deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-1875
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-wildpointer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-wildpointer-en
CVE: CVE-2020-1876
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en
CVE: CVE-2020-1877
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-824
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en
CVE: CVE-2020-1881
Published: 2020-02-28
Description: NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices.
CVSS Score: 7.5 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-resource-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en
CVE: CVE-2019-15609
Published: 2020-02-28
Description: The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://hackerone.com/reports/661959; https://hackerone.com/reports/661959
CVE: CVE-2019-19943
Published: 2020-02-28
Description: The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415, CWE-787
References: https://www.exploit-db.com/exploits/48111; https://www.exploit-db.com/exploits/48111
CVE: CVE-2020-8127
Published: 2020-02-28
Description: Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/691977; https://hackerone.com/reports/691977
CVE: CVE-2020-8132
Published: 2020-02-28
Description: Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-20
References: https://hackerone.com/reports/781664; https://hackerone.com/reports/781664
CVE: CVE-2020-9465
Published: 2020-02-28
Description: An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the user_id field in a cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/EyesOfNetworkCommunity/eonweb/issues/51; https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-3; https://github.com/EyesOfNetworkCommunity/eonweb/issues/51
CVE: CVE-2020-9466
Published: 2020-02-28
Description: The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1236
References: https://wpvulndb.com/vulnerabilities/10094; https://www.getastra.com/blog/911/plugin-exploit/csv-injection-in-export-users-to-csv-wordpress-plugin/; https://www.jinsonvarghese.com/csv-injection-in-export-users-to-csv-plugin/
CVE: CVE-2018-21035
Published: 2020-02-28
Description: In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bugreports.qt.io/browse/QTBUG-70693; https://codereview.qt-project.org/c/qt/qtwebsockets/+/284735; https://bugreports.qt.io/browse/QTBUG-70693
CVE: CVE-2019-10801
Published: 2020-02-28
Description: enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/balderdashy/enpeem/blob/master/index.js#L114; https://snyk.io/vuln/SNYK-JS-ENPEEM-559007; https://github.com/balderdashy/enpeem/blob/master/index.js#L114
CVE: CVE-2019-10802
Published: 2020-02-28
Description: giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/MangoRaft/git/commit/9be41081f547d3dcef25e7d7c957bc2a3be2dfe0; https://snyk.io/vuln/SNYK-JS-GITING-559008; https://github.com/MangoRaft/git/commit/9be41081f547d3dcef25e7d7c957bc2a3be2dfe0
CVE: CVE-2019-10803
Published: 2020-02-28
Description: push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139; https://snyk.io/vuln/SNYK-JS-PUSHDIR-559009; https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139
CVE: CVE-2019-10804
Published: 2020-02-28
Description: serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/es128/serial-number/blob/master/index.js#L106; https://snyk.io/vuln/SNYK-JS-SERIALNUMBER-559010; https://github.com/es128/serial-number/blob/master/index.js#L106
CVE: CVE-2019-10805
Published: 2020-02-28
Description: valib through 2.0.0 allows Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function (hasOwnProperty) from the unsafe user-input to examine an object. It is possible for a crafted payload to overwrite this function to manipulate the inspection results to bypass security checks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://snyk.io/vuln/SNYK-JS-VALIB-559015; https://www.npmjs.com/package/valib; https://snyk.io/vuln/SNYK-JS-VALIB-559015
CVE: CVE-2020-9449
Published: 2020-02-28
Description: An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to escalate privileges by retrieving the cookie salt value and creating a valid session cookie for an arbitrary user or admin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: https://justblab.com/latest-news; https://justblab.com/latest-news
CVE: CVE-2020-9459
Published: 2020-02-28
Description: Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mec_save_notifications and import_settings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/10100; https://www.wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities/; https://wpvulndb.com/vulnerabilities/10100
CVE: CVE-2019-4301
Published: 2020-02-28
Description: BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML.
CVSS Score: 8.4 (HIGH)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076139; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0076139
CVE: CVE-2019-7007
Published: 2020-02-28
Description: A directory traversal vulnerability has been found in the Avaya Equinox Management(iView)versions R9.1.9.0 and earlier. Successful exploitation could potentially allow an unauthenticated attacker to access files that are outside the restricted directory on the remote server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://downloads.avaya.com/css/P8/documents/101064450; https://downloads.avaya.com/css/P8/documents/101064450
CVE: CVE-2015-3006
Published: 2020-02-28
Description: On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the device boots up is insufficient, possibly leading to weak or duplicate SSH keys or self-signed SSL/TLS certificates. Entropy increases after the system has been up and running for some time, but immediately after boot, the entropy is very low. This issue only affects the QFX3500 and QFX3600 switches. No other Juniper Networks products or platforms are affected by this weak entropy vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-331
References: https://kb.juniper.net/JSA10678; https://kb.juniper.net/JSA10678
CVE: CVE-2015-5361
Published: 2020-02-28
Description: Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions (gates) are specific to source and destination IPs and ports of client and server. The design intent of the ftps-extensions option (which is disabled by default) is to provide similar functionality when the SRX secures the FTP/FTPS client. As the control channel is encrypted, the FTP ALG cannot inspect the port specific information and will open a wider TCP data channel (gate) from client IP to server IP on all destination TCP ports. In FTP/FTPS client environments to an enterprise network or the Internet, this is the desired behavior as it allows firewall policy to be written to FTP/FTPS servers on well-known control ports without using a policy with destination IP ANY and destination port ANY. Issue The ftps-extensions option is not intended or recommended where the SRX secures the FTPS server, as the wide data channel session (gate) will allow the FTPS client temporary access to all TCP ports on the FTPS server. The data session is associated to the control channel and will be closed when the control channel session closes. Depending on the configuration of the FTPS server, supporting load-balancer, and SRX inactivity-timeout values, the server/load-balancer and SRX may keep the control channel open for an extended period of time, allowing an FTPS client access for an equal duration.​ Note that the ftps-extensions option is not enabled by default.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://kb.juniper.net/JSA10706; https://kb.juniper.net/JSA10706
CVE: CVE-2020-6803
Published: 2020-02-28
Description: An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/mozilla-iot/gateway/pull/2446; https://github.com/mozilla-iot/gateway/pull/2446
CVE: CVE-2020-6804
Published: 2020-02-28
Description: A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mozilla-iot/gateway/pull/2446; https://github.com/mozilla-iot/gateway/pull/2446
CVE: CVE-2020-9534
Published: 2020-03-02
Description: fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf; https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf
CVE: CVE-2020-9535
Published: 2020-03-02
Description: fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf; https://github.com/ladinas/Vulns_of_Embedded_Systems/blob/master/Two%20stack%20overflows%20were%20found%20in%20DIR-615Jx10.0%20Devices.pdf
CVE: CVE-2020-9540
Published: 2020-03-02
Description: Sophos HitmanPro.Alert before build 861 allows local elevation of privilege.
