deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-9937
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9938
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9939
Published: 2020-10-22
Description: This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to load unsigned kernel extensions.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9940
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9980
Published: 2020-10-22
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9984
Published: 2020-10-22
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211290
CVE: CVE-2020-9985
Published: 2020-10-22
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/kb/HT211288; https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211291
CVE: CVE-2020-9986
Published: 2020-10-22
Description: A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.7. A malicious application may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
References: http://seclists.org/fulldisclosure/2020/Nov/21; https://support.apple.com/kb/HT211849; http://seclists.org/fulldisclosure/2020/Nov/21
CVE: CVE-2020-9990
Published: 2020-10-22
Description: A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211289
CVE: CVE-2020-9994
Published: 2020-10-22
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to overwrite arbitrary files.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/kb/HT211168; https://support.apple.com/kb/HT211170; https://support.apple.com/kb/HT211171
CVE: CVE-2020-9997
Published: 2020-10-22
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, watchOS 6.2.8. A malicious application may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/kb/HT211289; https://support.apple.com/kb/HT211291; https://support.apple.com/kb/HT211289
CVE: CVE-2019-16128
Published: 2020-10-22
Description: Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2020/10/22/1; https://census-labs.com/news/2020/10/21/microchip-cryptoauthlib-atcab_sign_base-buffer-overflow/; https://www.microchip.com/design-centers/security-ics/cryptoauthentication
CVE: CVE-2020-10721
Published: 2020-10-22
Description: A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://bugzilla.redhat.com/show_bug.cgi?id=1827201; https://bugzilla.redhat.com/show_bug.cgi?id=1827201
CVE: CVE-2018-18508
Published: 2020-10-22
Description: In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf; https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.36.7_release_notes; https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.41.1_release_notes
CVE: CVE-2019-17006
Published: 2020-10-22
Description: In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-119
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1539788; https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf; https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes
CVE: CVE-2019-17007
Published: 2020-10-22
Description: In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1533216; https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf; https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.44_release_notes
CVE: CVE-2020-11853
Published: 2020-10-22
Description: Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html; http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html; https://softwaresupport.softwaregrp.com/doc/KM03747657
CVE: CVE-2020-13327
Published: 2020-10-22
Description: An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2.10. Insecure Runner Configuration in Kubernetes Environments
CVSS Score: 6.0 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13327.json; https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26833; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13327.json
CVE: CVE-2020-15680
Published: 2020-10-22
Description: If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This vulnerability affects Firefox < 82.
CVSS Score: 5.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1658881; https://www.mozilla.org/security/advisories/mfsa2020-45/; https://bugzilla.mozilla.org/show_bug.cgi?id=1658881
CVE: CVE-2020-15681
Published: 2020-10-22
Description: When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82.
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1666568; https://www.mozilla.org/security/advisories/mfsa2020-45/; https://bugzilla.mozilla.org/show_bug.cgi?id=1666568
CVE: CVE-2020-15682
Published: 2020-10-22
Description: When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external protocol prompts to be tab-modal while also ensuring they could not be incorrectly associated with a different origin. This vulnerability affects Firefox < 82.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1636654; https://www.mozilla.org/security/advisories/mfsa2020-45/; https://bugzilla.mozilla.org/show_bug.cgi?id=1636654
CVE: CVE-2020-15683
Published: 2020-10-22
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.html; http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.html
CVE: CVE-2020-15684
Published: 2020-10-22
Description: Mozilla developers reported memory safety bugs present in Firefox 81. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 82.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1653764%2C1661402%2C1662259%2C1664257; https://www.mozilla.org/security/advisories/mfsa2020-45/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1653764%2C1661402%2C1662259%2C1664257
CVE: CVE-2020-18129
Published: 2020-10-22
Description: A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://baike.baidu.com/item/CSRF/2735433?fr=aladdin; https://baike.baidu.com/item/CSRF/2735433?fr=aladdin
CVE: CVE-2020-25186
Published: 2020-10-22
Description: An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, which may allow file disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-238-03; https://us-cert.cisa.gov/ics/advisories/icsa-20-238-03
CVE: CVE-2020-27670
