deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27828
Published: 2020-12-11
Description: There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1905201; https://github.com/jasper-software/jasper/issues/252; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COBEVDBUO3QTNR6YQBBTIQKNIB6W3MJ2/
CVE: CVE-2020-35126
Published: 2020-12-11
Description: Typesetter CMS 5.x through 5.1 allows admins to conduct Site Title persistent XSS attacks via an Admin/Configuration URI. NOTE: the significance of this report is disputed because "admins are considered trustworthy.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48852; https://www.exploit-db.com/exploits/48852
CVE: CVE-2020-26411
Published: 2020-12-11
Description: A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2). Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26411.json; https://gitlab.com/gitlab-org/gitlab/-/issues/260330; https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26411.json
CVE: CVE-2020-27786
Published: 2020-12-11
Description: A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2020/12/03/1; https://bugzilla.redhat.com/show_bug.cgi?id=1900933; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1f6e3c818dd734c30f6a7eeebf232ba2cf3181d
CVE: CVE-2020-35127
Published: 2020-12-11
Description: Ignite Realtime Openfire 4.6.0 has plugins/bookmarks/create-bookmark.jsp Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://discourse.igniterealtime.org/t/openfire-4-6-0-has-stored-xss-vulnerabilities/89276; https://discourse.igniterealtime.org/t/openfire-4-6-0-has-stored-xss-vulnerabilities/89276
CVE: CVE-2020-35132
Published: 2020-12-11
Description: An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via get_request in lib/function.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1906474; https://github.com/leenooks/phpLDAPadmin/commit/c87571f6b7be15d5cd8b26381b6eb31ad03d28e2; https://github.com/leenooks/phpLDAPadmin/compare/1.2.5...1.2.6.2
CVE: CVE-2020-35135
Published: 2020-12-11
Description: The ultimate-category-excluder plugin before 1.2 for WordPress allows ultimate-category-excluder.php CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://advisory.checkmarx.net/advisory/CX-2020-4294; https://plugins.trac.wordpress.org/changeset/2434070; https://wordpress.org/plugins/ultimate-category-excluder/#developers
CVE: CVE-2020-7789
Published: 2020-12-11
Description: This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-78
References: https://github.com/mikaelbr/node-notifier/blob/master/lib/utils.js%23L303; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050371; https://snyk.io/vuln/SNYK-JS-NODENOTIFIER-1035794
CVE: CVE-2020-7788
Published: 2020-12-11
Description: This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/npm/ini/commit/56d2805e07ccd94e2ba0984ac9240ff02d44b6f1; https://lists.debian.org/debian-lts-announce/2020/12/msg00032.html; https://snyk.io/vuln/SNYK-JS-INI-1048974
CVE: CVE-2020-7790
Published: 2020-12-11
Description: This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/spatie/browsershot/issues/441%23issue-735049731; https://snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-1037064; https://github.com/spatie/browsershot/issues/441%23issue-735049731
CVE: CVE-2020-7792
Published: 2020-12-11
Description: This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used to access the target object recursively is not checked, leading to a Prototype Pollution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/mout/mout/blob/master/src/object/deepFillIn.js; https://github.com/mout/mout/blob/master/src/object/deepMixIn.js; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1050374
CVE: CVE-2020-17515
Published: 2020-12-11
Description: The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/12/11/2; http://www.openwall.com/lists/oss-security/2021/05/01/2; https://lists.apache.org/thread.html/r2892ef594dbbf54d0939b808626f52f7c2d1584f8aa1d81570847d2a%40%3Cannounce.apache.org%3E
CVE: CVE-2020-7793
Published: 2020-12-11
Description: The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).
CVSS Score: 7.5 (HIGH)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf; https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388
CVE: CVE-2020-28838
Published: 2020-12-11
Description: Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/49228; https://www.opencart.com/; https://www.exploit-db.com/exploits/49228
CVE: CVE-2020-29590
Published: 2020-12-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-29591
Published: 2020-12-11
Description: Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://github.com/docker/distribution-library-image; https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-29591; https://hub.docker.com/_/registry
CVE: CVE-2020-4633
Published: 2020-12-11
Description: IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-1236
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/185418; https://www.ibm.com/support/pages/node/6380884; https://exchange.xforce.ibmcloud.com/vulnerabilities/185418
CVE: CVE-2020-12148
Published: 2020-12-11
Description: A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM (ECOS) appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish an interactive channel, effectively taking control of the target system. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to : 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.silver-peak.com/support/user-documentation/security-advisories; https://www.silver-peak.com/support/user-documentation/security-advisories
CVE: CVE-2020-12149
Published: 2020-12-11
Description: The configuration backup/restore function in Silver Peak Unity ECOSTM (ECOS) appliance software was found to directly incorporate the user-controlled config filename in a subsequent shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. This vulnerability can be exploited by an attacker with authenticated access to the Orchestrator UI or EdgeConnect UI. This affects all ECOS versions prior to: 8.1.9.15, 8.3.0.8, 8.3.1.2, 8.3.2.0, 9.0.2.0, and 9.1.0.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.silver-peak.com/support/user-documentation/security-advisories; https://www.silver-peak.com/support/user-documentation/security-advisories
CVE: CVE-2020-15023
Published: 2020-12-11
Description: Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted (and even failed) WPS authentication attempt, it is possible to brute force the overall authentication exchange. This allows an attacker to obtain the recovered WPS PIN in minutes or even seconds, and eventually obtain the Wi-Fi PSK key, gaining access to the Wi=Fi network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d; https://www.askey.com.tw/Products/wifi.html; https://www.askey.com.tw/incident_report_notifications.html
CVE: CVE-2020-15357
Published: 2020-12-11
Description: Network Analysis functionality in Askey AP5100W_Dual_SIG_1.01.097 and all prior versions allows remote attackers to execute arbitrary commands via a shell metacharacter in the ping, traceroute, or route options.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d; https://starlabs.sg/advisories/; https://www.askey.com.tw/incident_report_notifications.html
CVE: CVE-2020-27508
Published: 2020-12-11
Description: In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.
