deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-20360
Published: 2020-01-08
Description: A flaw in Give before 2.5.5, a WordPress plugin, allowed unauthenticated users to bypass API authentication methods and access personally identifiable user information (PII) including names, addresses, IP addresses, and email addresses. Once an API key has been set to any meta key value from the wp_usermeta table, and the token is set to the corresponding MD5 hash of the meta key selected, one can make a request to the restricted endpoints, and thus access sensitive donor data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://wpvulndb.com/vulnerabilities/9889; https://www.wordfence.com/blog/2019/09/authentication-bypass-vulnerability-in-givewp-plugin/; https://wpvulndb.com/vulnerabilities/9889
CVE: CVE-2019-20361
Published: 2020-01-08
Description: There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter (a blind SQL injection vulnerability).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/158568/WordPress-Email-Subscribers-And-Newsletters-4.2.2-SQL-Injection.html; https://wpvulndb.com/vulnerabilities/9947; https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/
CVE: CVE-2020-6170
Published: 2020-01-08
Description: An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-306
References: http://packetstormsecurity.com/files/156075/Genexis-Platinum-4410-2.1-Authentication-Bypass.html; https://medium.com/%40husinulzsanub/exploiting-router-authentication-through-web-interface-68660c708206; http://packetstormsecurity.com/files/156075/Genexis-Platinum-4410-2.1-Authentication-Bypass.html
CVE: CVE-2014-1454
Published: 2020-01-08
Description: Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/92341; https://www.securityfocus.com/archive/1/531750; https://exchange.xforce.ibmcloud.com/vulnerabilities/92341
CVE: CVE-2014-1598
Published: 2020-01-08
Description: centurystar 7.12 ActiveX Control has a Stack Buffer Overflow
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.ixiacom.com/strikes/exploits/scada/cve_2014_1598_CenturyStar_ActiveX_Control_SetMyAddress_bo.xml; https://support.ixiacom.com/strikes/exploits/scada/cve_2014_1598_CenturyStar_ActiveX_Control_SetMyAddress_bo.xml
CVE: CVE-2014-9908
Published: 2020-01-08
Description: A Denial of Service vulnerability exists in Google Android 4.4.4, 5.0.2, and 5.1.1, which allows malicious users to block Bluetooh access (Android Bug ID A-28672558).
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/94167; https://github.com/Genymobile/f2ut_platform_frameworks_base/commit/f24cec326f5f65c693544fb0b92c37f633bacda2; https://source.android.com/security/bulletin/2016-11-01.html
CVE: CVE-2019-14820
Published: 2020-01-08
Description: It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL. This vulnerability could allow an attacker to access unauthorized information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14820; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14820
CVE: CVE-2019-20362
Published: 2020-01-08
Description: In Teradici PCoIP Agent before 19.08.1 and PCoIP Client before 19.08.3, an unquoted service path can cause execution of %PROGRAMFILES(X86)%\Teradici\PCoIP.exe instead of the intended pcoip_vchan_printing_svc.exe file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier; https://help.teradici.com/s/article/unquoted-service-path-vulnerability-windows-agent-client-19-08-earlier
CVE: CVE-2014-1409
Published: 2020-01-08
Description: MobileIron VSP versions prior to 5.9.1 and Sentry versions prior to 5.0 have an authentication bypass vulnerability due to an XML file with obfuscated passwords
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-91
References: http://seclists.org/fulldisclosure/2014/Apr/21; https://exchange.xforce.ibmcloud.com/vulnerabilities/92351; https://packetstormsecurity.com/files/cve/CVE-2014-1409
CVE: CVE-2014-1860
Published: 2020-01-08
Description: Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2014/02/03/14; http://www.openwall.com/lists/oss-security/2014/02/07/7; http://www.securityfocus.com/bid/65293
CVE: CVE-2014-2072
Published: 2020-01-08
Description: Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://packetstormsecurity.com/files/125308/Catia-V5-6R2013-Stack-Buffer-Overflow.html; http://www.securityfocus.com/bid/65675; https://www.exploit-database.net/?id=60103
CVE: CVE-2016-6589
Published: 2020-01-08
Description: A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93951; https://support.symantec.com/us/en/article.symsa1383.html; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161031_00
CVE: CVE-2016-6590
Published: 2020-01-08
Description: A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/94279; http://www.securitytracker.com/id/1037302; https://support.symantec.com/us/en/article.symsa1385.html
CVE: CVE-2016-6591
Published: 2020-01-08
Description: A security bypass vulnerability exists in Symantec Norton App Lock 1.0.3.186 and earlier if application pinning is enabled, which could let a local malicious user bypass security restrictions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/94343; https://support.symantec.com/us/en/article.symsa1386.html; http://www.securityfocus.com/bid/94343
CVE: CVE-2016-6593
Published: 2020-01-08
Description: A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html; http://www.securityfocus.com/archive/1/539889/100/0/threaded; http://www.securityfocus.com/bid/94731
CVE: CVE-2019-10778
Published: 2020-01-08
Description: devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-DEVCERTSANSCACHE-540926; https://snyk.io/vuln/SNYK-JS-DEVCERTSANSCACHE-540926
CVE: CVE-2019-17076
Published: 2020-01-08
Description: An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), and/or deletion of files on the Jamf Pro server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://resources.jamf.com/documents/products/security-disclosure-notice-jamf-pro-10.15.1.pdf; https://resources.jamf.com/documents/products/security-disclosure-notice-jamf-pro-10.15.1.pdf
CVE: CVE-2019-19518
Published: 2020-01-08
Description: CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191210-01-security-notice-for-ca-automic-sysload.html; https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/ca20191210-01-security-notice-for-ca-automic-sysload.html
CVE: CVE-2019-5188
Published: 2020-01-08
Description: A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html; https://lists.debian.org/debian-lts-announce/2020/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2020/07/msg00021.html
CVE: CVE-2020-0009
Published: 2020-01-08
Description: In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This could lead to local escalation of privilege by corrupting memory shared between processes, with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-142938932
