deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2214
Published: 2019-11-13
Description: In binder_transaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-136210786References: Upstream kernel
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html; https://source.android.com/security/bulletin/2019-11-01; https://usn.ubuntu.com/4226-1/
CVE: CVE-2019-2233
Published: 2019-11-13
Description: In getUserCount and getCount of UserSwitcherController.java, there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140486529
CVSS Score: 6.8 (MEDIUM)
References: https://source.android.com/security/bulletin/2019-11-01; https://source.android.com/security/bulletin/2019-11-01
CVE: CVE-2010-4533
Published: 2019-11-13
Description: offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://access.redhat.com/security/cve/cve-2010-4533; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606962; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4533
CVE: CVE-2013-3517
Published: 2019-11-13
Description: Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ise.io/casestudies/exploiting-soho-routers/; https://www.ise.io/soho_service_hacks/; https://www.ise.io/casestudies/exploiting-soho-routers/
CVE: CVE-2019-16950
Published: 2019-11-13
Description: An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. The QueueName parameter of a GET request allows for insertion of user-supplied JavaScript.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/; https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/
CVE: CVE-2019-16951
Published: 2019-11-13
Description: A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribute with one's own domain name. When the product calls this domain after the POST request is sent, it retrieves an attacker's data and displays it. Also worth mentioning is the amount of information sent in the request from this product to the attacker: it reveals information the public should not have. This includes pathnames and internal ip addresses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-829
References: https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/; https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/
CVE: CVE-2010-4653
Published: 2019-11-13
Description: An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://security.gentoo.org/glsa/glsa-201310-03.xml; http://www.securityfocus.com/bid/45948; https://access.redhat.com/security/cve/cve-2010-4653
CVE: CVE-2010-4654
Published: 2019-11-13
Description: poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: http://security.gentoo.org/glsa/glsa-201310-03.xml; https://access.redhat.com/security/cve/cve-2010-4654; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4654
CVE: CVE-2013-3516
Published: 2019-11-13
Description: NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.ise.io/casestudies/exploiting-soho-routers/; https://www.ise.io/research/studies-and-papers/netgear_wnr3500/; https://www.ise.io/soho_service_hacks/
CVE: CVE-2019-18793
Published: 2019-11-13
Description: Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155175/Parallels-Plesk-Panel-9.5-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/155175/Parallels-Plesk-Panel-9.5-Cross-Site-Scripting.html
CVE: CVE-2019-18837
Published: 2019-11-13
Description: An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c.
CVSS Score: 8.6 (HIGH)
CWE: CWE-59
References: https://github.com/containers/crun/pull/173; https://github.com/containers/crun/releases/tag/0.10.5; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTA5SJUAKQUK6HRY2CZVJUIZP5BO3EOG/
CVE: CVE-2019-18844
Published: 2019-11-13
Description: The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://github.com/projectacrn/acrn-hypervisor/commit/2b3dedfb9ba13f15887f22b935d373f36c9a59fa; https://github.com/projectacrn/acrn-hypervisor/commit/6199e653418eda58cd698d[PII_REDACTED]453e2535; https://github.com/projectacrn/acrn-hypervisor/compare/acrn-2019w25.4-140000p...acrn-2019w25.5-140000p
CVE: CVE-2019-18883
Published: 2019-11-13
Description: XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155241/LavaLite-CMS-5.7-Cross-Site-Scripting.html; https://github.com/LavaLite/cms/; http://packetstormsecurity.com/files/155241/LavaLite-CMS-5.7-Cross-Site-Scripting.html
CVE: CVE-2019-18884
Published: 2019-11-13
Description: index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/155242/RISE-Ultimate-Project-Manager-2.3-Cross-Site-Request-Forgery.html; https://codecanyon.net/item/rise-ultimate-project-manager/15455641; http://packetstormsecurity.com/files/155242/RISE-Ultimate-Project-Manager-2.3-Cross-Site-Request-Forgery.html
CVE: CVE-2019-2210
Published: 2019-11-13
Description: In load_logging_config of qmi_vs_service.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-139148442
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-11-01; https://source.android.com/security/bulletin/pixel/2019-11-01
CVE: CVE-2019-9466
Published: 2019-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-9467
Published: 2019-11-13
Description: In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-80316910
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-77
References: https://source.android.com/security/bulletin/pixel/2019-11-01; https://source.android.com/security/bulletin/pixel/2019-11-01
CVE: CVE-2010-4657
Published: 2019-11-13
Description: PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://access.redhat.com/security/cve/cve-2010-4657; https://bugs.launchpad.net/php/%2Bbug/655442; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4657
CVE: CVE-2010-4661
Published: 2019-11-13
Description: udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00000.html; https://access.redhat.com/security/cve/cve-2010-4661; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4661
CVE: CVE-2011-4972
Published: 2019-11-13
Description: hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2013/06/04/5; http://www.openwall.com/lists/oss-security/2013/06/04/7; https://drupal.org/node/1337006
CVE: CVE-2012-5193
Published: 2019-11-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) stats/index.php or (2) newsletters/edition.php or the (3) username parameter to users/remind_password.php, (4) days parameter to stats/index.php, (5) login parameter to users/register.php, or (6) highlight parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/22216; https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-016-multiple-vulnerabilities-in-bitweaver/; https://www.exploit-db.com/exploits/22216
CVE: CVE-2013-3367
Published: 2019-11-13
Description: Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.ise.io/casestudies/exploiting-soho-routers/; https://www.ise.io/soho_service_hacks/; https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE: CVE-2013-4275
Published: 2019-11-13