Published: 2020-10-22
Description: An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html; http://www.openwall.com/lists/oss-security/2021/01/19/9
CVE: CVE-2020-27671
Published: 2020-10-22
Description: An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html; http://www.openwall.com/lists/oss-security/2021/01/19/8
CVE: CVE-2020-27672
Published: 2020-10-22
Description: An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html; http://www.openwall.com/lists/oss-security/2021/01/19/7
CVE: CVE-2020-27673
Published: 2020-10-22
Description: An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html; http://www.openwall.com/lists/oss-security/2021/01/19/6
CVE: CVE-2020-27674
Published: 2020-10-22
Description: An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2021/01/19/5; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZAM3LYJ5TZLSSNL3KXFILM46QKVTOUA/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3U4LNKKXU4UP4Z5XP6TMIWSML3QODPE/
CVE: CVE-2020-27675
Published: 2020-10-22
Description: An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/events_base.c allows event-channel removal during the event-handling loop (a race condition). This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash via events for an in-reconfiguration paravirtualized device, aka CID-073d0552ead5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-416, CWE-476
References: http://www.openwall.com/lists/oss-security/2021/01/19/3; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073d0552ead5bfc7a3a9c01de590e924f11b5dd2; https://github.com/torvalds/linux/commit/073d0552ead5bfc7a3a9c01de590e924f11b5dd2
CVE: CVE-2020-3996
Published: 2020-10-22
Description: Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4; https://github.com/vmware-tanzu/velero/security/advisories/GHSA-72xg-3mcq-52v4
CVE: CVE-2018-21266
Published: 2020-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-21267
Published: 2020-10-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-15270
Published: 2020-10-22
Description: Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessions to still receive subscription objects. It is not possible to create subscription objects with invalid session tokens. The issue is not patched.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-672, CWE-672
References: https://github.com/parse-community/parse-server/commit/78b59fb26b1c36e3cdbd42ba9fec025003267f58; https://github.com/parse-community/parse-server/security/advisories/GHSA-2xm2-xj2q-qgpj; https://npmjs.com/parse-server
CVE: CVE-2018-8062
Published: 2020-10-23
Description: A cross-site scripting (XSS) vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04_R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/159618/Comtrend-AR-5387un-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/159618/Comtrend-AR-5387un-Cross-Site-Scripting.html
CVE: CVE-2019-14711
Published: 2020-10-23
Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-20/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-20/
CVE: CVE-2019-14712
Published: 2020-10-23
Description: Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.
CVSS Score: 7.8 (HIGH)
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-24/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-24/
CVE: CVE-2019-14713
Published: 2020-10-23
Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
CVSS Score: 5.5 (MEDIUM)
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-21/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-21/
CVE: CVE-2019-14715
Published: 2020-10-23
Description: Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-28/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-28/
CVE: CVE-2019-14716
Published: 2020-10-23
Description: Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).
CVSS Score: 6.6 (MEDIUM)
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-27/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-27/
CVE: CVE-2019-14717
Published: 2020-10-23
Description: Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-26/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-26/
CVE: CVE-2019-14718
Published: 2020-10-23
Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-22/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-22/
CVE: CVE-2019-14719
Published: 2020-10-23
Description: Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-23/; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2020-23/
CVE: CVE-2020-15002
Published: 2020-10-23
Description: OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://seclists.org/fulldisclosure/2020/Oct/20; https://www.open-xchange.com/; https://seclists.org/fulldisclosure/2020/Oct/20
CVE: CVE-2020-15003
Published: 2020-10-23
Description: OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access).
CVSS Score: 4.3 (MEDIUM)
References: https://seclists.org/fulldisclosure/2020/Oct/20; https://www.open-xchange.com/; https://seclists.org/fulldisclosure/2020/Oct/20
CVE: CVE-2020-15004
Published: 2020-10-23
Description: OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2020/Oct/20; https://www.open-xchange.com/; https://seclists.org/fulldisclosure/2020/Oct/20
CVE: CVE-2020-26887
Published: 2020-10-23
Description: FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/159606/FRITZ-Box-7.20-DNS-Rebinding-Protection-Bypass.html; https://en.avm.de/news/; https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
CVE: CVE-2020-9331
Published: 2020-10-23
Description: CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space.
CVSS Score: 7.8 (HIGH)
References: https://www.youtube.com/watch?v=b5vPDmMtzwQ; https://www.youtube.com/watch?v=b5vPDmMtzwQ
CVE: CVE-2020-9361
Published: 2020-10-23
Description: CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.
CVSS Score: 5.5 (MEDIUM)
References: https://www.youtube.com/watch?v=b5vPDmMtzwQ; https://www.youtube.com/watch?v=b5vPDmMtzwQ