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: http://packetstormsecurity.com/files/155903/Android-ashmem-Read-Only-Bypasses.html; https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html; https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE: CVE-2014-5287
Published: 2020-01-08
Description: A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html; https://www.exploit-db.com/exploits/36609/; https://www.fxc.jp/news/Product_Overview-LoadMaster_Release_Notes.pdf
CVE: CVE-2016-6586
Published: 2020-01-08
Description: A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93901; http://www.securitytracker.com/id/1037225; https://support.symantec.com/us/en/article.symsa1384.html
CVE: CVE-2016-6588
Published: 2020-01-08
Description: A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Management Suite 8.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/93952; https://support.symantec.com/us/en/article.symsa1383.html; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161031_00
CVE: CVE-2019-10777
Published: 2020-01-08
Description: In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-AWSLAMBDA-540839; https://snyk.io/vuln/SNYK-JS-AWSLAMBDA-540839
CVE: CVE-2019-19544
Published: 2020-01-08
Description: CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life (EOL) status on April 1, 2015.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://github.com/itm4n/CVEs/tree/master/ca-dollaru-uxdqmsrv-privesc; https://github.com/itm4n/CVEs/tree/master/ca-dollaru-uxdqmsrv-privesc
CVE: CVE-2019-20363
Published: 2020-01-08
Description: An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20363-openfire.html; https://github.com/igniterealtime/Openfire/pull/1561; https://issues.igniterealtime.org/browse/OF-1955
CVE: CVE-2019-20364
Published: 2020-01-08
Description: An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20364-openfire.html; https://github.com/igniterealtime/Openfire/pull/1561; https://issues.igniterealtime.org/browse/OF-1955
CVE: CVE-2019-20365
Published: 2020-01-08
Description: An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20365-openfire.html; https://github.com/igniterealtime/Openfire/pull/1561; https://issues.igniterealtime.org/browse/OF-1955
CVE: CVE-2019-20366
Published: 2020-01-08
Description: An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2019-20366-openfire.html; https://github.com/igniterealtime/Openfire/pull/1561; https://issues.igniterealtime.org/browse/OF-1955
CVE: CVE-2019-20367
Published: 2020-01-08
Description: nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00043.html; https://gitlab.freedesktop.org/libbsd/libbsd/commit/9d917aad37778a9f4a96ba358415f077f3f36f3b; https://lists.apache.org/thread.html/r0e913668380f59bcbd14fdd8ae8d24f95f99995e290cd18a7822c6e5%40%3Cdev.tomee.apache.org%3E
CVE: CVE-2019-5082
Published: 2020-01-08
Description: An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0874; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0874
CVE: CVE-2016-6587
Published: 2020-01-08
Description: An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93858; http://www.securitytracker.com/id/1037225; https://support.symantec.com/us/en/article.symsa1384.html
CVE: CVE-2019-19495
Published: 2020-01-08
Description: The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://cablehaunt.com; https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf; https://github.com/Lyrebirds/Fast8690-exploit
CVE: CVE-2020-5183
Published: 2020-01-08
Description: FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. This memory corruption bug can possibly be classified as a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-787
References: http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html; https://www.exploit-db.com/exploits/47871; http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html
CVE: CVE-2020-5510
Published: 2020-01-08
Description: PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/47854; https://www.exploit-db.com/exploits/48542; https://www.exploit-db.com/exploits/47854
CVE: CVE-2020-5511
Published: 2020-01-08
Description: PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/47874; https://www.exploit-db.com/exploits/47874
CVE: CVE-2016-5346
Published: 2020-01-08
Description: An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_MSM_IPC sockets, which could let a local malicious user obtain sensitive information (Android Bug ID A-32551280).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97371; http://www.securitytracker.com/id/1038201; https://github.com/ele7enxxh/poc-exp/tree/master/CVE-2016-5346
CVE: CVE-2016-6585
Published: 2020-01-08
Description: A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/93900; http://www.securitytracker.com/id/1037225; https://support.symantec.com/us/en/article.symsa1384.html
CVE: CVE-2020-0001
Published: 2020-01-08
Description: In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-140055304
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0002
Published: 2020-01-08
Description: In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142602711
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0003
Published: 2020-01-08
Description: In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vulnerability. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0 Android ID: A-140195904
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-367
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0004
Published: 2020-01-08
Description: In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture size. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120847476
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0006
Published: 2020-01-08
Description: In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to remote information disclosure in the NFC server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-139738828
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0007
Published: 2020-01-08
Description: In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141890807
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2020-0008
Published: 2020-01-08
Description: In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-142558228
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-362
References: https://source.android.com/security/bulletin/2020-01-01; https://source.android.com/security/bulletin/2020-01-01
CVE: CVE-2019-11745
Published: 2020-01-08
Description: When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html
CVE: CVE-2019-11756
Published: 2020-01-08
Description: Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of service). This vulnerability affects Firefox < 71.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1508776; https://www.mozilla.org/security/advisories/mfsa2019-36/; https://bugzilla.mozilla.org/show_bug.cgi?id=1508776
CVE: CVE-2019-11757
Published: 2020-01-08
Description: When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1577107; https://security.gentoo.org/glsa/202003-10; https://usn.ubuntu.com/4335-1/