deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-9383
Published: 2019-09-03
Description: FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd; https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html; https://savannah.nongnu.org/bugs/?46346
CVE: CVE-2019-15851
Published: 2019-09-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13590. Reason: This candidate is a reservation duplicate of CVE-2019-13590. Notes: All CVE users should reference CVE-2019-13590 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-15858
Published: 2019-09-03
Description: admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-woody-ad-snippets-plugin-lead-to-remote-code-execution/; https://wpvulndb.com/vulnerabilities/9490; https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-woody-ad-snippets-plugin-lead-to-remote-code-execution/
CVE: CVE-2019-15860
Published: 2019-09-03
Description: Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://gist.github.com/RootUp/b5de893bb2e51a4c846c5a0caa13b666; https://gist.github.com/RootUp/b5de893bb2e51a4c846c5a0caa13b666
CVE: CVE-2019-15043
Published: 2019-09-03
Description: In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html
CVE: CVE-2019-15863
Published: 2019-09-03
Description: The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.
CVSS Score: 7.5 (HIGH)
References: https://www.convertplug.com/plus/changelog/; https://www.convertplug.com/plus/changelog/
CVE: CVE-2019-15864
Published: 2019-09-03
Description: The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/breadcrumbs-by-menu/#developers; https://wpvulndb.com/vulnerabilities/9338; https://wordpress.org/plugins/breadcrumbs-by-menu/#developers
CVE: CVE-2019-15865
Published: 2019-09-03
Description: The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/breadcrumbs-by-menu/#developers; https://wpvulndb.com/vulnerabilities/9338; https://wordpress.org/plugins/breadcrumbs-by-menu/#developers
CVE: CVE-2019-15866
Published: 2019-09-03
Description: The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin/; https://wordpress.org/plugins/crelly-slider/#developers; https://blog.nintechnet.com/arbitrary-file-upload-vulnerability-in-wordpress-crelly-slider-plugin/
CVE: CVE-2019-15867
Published: 2019-09-03
Description: The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://wordpress.org/plugins/slick-popup/#developers; https://wpvulndb.com/vulnerabilities/9317; https://www.wordfence.com/blog/2019/05/privilege-escalation-flaw-present-in-slick-popup-plugin/
CVE: CVE-2019-15868
Published: 2019-09-03
Description: The affiliates-manager plugin before 2.6.6 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/affiliates-manager/#developers; https://wpvulndb.com/vulnerabilities/9335; https://wordpress.org/plugins/affiliates-manager/#developers
CVE: CVE-2019-15869
Published: 2019-09-03
Description: The JobCareer theme before 2.5.1 for WordPress has stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/9322; https://wpvulndb.com/vulnerabilities/9322
CVE: CVE-2019-15870
Published: 2019-09-03
Description: The CarSpot theme before 2.1.7 for WordPress has stored XSS via the Phone Number field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/9258; https://wpvulndb.com/vulnerabilities/9258
CVE: CVE-2019-15871
Published: 2019-09-03
Description: The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/loginpress/#developers; https://www.webarxsecurity.com/loginpress-plugin/; https://wordpress.org/plugins/loginpress/#developers
CVE: CVE-2019-15872
Published: 2019-09-03
Description: The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.org/plugins/loginpress/#developers; https://www.webarxsecurity.com/loginpress-plugin/; https://wordpress.org/plugins/loginpress/#developers
CVE: CVE-2019-15873
Published: 2019-09-03
Description: The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://wordpress.org/plugins/profilegrid-user-profiles-groups-and-communities/#developers; https://wpvulndb.com/vulnerabilities/9086; https://wordpress.org/plugins/profilegrid-user-profiles-groups-and-communities/#developers
CVE: CVE-2019-10197
Published: 2019-09-03
Description: A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html; https://access.redhat.com/errata/RHSA-2019:3253; https://access.redhat.com/errata/RHSA-2019:4023
CVE: CVE-2019-13156
Published: 2019-09-03
Description: NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: https://cve.naver.com/detail/cve-2019-13156; https://cve.naver.com/detail/cve-2019-13156
CVE: CVE-2019-14811
Published: 2019-09-03
Description: A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-648, CWE-863
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html; https://access.redhat.com/errata/RHBA-2019:2824
CVE: CVE-2019-14817
Published: 2019-09-03
Description: A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-648, CWE-863
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=cd1b1cacadac2479e291efe611979bdc1b3bdb19; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html
CVE: CVE-2019-3751
Published: 2019-09-03
Description: Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://www.dell.com/support/security/en-us/details/536848/DSA-2019-118-Dell-EMC-Enterprise-Copy-Data-Management-eCDM-Improper-Certificate-Validation-Vuln; https://www.dell.com/support/security/en-us/details/536848/DSA-2019-118-Dell-EMC-Enterprise-Copy-Data-Management-eCDM-Improper-Certificate-Validation-Vuln
CVE: CVE-2019-3754
Published: 2019-09-03