CVSS Score: 7.8 (HIGH)
References: https://www.hitmanpro.com/en-us/whatsnewalert.aspx; https://www.hitmanpro.com/en-us/whatsnewalert.aspx
CVE: CVE-2020-9545
Published: 2020-03-02
Description: Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.palemoon.org/releasenotes.shtml; https://forum.palemoon.org/viewtopic.php?f=37&t=23864; http://www.palemoon.org/releasenotes.shtml
CVE: CVE-2020-9546
Published: 2020-03-02
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2631; https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E; https://lists.apache.org/thread.html/r893a0104e50c1c2559eb9a5812add28ae8c3e5f43712947a9847ec18%40%3Cnotifications.zookeeper.apache.org%3E
CVE: CVE-2020-9547
Published: 2020-03-02
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2634; https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E; https://lists.apache.org/thread.html/r4accb2e0de9679174efd3d113a059bab71ff3ec53e882790d21c1cc1%40%3Cnotifications.zookeeper.apache.org%3E
CVE: CVE-2020-9548
Published: 2020-03-02
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2634; https://lists.apache.org/thread.html/r35d30db00440ef63b791c4b7f7acb036e14d4a23afa2a249cb66c0fd%40%3Cissues.zookeeper.apache.org%3E; https://lists.apache.org/thread.html/r9464a40d25c3ba1a55622db72f113eb494a889656962d098c70c5bb1%40%3Cdev.zookeeper.apache.org%3E
CVE: CVE-2019-17026
Published: 2020-03-02
Description: Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://packetstormsecurity.com/files/162568/Firefox-72-IonMonkey-JIT-Type-Confusion.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1607443; https://security.gentoo.org/glsa/202003-02
CVE: CVE-2020-6792
Published: 2020-03-02
Description: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-908, CWE-909
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1609607; https://security.gentoo.org/glsa/202003-10; https://usn.ubuntu.com/4328-1/
CVE: CVE-2020-6793
Published: 2020-03-02
Description: When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird < 68.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1608539; https://security.gentoo.org/glsa/202003-10; https://usn.ubuntu.com/4328-1/
CVE: CVE-2020-6794
Published: 2020-03-02
Description: If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Thunderbird < 68.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-459, CWE-522
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1606619; https://security.gentoo.org/glsa/202003-10; https://usn.ubuntu.com/4328-1/
CVE: CVE-2020-6795
Published: 2020-03-02
Description: When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird < 68.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1611105; https://security.gentoo.org/glsa/202003-10; https://usn.ubuntu.com/4328-1/
CVE: CVE-2020-6796
Published: 2020-03-02
Description: A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 73 and Firefox < ESR68.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1610426; https://security.gentoo.org/glsa/202003-02; https://usn.ubuntu.com/4278-2/
CVE: CVE-2020-6797
Published: 2020-03-02
Description: By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1596668; https://security.gentoo.org/glsa/202003-02; https://www.mozilla.org/security/advisories/mfsa2020-05/
CVE: CVE-2020-6798
Published: 2020-03-02
Description: If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1602944; https://security.gentoo.org/glsa/202003-02; https://security.gentoo.org/glsa/202003-10
CVE: CVE-2020-6799
Published: 2020-03-02
Description: Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefox to be configured as the default handler for a given file type and for a file downloaded to be opened in a third party application that insufficiently sanitized URL data. In that situation, clicking a link in the third party application could have been used to retrieve and execute files whose location was supplied through command line arguments. Note: This issue only affects Windows operating systems and when Firefox is configured as the default handler for non-default filetypes. Other operating systems are unaffected. This vulnerability affects Firefox < 73 and Firefox < ESR68.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1606596; https://security.gentoo.org/glsa/202003-02; https://www.mozilla.org/security/advisories/mfsa2020-05/
CVE: CVE-2020-6800
Published: 2020-03-02
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1595786%2C1596706%2C1598543%2C1604851%2C1608580%2C1608785%2C1605777; https://security.gentoo.org/glsa/202003-02; https://security.gentoo.org/glsa/202003-10
CVE: CVE-2020-6801
Published: 2020-03-02
Description: Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 73.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1601024%2C1601712%2C1604836%2C1606492; https://usn.ubuntu.com/4278-2/; https://www.mozilla.org/security/advisories/mfsa2020-05/
CVE: CVE-2020-9549
Published: 2020-03-02
Description: In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/enferex/pdfresurrect/issues/8; https://lists.debian.org/debian-lts-announce/2020/03/msg00007.html; https://github.com/enferex/pdfresurrect/issues/8