Description: Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, and 7.x-5.x before 7.x-5.4 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the breadcrumb separator field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2013/Aug/226; http://www.madirish.net/?article=452; http://www.openwall.com/lists/oss-security/2013/08/22/2
CVE: CVE-2014-1214
Published: 2019-11-13
Description: views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/91020; https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/; https://exchange.xforce.ibmcloud.com/vulnerabilities/91020
CVE: CVE-2019-17515
Published: 2019-11-13
Description: The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and inc/cleantalk-comments.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2172333; https://wordpress.org/plugins/cleantalk-spam-protect/#developers; https://wpvulndb.com/vulnerabilities/9949
CVE: CVE-2019-17550
Published: 2019-11-13
Description: The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2186043; https://plugins.trac.wordpress.org/log/blog2social/; https://wordpress.org/plugins/blog2social/#developers
CVE: CVE-2010-4664
Published: 2019-11-13
Description: In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://access.redhat.com/security/cve/cve-2010-4664; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664; https://security-tracker.debian.org/tracker/CVE-2010-4664
CVE: CVE-2010-4817
Published: 2019-11-13
Description: pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://access.redhat.com/security/cve/cve-2010-4817; https://bugs.launchpad.net/pithos/%2Bbug/667896; https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-4817.html
CVE: CVE-2013-3097
Published: 2019-11-13
Description: Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/59479; https://exchange.xforce.ibmcloud.com/vulnerabilities/83785; https://www.ise.io/casestudies/exploiting-soho-routers/
CVE: CVE-2013-3366
Published: 2019-11-13
Description: Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.ise.io/casestudies/exploiting-soho-routers/; https://www.ise.io/soho_service_hacks/; https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
CVE: CVE-2019-0382
Published: 2019-11-13
Description: A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform (Web Intelligence-Publication related pages); corrected in version 4.2. Privileges are required in order to exploit this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2817937; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2817937
CVE: CVE-2019-0385
Published: 2019-11-13
Description: SAP Enable Now, before version 1908, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2833771; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2833771
CVE: CVE-2019-0389
Published: 2019-11-13
Description: An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise.
CVSS Score: 8.8 (HIGH)
References: https://launchpad.support.sap.com/#/notes/2814357; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2814357
CVE: CVE-2019-0390
Published: 2019-11-13
Description: Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/2842034; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2842034
CVE: CVE-2019-0391
Published: 2019-11-13
Description: Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted.
CVSS Score: 4.3 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2835226; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2835226
CVE: CVE-2019-0393
Published: 2019-11-13
Description: An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://launchpad.support.sap.com/#/notes/2816035; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2816035
CVE: CVE-2019-18923
Published: 2019-11-13
Description: Insufficient content type validation of proxied resources in go-camo before 2.1.1 allows a remote attacker to serve arbitrary content from go-camo's origin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cactus/go-camo/blob/505862f7bf14c8b6ff945734d5f3fdcd929e45dd/pkg/camo/proxy.go#L453-L460; https://github.com/cactus/go-camo/security/advisories/GHSA-jg2r-qf99-4wvr; https://github.com/cactus/go-camo/blob/505862f7bf14c8b6ff945734d5f3fdcd929e45dd/pkg/camo/proxy.go#L453-L460
CVE: CVE-2010-5108
Published: 2019-11-13
Description: Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2013/02/13/2; https://access.redhat.com/security/cve/cve-2010-5108; https://security-tracker.debian.org/tracker/CVE-2010-5108
CVE: CVE-2019-0386
Published: 2019-11-13
Description: Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04) does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862
References: https://launchpad.support.sap.com/#/notes/2840520; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2840520
CVE: CVE-2019-0388
Published: 2019-11-13
Description: SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://launchpad.support.sap.com/#/notes/2843016; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2843016
CVE: CVE-2019-0396
Published: 2019-11-13
Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://launchpad.support.sap.com/#/notes/2814007; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390; https://launchpad.support.sap.com/#/notes/2814007
CVE: CVE-2019-13555
Published: 2019-11-13
Description: In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://www.us-cert.gov/ics/advisories/icsa-19-311-01; https://www.us-cert.gov/ics/advisories/icsa-19-311-01
CVE: CVE-2019-18240
Published: 2019-11-13
Description: In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-311-02; https://www.us-cert.gov/ics/advisories/icsa-19-311-02
CVE: CVE-2019-18951
Published: 2019-11-13
Description: SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html; https://gist.github.com/pak0s/af9f640170aed335fdf6d110d468dbce; http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html
CVE: CVE-2019-18952
Published: 2019-11-13
Description: SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload. This can be combined with CVE-2019-18951 to achieve remote code execution via a .html file, containing short codes, that is served over HTTP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html; https://gist.github.com/pak0s/af9f640170aed335fdf6d110d468dbce; http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html
CVE: CVE-2019-3420
Published: 2019-11-13
Description: All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations.
CVSS Score: 6.5 (MEDIUM)
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011802; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011802
CVE: CVE-2019-3649
Published: 2019-11-13
Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE: CVE-2019-3650
Published: 2019-11-13
Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.
CVSS Score: 5.3 (MEDIUM)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10304; https://kc.mcafee.com/corporate/index?page=content&id=SB10304