deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12924
Published: 2019-07-08
Description: MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML processor to read any file on the host system. Because all credentials were stored in a cleartext file, it was possible to steal all users' credentials (including the highest privileged users).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-311, CWE-611
References: http://www.mailenable.com/Premium-ReleaseNotes.txt; https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/; http://www.mailenable.com/Premium-ReleaseNotes.txt
CVE: CVE-2019-12925
Published: 2019-07-08
Description: MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials including those of SYSADMIN accounts, reading other users' emails, or adding emails or files to other users' accounts.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://www.mailenable.com/Premium-ReleaseNotes.txt; https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/; http://www.mailenable.com/Premium-ReleaseNotes.txt
CVE: CVE-2019-12926
Published: 2019-07-08
Description: MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.mailenable.com/Premium-ReleaseNotes.txt; https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/; http://www.mailenable.com/Premium-ReleaseNotes.txt
CVE: CVE-2019-12927
Published: 2019-07-08
Description: MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.mailenable.com/Premium-ReleaseNotes.txt; https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/; http://www.mailenable.com/Premium-ReleaseNotes.txt
CVE: CVE-2019-13367
Published: 2019-07-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13368
Published: 2019-07-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13369
Published: 2019-07-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13449
Published: 2019-07-09
Description: In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf; https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/; https://bugs.chromium.org/p/chromium/issues/detail?id=951540
CVE: CVE-2019-13450
Published: 2019-07-09
Description: In the Zoom Client through 4.4.4 and RingCentral 7.0[PII_REDACTED] on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/109082; https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf; https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/
CVE: CVE-2018-14833
Published: 2019-07-09
Description: Intuit Lacerte 2017 has Incorrect Access Control.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://themikewylie.com/2019/05/21/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/; https://www.themikewylie.com/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/; https://themikewylie.com/2019/05/21/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/
CVE: CVE-2018-15738
Published: 2019-07-09
Description: An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.greyhathacker.net; https://www.greyhathacker.net/?p=1025; https://www.greyhathacker.net
CVE: CVE-2019-11889
Published: 2019-07-09
Description: Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2019/Jul/8; https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/
CVE: CVE-2019-11890
Published: 2019-07-09
Description: Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2019/Jul/8; https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/
CVE: CVE-2019-12747
Published: 2019-07-09
Description: TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://typo3.org/security/advisory/typo3-core-sa-2019-020/; https://typo3.org/security/advisory/typo3-core-sa-2019-020/
CVE: CVE-2019-12748
Published: 2019-07-09
Description: TYPO3 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://typo3.org/security/advisory/typo3-core-sa-2019-015/; https://typo3.org/security/advisory/typo3-core-sa-2019-015/
CVE: CVE-2018-11307
Published: 2019-07-09
Description: An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://access.redhat.com/errata/RHSA-2019:0782; https://access.redhat.com/errata/RHSA-2019:1822; https://access.redhat.com/errata/RHSA-2019:1823
CVE: CVE-2019-11019
Published: 2019-07-09
Description: Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/all_claim_detail.php?claim_id= URLs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://ddrt.co.uk/complaint-handling-software/; https://domdomegg.github.io/CVE-2019-11019.pdf; http://ddrt.co.uk/complaint-handling-software/
CVE: CVE-2019-12782
Published: 2019-07-09
Description: An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639
References: https://docs.thoughtspot.com/5.1/release/notes.html; https://www.vsecurity.com/download/advisories/201912782-1.txt; https://www.vsecurity.com/resources/advisories.html
CVE: CVE-2019-11020
Published: 2019-07-09
Description: Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claim_files/claim_id_ URLs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://ddrt.co.uk/complaint-handling-software/; https://domdomegg.github.io/CVE-2019-11020.pdf; http://ddrt.co.uk/complaint-handling-software/
CVE: CVE-2019-13397
Published: 2019-07-09
Description: Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40sarapremashish/osticket-1-10-1-unauthenticated-stored-xss-allows-an-attacker-to-gain-admin-privileges-6a0348761a3a; https://medium.com/%40sarapremashish/osticket-1-10-1-unauthenticated-stored-xss-allows-an-attacker-to-gain-admin-privileges-6a0348761a3a
CVE: CVE-2019-13454
Published: 2019-07-09
Description: ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/109099; https://github.com/ImageMagick/ImageMagick/blob/7.0.1-0/MagickCore/layer.c#L1618
CVE: CVE-2019-13142
Published: 2019-07-09
Description: The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c; https://posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c
CVE: CVE-2019-13146
Published: 2019-07-09
Description: The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: http://www.securityfocus.com/bid/109114; https://github.com/ankane/field_test/issues/17; https://rubygems.org/gems/field_test
CVE: CVE-2019-13461
Published: 2019-07-09
Description: In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability due to a guessable value sent to the web application during checkout. An attacker could leak personal customer information. This is PrestaShop bug #14444.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://assets.prestashop2.com/en/system/files/ps_releases/changelog_1.7.6.0-rc2.txt; https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=40; https://assets.prestashop2.com/en/system/files/ps_releases/changelog_1.7.6.0-rc2.txt
CVE: CVE-2019-3949
Published: 2019-07-09
Description: Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-16