Description: Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to 5.0.0.0.5.116 and Dell EMC VNXe3200 versions prior to 3.1.10.9946299 contain a reflected cross-site scripting vulnerability on the cas/logout page. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or Java Script code to Unisphere, which is then reflected back to the victim and executed by the web browser.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/security/en-us/details/536796/DSA-2019-125-Dell-EMC-Unity-and-VNXe3200-Family-Reflected-Cross-Site-Scripting-Vulnerability; https://www.dell.com/support/security/en-us/details/536796/DSA-2019-125-Dell-EMC-Unity-and-VNXe3200-Family-Reflected-Cross-Site-Scripting-Vulnerability
CVE: CVE-2019-14261
Published: 2019-09-03
Description: An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices. Due to an insufficient implementation of jamming detection, an attacker is able to suppress correctly received RF messages sent between wireless peripheral components, e.g., wireless detectors or remote controls, and the ABUS Secvest alarm central. An attacker is able to perform a "reactive jamming" attack. The reactive jamming simply detects the start of a RF message sent by a component of the ABUS Secvest wireless alarm system, for instance a wireless motion detector (FUBW50000) or a remote control (FUBE50014 or FUBE50015), and overlays it with random data before the original RF message ends. Thereby, the receiver (alarm central) is not able to properly decode the original transmitted signal. This enables an attacker to suppress correctly received RF messages of the wireless alarm system in an unauthorized manner, for instance status messages sent by a detector indicating an intrusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://packetstormsecurity.com/files/153780/ABUS-Secvest-3.01.01-Unchecked-Message-Transmission-Error-Condition.html; http://seclists.org/fulldisclosure/2019/Jul/30; https://seclists.org/bugtraq/2019/Jul/52
CVE: CVE-2019-15889
Published: 2019-09-03
Description: The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154356/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/152511/WordPress-Download-Manager-2.9.92-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/152552/WordPress-Download-Manager-2.9.93-Cross-Site-Scripting.html
CVE: CVE-2019-1125
Published: 2019-09-03
Description: An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries.
To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information that could be used to try to compromise the affected system further.
On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre) involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. This vulnerability, released on August 6, 2019, is a variant of the Spectre Variant 1 speculative execution side channel vulnerability and has been assigned CVE-2019-1125.
Microsoft released a security update on July 9, 2019 that addresses the vulnerability through a software change that mitigates how the CPU speculatively accesses memory. Note that this vulnerability does not require a microcode update from your device OEM.
CVSS Score: 5.6 (MEDIUM)
References: http://packetstormsecurity.com/files/156337/SWAPGS-Attack-Proof-Of-Concept.html; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-swapgs-en; https://access.redhat.com/errata/RHBA-2019:2824
CVE: CVE-2019-6179
Published: 2019-09-03
Description: An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) prior to version 2.5.0 , Lenovo XClarity Integrator (LXCI) for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator (LXCI) for VMWare vCenter prior to version 6.1.0 that could allow information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://support.lenovo.com/solutions/LEN-27805; https://support.lenovo.com/solutions/LEN-27805
CVE: CVE-2019-6180
Published: 2019-09-03
Description: A stored cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to cause JavaScript code to be stored in LXCA which may then be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.lenovo.com/solutions/LEN-27805; https://support.lenovo.com/solutions/LEN-27805
CVE: CVE-2019-6181
Published: 2019-09-03
Description: A reflected cross-site scripting (XSS) vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow a crafted URL, if visited, to cause JavaScript code to be executed in the user's web browser. The JavaScript code is not executed on LXCA itself.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.lenovo.com/solutions/LEN-27805; https://support.lenovo.com/solutions/LEN-27805
CVE: CVE-2019-6182
Published: 2019-09-03
Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.5.0 that could allow an administrative user to store malformed data in LXCA Jobs and Event Log data, that could result in crafted formulas stored in an exported CSV file. The crafted formula is not executed on LXCA itself.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1236
References: https://support.lenovo.com/solutions/LEN-27805; https://support.lenovo.com/solutions/LEN-27805
CVE: CVE-2019-5475
Published: 2019-09-03
Description: The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such as the Yum Configuration Capability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://hackerone.com/reports/654888; https://hackerone.com/reports/654888
CVE: CVE-2019-5478
Published: 2019-09-03
Description: A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an incorrect secure boot behavior.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-657, CWE-345
References: https://github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt; https://www.xilinx.com/support/answers/72588.html; https://github.com/inversepath/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_Only_Secure_Boot_bypass.txt
CVE: CVE-2019-5479
Published: 2019-09-03
Description: An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).
