deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-36162
Published: 2021-01-06
Description: An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which does not exist. By default, on Windows systems users can create directories under <drive>:\. A low privileged user can create a <drive>:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, which may result in arbitrary code execution. This would give the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-011; https://www.veritas.com/content/support/en_US/security/VTS20-011
CVE: CVE-2020-36163
Published: 2021-01-06
Description: An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under C:\. If a low privileged user on the Windows system creates an affected path with a library that NetBackup attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This affects NetBackup master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade on all systems and post-install on Master, Media, and OpsCenter servers during normal operations.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue2; https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue2
CVE: CVE-2020-36164
Published: 2021-01-06
Description: An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file (which does not exist) at the following locations in both the System drive (typically C:\) and the product's installation drive (typically not C:\): \Isode\etc\ssl\openssl.cnf (on SMTP Server) or \user\ssl\openssl.cnf (on other affected components). By default, on Windows systems, users can create directories under C:\. A low privileged user can create a openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability only affects a server with MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-013; https://www.veritas.com/content/support/en_US/security/VTS20-013
CVE: CVE-2020-36165
Published: 2021-01-06
Description: An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:/ReleaseX64/ssl/openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This impacts DLO server and client installations.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-012; https://www.veritas.com/content/support/en_US/security/VTS20-012
CVE: CVE-2020-36166
Published: 2021-01-06
Description: An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, Storage Foundation HA through 6.1 on Windows, and InfoScale Operations Manager (aka VIOM) Windows Management Server 7.x through 7.4.2. On start-up, it loads the OpenSSL library from \usr\local\ssl. This library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\usr\local\ssl\openssl.cnf, where <drive> could be the default Windows installation drive such as C:\ or the drive where a Veritas product is installed. By default, on Windows systems, users can create directories under any top-level directory. A low privileged user can create a <drive>:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-014; https://www.veritas.com/content/support/en_US/security/VTS20-014
CVE: CVE-2020-36167
Published: 2021-01-06
Description: An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\usr\local\ssl\openssl.cnf. A low privileged user can create a :\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. If the system is also an Active Directory domain controller, then this can affect the entire domain.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-434
References: https://www.kb.cert.org/vuls/id/429301; https://www.veritas.com/content/support/en_US/security/VTS20-010; https://www.kb.cert.org/vuls/id/429301
CVE: CVE-2020-36168
Published: 2021-01-06
Description: An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\. A low privileged user can create a C:\usr\local\ssl\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-015; https://www.veritas.com/content/support/en_US/security/VTS20-015
CVE: CVE-2020-36169
Published: 2021-01-06
Description: An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the top level of any drive. If a low privileged user creates an affected path with a library that the Veritas product attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability affects master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade and post-install during normal operations.
CVSS Score: 9.3 (CRITICAL)
References: https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue1; https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue1
CVE: CVE-2021-21235
Published: 2021-01-06
Description: kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specifically, reader::read_from_container can cause an infinite loop when a crafted PNG file is given. This is fixed in version 0.5.3. No workaround is available. Applications that do not pass files with the PNG signature to Reader::read_from_container are not affected.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400, CWE-835
References: https://crates.io/crates/kamadak-exif; https://github.com/kamadak/exif-rs/commit/f21df24616ea611c5d5d0e0e2f8042eb74d5ff48; https://github.com/kamadak/exif-rs/security/advisories/GHSA-px9g-8hgv-jvg2
CVE: CVE-2020-26759
Published: 2021-01-06
Description: clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/mymarilyn/clickhouse-driver/commit/3e990547e064b8fca916b23a0f7d6fe8c63c7f6b; https://github.com/mymarilyn/clickhouse-driver/commit/d708ed548e1d6f254ba81a21de8ba543a53b5598; https://github.com/mymarilyn/clickhouse-driver/commit/3e990547e064b8fca916b23a0f7d6fe8c63c7f6b
CVE: CVE-2020-4336
Published: 2021-01-06
Description: IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177932; https://www.ibm.com/support/pages/node/6397682; https://exchange.xforce.ibmcloud.com/vulnerabilities/177932
CVE: CVE-2020-10655
Published: 2021-01-06
Description: The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.proofpoint.com/us/blog; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003; https://www.proofpoint.com/us/blog
CVE: CVE-2020-10656
Published: 2021-01-06
Description: The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.proofpoint.com/us/blog; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003; https://www.proofpoint.com/us/blog
CVE: CVE-2020-10657
Published: 2021-01-06
Description: The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in the console) to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://www.proofpoint.com/us/blog; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003; https://www.proofpoint.com/us/blog
CVE: CVE-2020-10658
Published: 2021-01-06
Description: The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is caused by improper deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.proofpoint.com/us/blog; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0003; https://www.proofpoint.com/us/blog
CVE: CVE-2020-36170
Published: 2021-01-06
Description: The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms.
