deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-18867
Published: 2020-05-05
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90, and WNDR4500v3 before 1.0.0.48.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198; https://kb.netgear.com/000049554/Security-Advisory-for-Security-Misconfiguration-on-Some-Routers-and-Gateways-PSV-2017-2198
CVE: CVE-2020-11737
Published: 2020-05-05
Description: A cross-site scripting (XSS) vulnerability in Web Client in Zimbra 9.0 allows a remote attacker to craft links in an E-Mail message or calendar invite to execute arbitrary JavaScript. The attack requires an A element containing an href attribute with a "www" substring (including the quotes) followed immediately by a DOM event listener such as onmouseover. This is fixed in 9.0.0 Patch 2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.zimbra.com/2020/05/new-zimbra-9-kepler-patch-2/; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P2; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2020-12104
Published: 2020-05-05
Description: The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wordpress.org/plugins/wp-advanced-search/#developers; https://wpvulndb.com/vulnerabilities/10199; https://wordpress.org/plugins/wp-advanced-search/#developers
CVE: CVE-2020-8799
Published: 2020-05-05
Description: A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wti-like-post/#developers; https://wpvulndb.com/vulnerabilities/10210; https://wordpress.org/plugins/wti-like-post/#developers
CVE: CVE-2019-19514
Published: 2020-05-05
Description: Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2019-19515
Published: 2020-05-05
Description: Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2019-19517
Published: 2020-05-05
Description: Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2020-5517
Published: 2020-05-05
Description: CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://devel.blueonyx.it/trac/changeset/4034/; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://www.blueonyx.it/news/278/15/5209R5210R-YUM-Updates/
CVE: CVE-2020-7983
Published: 2020-05-05
Description: A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2020-8033
Published: 2020-05-05
Description: Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2020-8829
Published: 2020-05-05
Description: CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2020-8830
Published: 2020-05-05
Description: CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-918
References: https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4; https://gist.github.com/CyberSecurityUP/26c5b032897630fe8407da4a8ef216d4
CVE: CVE-2020-11495
Published: 2020-05-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-12142
Published: 2020-05-05
Description: 1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative access and shell access to the EdgeConnect appliance. An admin user can access IPSec seed and nonce parameters using the CLI, REST APIs, and the Linux shell.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_udp_key_material-cve_2020_12142.pdf; https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_ipsec_udp_key_material-cve_2020_12142.pdf
CVE: CVE-2020-12143
Published: 2020-05-05
Description: The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_orchestrator-cve_2020_12143.pdf; https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_orchestrator-cve_2020_12143.pdf
CVE: CVE-2020-12144
Published: 2020-05-05
Description: The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_portal-cve_2020_12144.pdf; https://www.silver-peak.com/sites/default/files/advisory/security_advisory_notice_rogue_portal-cve_2020_12144.pdf
CVE: CVE-2020-10630
Published: 2020-05-05
Description: SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is served to other users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.us-cert.gov/ics/advisories/ICSA2012602; https://www.us-cert.gov/ics/advisories/ICSA2012602
CVE: CVE-2020-10634
Published: 2020-05-05
Description: SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.us-cert.gov/ics/advisories/ICSA2012602; https://www.us-cert.gov/ics/advisories/ICSA2012602
CVE: CVE-2020-10859
Published: 2020-05-05
Description: Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.manageengine.com/products/desktop-central/arbitrary-file-upload-vulnerability.html; https://www.manageengine.com/products/desktop-central/arbitrary-file-upload-vulnerability.html
CVE: CVE-2020-11032
Published: 2020-05-05
Description: In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-344w-34h9-wwhh; https://github.com/glpi-project/glpi/security/advisories/GHSA-344w-34h9-wwhh
CVE: CVE-2020-11051
Published: 2020-05-05
Description: In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another editor (with write access as well) load the same page into the Markdown editor, the XSS payload will be executed as part of the preview panel. The rendered result does not contain the XSS payload as it is stripped by the HTML Sanitization security module. This vulnerability only impacts editors loading the malicious page in the Markdown editor. This has been patched in 2.3.81.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Requarks/wiki/commit/05e8a71ceff39167aee830ba8ad5eb0161f2911a; https://github.com/Requarks/wiki/security/advisories/GHSA-vj72-c9vq-qxrv; https://github.com/Requarks/wiki/commit/05e8a71ceff39167aee830ba8ad5eb0161f2911a
CVE: CVE-2019-20768
Published: 2020-05-05
Description: ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://outpost24.com/blog/Responsible-disclosure-Multiple-stored-XSS-vulnerabilities-discovered-in-ServiceNow-ITSM; https://outpost24.com/blog?tags=307; https://outpost24.com/blog/Responsible-disclosure-Multiple-stored-XSS-vulnerabilities-discovered-in-ServiceNow-ITSM
CVE: CVE-2020-11033
Published: 2020-05-05
Description: In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All api_tokens which can be used to do privileges escalations or read/update/delete data normally non accessible to the current user. - All personal_tokens can display another users planning. Exploiting this vulnerability requires the api to be enabled, a technician account. It can be mitigated by adding an application token. This is fixed in version 9.4.6.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-rf54-3r4w-4h55; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/