CVSS Score: 7.5 (HIGH)
CWE: CWE-98, CWE-829
References: https://hackerone.com/reports/566056; https://hackerone.com/reports/566056
CVE: CVE-2019-5480
Published: 2019-09-03
Description: A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/570035; https://hackerone.com/reports/570035
CVE: CVE-2019-15892
Published: 2019-09-03
Description: An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00069.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00089.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3OEOCYRU43TWEU2C65F3D6GK64MSWNNK/
CVE: CVE-2019-15898
Published: 2019-09-03
Description: Nagios Log Server before 2.0.8 allows Reflected XSS via the username on the Login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lucaottoni/reflectedxss_nagios/blob/master/README.md; https://www.nagios.com/downloads/nagios-log-server/change-log/; https://github.com/lucaottoni/reflectedxss_nagios/blob/master/README.md
CVE: CVE-2019-15902
Published: 2019-09-04
Description: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; https://grsecurity.net/teardown_of_a_failed_linux_lts_spectre_fix.php
CVE: CVE-2019-15903
Published: 2019-09-04
Description: In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-776, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html
CVE: CVE-2019-10709
Published: 2019-09-04
Description: AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html; https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html; http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html
CVE: CVE-2019-12587
Published: 2019-09-04
Description: The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266_NONOS_SDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key (PMK) after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames via a rogue access point.
CVSS Score: 8.1 (HIGH)
CWE: CWE-327
References: https://github.com/Matheus-Garbelini/esp32_esp8266_attacks; https://github.com/espressif; https://matheus-garbelini.github.io/home/post/zero-pmk-installation/
CVE: CVE-2019-12588
Published: 2019-09-04
Description: The client 802.11 mac implementation in Espressif ESP8266_NONOS_SDK 2.2.0 through 3.1.0 does not validate correctly the RSN AuthKey suite list count in beacon frames, probe responses, and association responses, which allows attackers in radio range to cause a denial of service (crash) via a crafted message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/Matheus-Garbelini/esp32_esp8266_attacks; https://github.com/espressif; https://matheus-garbelini.github.io/home/post/esp8266-beacon-frame-crash/
CVE: CVE-2019-15718
Published: 2019-09-04
Description: In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
CVSS Score: 4.4 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2019/09/03/1; https://access.redhat.com/errata/RHSA-2019:3592; https://access.redhat.com/errata/RHSA-2019:3941
CVE: CVE-2019-10988
Published: 2019-09-04
Description: In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thus, any unmitigated vulnerability in the old operating system could be exploited to affect this product.
CVSS Score: 3.4 (LOW)
CWE: CWE-477
References: https://www.us-cert.gov/ics/advisories/icsma-19-241-02; https://www.us-cert.gov/ics/advisories/icsma-19-241-02
CVE: CVE-2019-13209
Published: 2019-09-04
Description: Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is accomplished, the exploiter is able to execute commands against the cluster's Kubernetes API with the permissions and identity of the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.rancher.com/c/announcements; https://forums.rancher.com/t/rancher-release-v2-2-5-addresses-rancher-cve-2019-13209/14801; https://forums.rancher.com/c/announcements
CVE: CVE-2019-15813
Published: 2019-09-04
Description: Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/159712/Sentrifugo-3.2-Shell-Upload-Restriction-Bypass.html; https://www.exploit-db.com/exploits/47323; http://packetstormsecurity.com/files/159712/Sentrifugo-3.2-Shell-Upload-Restriction-Bypass.html