CVSS Score: 5.3 (MEDIUM)
References: https://wordpress.org/plugins/ultimate-member/#developers; https://wordpress.org/plugins/ultimate-member/#developers
CVE: CVE-2020-8884
Published: 2021-01-06
Description: rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of improper deserialization over named pipes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.proofpoint.com/us/blog; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2020-0002; https://www.proofpoint.com/us/blog
CVE: CVE-2012-10001
Published: 2021-01-06
Description: The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://wordpress.org/plugins/limit-login-attempts/#developers; https://wordpress.org/plugins/limit-login-attempts/#developers
CVE: CVE-2020-13544
Published: 2021-01-06
Description: An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to sign-extend a length used to terminate a loop, which can later result in the loop’s index being used to write outside the bounds of a heap buffer during the reading of file data. An attacker can entice the victim to open a document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-194, CWE-681
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1161; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1161
CVE: CVE-2020-13545
Published: 2021-01-06
Description: An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-196, CWE-681, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1162; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1162
CVE: CVE-2020-27285
Published: 2021-01-06
Description: The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE: CVE-2020-36171
Published: 2021-01-06
Description: The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/elementor/#developers; https://wordpress.org/plugins/elementor/#developers
CVE: CVE-2020-36172
Published: 2021-01-06
Description: The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/advanced-custom-fields/#developers; https://wordpress.org/plugins/advanced-custom-fields/#developers
CVE: CVE-2020-36173
Published: 2021-01-06
Description: The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://wordpress.org/plugins/ninja-forms/#developers; https://wordpress.org/plugins/ninja-forms/#developers
CVE: CVE-2020-36174
Published: 2021-01-06
Description: The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/ninja-forms/#developers; https://wordpress.org/plugins/ninja-forms/#developers
CVE: CVE-2020-36175
Published: 2021-01-06
Description: The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://wordpress.org/plugins/ninja-forms/#developers; https://wordpress.org/plugins/ninja-forms/#developers
CVE: CVE-2020-36176
Published: 2021-01-06
Description: The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://wordpress.org/plugins/better-wp-security/#developers; https://wordpress.org/plugins/better-wp-security/#developers
CVE: CVE-2020-8160
Published: 2021-01-06
Description: MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/838178; https://marketplace.mendix.com/link/component/111349; https://hackerone.com/reports/838178
CVE: CVE-2020-27279
Published: 2021-01-06
Description: A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE: CVE-2020-27283
Published: 2021-01-06
Description: An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404, CWE-404
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-005-04
CVE: CVE-2020-36177
Published: 2021-01-06
Description: RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26567; https://github.com/wolfSSL/wolfssl/commit/63bf5dc56ccbfc12a73b[PII_REDACTED]7091a4c6f7; https://github.com/wolfSSL/wolfssl/commit/fb2288c46dd4c864b78f00a47a364b96a09a5c0f
CVE: CVE-2019-16954
Published: 2021-01-06
Description: SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.solarwinds.com/SuccessCenter/s/; https://www.esecforte.com/html-injection-vulnerability-in-solarwinds-web-help-desk/; https://www.solarwinds.com/free-tools/free-help-desk-software
CVE: CVE-2019-16962
Published: 2021-01-06
Description: Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.esecforte.com/manage-engine-desktopcentral-india-html-injection-vulnerability/; https://www.manageengine.com/products/desktop-central/download.html; https://www.esecforte.com/manage-engine-desktopcentral-india-html-injection-vulnerability/
CVE: CVE-2020-5102
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5103
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5104
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2021-21236
Published: 2021-01-06
Description: CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400
References: https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3; https://github.com/Kozea/CairoSVG/releases/tag/2.5.1; https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf
CVE: CVE-2020-5105
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5106
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5107
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5108
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5109
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5110
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5111
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5112
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-5113
Published: 2021-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none