References: https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms; https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms
CVE: CVE-2019-3950
Published: 2019-07-09
Description: Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms; https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms
CVE: CVE-2019-8920
Published: 2019-07-09
Description: iart.php in XAMPP 1.7.0 has XSS, a related issue to CVE-2008-3569.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/109120; https://blog.lucideus.com/2019/07/xampp-170-reflected-cross-site-scripting.html; http://www.securityfocus.com/bid/109120
CVE: CVE-2019-11991
Published: 2019-07-09
Description: HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us
CVE: CVE-2019-13070
Published: 2019-07-09
Description: A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.cyberpowersystems.com/category/advisory-notices/; https://www.exploit-db.com/exploits/47059; https://www.cyberpowersystems.com/category/advisory-notices/
CVE: CVE-2019-13280
Published: 2019-07-09
Description: TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be exercised on the local intranet or remotely if remote administration is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280; https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280
CVE: CVE-2019-13464
Published: 2019-07-09
Description: An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1386; https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/1391; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1386
CVE: CVE-2019-5044
Published: 2019-07-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-13337
Published: 2019-07-09
Description: In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the parameter used by the API). No valid token is required since it is not validated by the backend. The website can then be browsed as if no basic authentication is required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-863
References: https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c; https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c
CVE: CVE-2019-13338
Published: 2019-07-09
Description: In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page metadata. In other words, the password hash can be retrieved even though it is not a publicly available field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c; https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c
CVE: CVE-2019-11512
Published: 2019-07-09
Description: Contao 4.x allows SQL Injection. Fixed in Contao 4.4.39 and Contao 4.7.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://contao.org/en/news/security-vulnerability-cve-2019-11512.html; https://contao.org/en/news/security-vulnerability-cve-2019-11512.html
CVE: CVE-2019-13277
Published: 2019-07-09
Description: TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values, potentially leading to a denial of service. The request can be made on the local intranet or remotely if remote administration is enabled.
CVSS Score: 7.5 (HIGH)
References: https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277; https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277
CVE: CVE-2019-13380
Published: 2019-07-09
Description: KEYNTO Team Password Manager 1.5.0 allows XSS because data saved from websites is mishandled in the online vault.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2019/Jul/5; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010; http://seclists.org/fulldisclosure/2019/Jul/5
CVE: CVE-2019-13470
Published: 2019-07-09
Description: MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/matrixssl/matrixssl/blob/4-2-1-open/doc/CHANGES_v4.x.md#changes-between-420-and-421-june-2019; https://github.com/matrixssl/matrixssl/blob/4-2-1-open/doc/CHANGES_v4.x.md#changes-between-420-and-421-june-2019
CVE: CVE-2019-9147
Published: 2019-07-09
Description: Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation mechanisms are disabled (web_accessible_resources). Mailvelope implements additional measures to prevent web applications from directly embedding the settings page, but this mechanism can be bypassed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v310; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.html; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.pdf?__blob=publicationFile&v=3
CVE: CVE-2019-9148
Published: 2019-07-09
Description: Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key could claim to have signed a message that originates from another person.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-295
References: https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.html; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.pdf?__blob=publicationFile&v=3
CVE: CVE-2019-9149
Published: 2019-07-09
Description: Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary messages with Mailvelope, assuming the private key password is cached. A second vulnerability allows an attacker to decrypt an arbitrary message when the GnuPG backend is used in Mailvelope.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347, CWE-863
References: https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.html; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.pdf?__blob=publicationFile&v=3
CVE: CVE-2019-9150
Published: 2019-07-09
Description: Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-320
References: https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.html; https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.pdf?__blob=publicationFile&v=3
CVE: CVE-2019-13472
Published: 2019-07-09
Description: PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=2184; https://www.vulnerability-lab.com/get_content.php?id=2184
CVE: CVE-2019-13475
Published: 2019-07-09
Description: In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute arbitrary commands. The additional arguments -hideterm and -exitwhendone in the payload make the attack less visible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://www.vulnerability-lab.com/get_content.php?id=2186; https://www.vulnerability-lab.com/get_content.php?id=2186
CVE: CVE-2019-13478
Published: 2019-07-09
Description: The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/Yoast/wordpress-seo/releases/tag/11.6-RC5; https://wpvulndb.com/vulnerabilities/9445; https://github.com/Yoast/wordpress-seo/releases/tag/11.6-RC5
CVE: CVE-2018-12622
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md
CVE: CVE-2018-12623
Published: 2019-07-10
Description: An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eventum/eventum/blob/master/CHANGELOG.md; https://github.com/eventum/eventum/releases/tag/v3.5.2; https://github.com/eventum/eventum/blob/master/CHANGELOG.md