifacts and repositories managed by Artifactory.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/152172/JFrog-Artifactory-Administrator-Authentication-Bypass.html; https://www.ciphertechs.com/jfrog-artifactory-advisory/; https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-Artifactory6.8.6