CVE: CVE-2020-11034
Published: 2020-05-05
Description: In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-185, CWE-601, CWE-601
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-gxv6-xq9q-37hg; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/
CVE: CVE-2020-11035
Published: 2020-05-05
Description: In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values. This is fixed in version 9.4.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-w7q8-58qp-vmpf; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/
CVE: CVE-2020-11036
Published: 2020-05-05
Description: In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with content "<script>alert(1)</script>" reproduces the attack. This can be exploited by a user with administrator privileges in the User-Agent field. It can also be exploited by an outside party through the following steps: 1. Create a user with the surname `" onmouseover="alert(document.cookie)` and an empty first name. 2. With this user, create a ticket 3. As an administrator (or other privileged user) open the created ticket 4. On the "last update" field, put your mouse on the name of the user 5. The XSS fires This is fixed in version 9.4.6.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-3g3h-rwhr-7385; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WQMONZRWLWOXMHMYWR7A5Q5JJERPMVC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q4BG2UTINBVV7MTJRXKBQ26GV2UINA6L/
CVE: CVE-2020-12439
Published: 2020-05-05
Description: Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-12439.md; https://github.com/mimblewimble/grin/issues/3235; https://github.com/mimblewimble/grin/pull/3236
CVE: CVE-2020-12463
Published: 2020-05-05
Description: An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
CVSS Score: 7.8 (HIGH)
References: https://support.avira.com/hc/en-us/articles/[PII_REDACTED]57-Avira-Software-Updater; https://support.avira.com/hc/en-us/articles/[PII_REDACTED]57-Avira-Software-Updater
CVE: CVE-2020-12666
Published: 2020-05-05
Description: macaron before 1.3.7 has an open redirect in the static handler, as demonstrated by the http://127.0.0.1:4000//example.com/ URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/go-macaron/macaron/issues/198; https://github.com/go-macaron/macaron/releases/tag/v1.3.7; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QEUOHRC4EN4WZ66EVFML2UCV7ZQ63XZ/
CVE: CVE-2020-12672
Published: 2020-05-06
Description: GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00012.html; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19025
CVE: CVE-2019-19166
Published: 2020-05-06
Description: Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-494
References: http://support.tobesoft.co.kr/Support/index.html; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35357; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2019-19167
Published: 2020-05-06
Description: Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-494
References: http://support.tobesoft.co.kr/Support/index.html; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35358; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2019-19168
Published: 2020-05-06
Description: Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
CVSS Score: 7.8 (HIGH)
References: http://www.dext5.com/page/support/notice_view.aspx?pSeq=26; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35352; http://www.dext5.com/page/support/notice_view.aspx?pSeq=26
CVE: CVE-2019-19169
Published: 2020-05-06
Description: Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
CVSS Score: 7.8 (HIGH)
References: http://www.dext5.com/page/support/notice_view.aspx?pSeq=26; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35353; http://www.dext5.com/page/support/notice_view.aspx?pSeq=26
CVE: CVE-2020-2181
Published: 2020-05-06
Description: Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1374; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2182
Published: 2020-05-06
Description: Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1835; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2183
Published: 2020-05-06
Description: Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they have no permission to access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-988; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2184
Published: 2020-05-06
Description: A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to connect to an attacker-specified URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1094; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2185
Published: 2020-05-06
Description: Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
CVSS Score: 5.6 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-381; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2186
Published: 2020-05-06
Description: A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1408; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2187
Published: 2020-05-06
Description: Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1528; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2188
Published: 2020-05-06
Description: A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1844; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-2189
Published: 2020-05-06
Description: Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2020/05/06/3; https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1826; http://www.openwall.com/lists/oss-security/2020/05/06/3
CVE: CVE-2020-4092
Published: 2020-05-06
Description: "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expose sensitive information including but not limited to server names, user IDs and document content."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078969
CVE: CVE-2020-6075
Published: 2020-05-06
Description: An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0998; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0998
CVE: CVE-2020-6076
Published: 2020-05-06
Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-0999; https://talosintelligence.com/vulnerability_reports/TALOS-2020-0999
CVE: CVE-2020-6082
Published: 2020-05-06
Description: An exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1004; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1004