CVSS Score: 7.5 (HIGH)
References: https://github.com/frappe/frappe/pull/11262; https://github.com/frappe/frappe/pull/11263; https://github.com/frappe/frappe/pull/11262
CVE: CVE-2020-29254
Published: 2020-12-11
Description: TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to follow a maliciously crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system with the privileges of the user. These action include allowing attackers to submit their own code through an authenticated user resulting in local file Inclusion. If an authenticated user who is able to edit TikiWiki templates visits an malicious website, template code can be edited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/S1lkys/CVE-2020-29254; https://github.com/S1lkys/CVE-2020-29254/blob/main/Tiki-Wiki%2021.2%20by%20Maximilian%20Barz.pdf; https://youtu.be/Uc3sRBitu50
CVE: CVE-2020-29589
Published: 2020-12-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-35144
Published: 2020-12-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-26264
Published: 2020-12-11
Description: Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/ethereum/go-ethereum/commit/bddd103a9f0af27ef533f04e06ea429cf76b6d46; https://github.com/ethereum/go-ethereum/pull/21896; https://github.com/ethereum/go-ethereum/releases/tag/v1.9.25
CVE: CVE-2020-26265
Published: 2020-12-11
Description: Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade release version 1.9.20. No individual workaround patches have been made -- all users are recommended to upgrade to a newer version.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682, CWE-682
References: https://github.com/ethereum/go-ethereum/releases/tag/v1.9.20; https://github.com/ethereum/go-ethereum/security/advisories/GHSA-xw37-57qp-9mm4; https://github.com/ethereum/go-ethereum/releases/tag/v1.9.20
CVE: CVE-2020-27127
Published: 2020-12-11
Description: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-201, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
CVE: CVE-2020-27132
Published: 2020-12-11
Description: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-201, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
CVE: CVE-2020-27133
Published: 2020-12-11
Description: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-201, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
CVE: CVE-2020-27134
Published: 2020-12-11
Description: Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system (OS) with elevated privileges or gain access to sensitive information. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-201, CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
CVE: CVE-2020-28439
Published: 2020-12-11
Description: This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-CORENLPJSPREFAB-1050434; https://snyk.io/vuln/SNYK-JS-CORENLPJSPREFAB-1050434
CVE: CVE-2020-28440
Published: 2020-12-11
Description: All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-CORENLPJSINTERFACE-1050435; https://snyk.io/vuln/SNYK-JS-CORENLPJSINTERFACE-1050435
CVE: CVE-2020-29574
Published: 2020-12-11
Description: An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulnerability-in-their-cyberoam-os/; https://www.cyberoam.com/ngfw.html; https://www.bleepingcomputer.com/news/security/sophos-fixes-sql-injection-vulnerability-in-their-cyberoam-os/
CVE: CVE-2020-7791
Published: 2020-12-11
Description: This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
CVSS Score: 7.5 (HIGH)
References: https://github.com/turquoiseowl/i18n/commit/c418e3345313dc896c1951d8c46ab0b9b12fcbd3; https://github.com/turquoiseowl/i18n/issues/387; https://lists.apache.org/thread.html/r1573c58dc283b05f7a40a3f5ff0079b5bbde0492d406ee0fe98d40b6%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2020-19165
Published: 2020-12-11
Description: PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Mint60/PHP/issues/1; https://github.com/Mint60/PHP/issues/1
CVE: CVE-2020-26418
Published: 2020-12-11
Description: Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
CVSS Score: 3.1 (LOW)
CWE: CWE-401
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26418.json; https://gitlab.com/wireshark/wireshark/-/issues/16739; https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE: CVE-2020-26419
Published: 2020-12-11
Description: Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.
CVSS Score: 3.1 (LOW)
CWE: CWE-401
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26419.json; https://gitlab.com/wireshark/wireshark/-/issues/17032; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/
CVE: CVE-2020-26420
Published: 2020-12-11
Description: Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
CVSS Score: 3.1 (LOW)
CWE: CWE-401
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26420.json; https://gitlab.com/wireshark/wireshark/-/issues/16994; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M75HYXU36SP6GHIDPHNZGJKEO6TX4C4Y/
CVE: CVE-2020-26421
Published: 2020-12-11
Description: Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-125
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26421.json; https://gitlab.com/wireshark/wireshark/-/issues/16958; https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE: CVE-2020-27713
Published: 2020-12-11
Description: In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel (TMM) leaks memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://support.f5.com/csp/article/K37960100; https://support.f5.com/csp/article/K37960100
CVE: CVE-2020-27825
Published: 2020-12-11
Description: A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem (DOS). This flaw could even allow a local attacker with special user privilege to a kernel information leak threat.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1905155; https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html; https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
CVE: CVE-2020-35149
Published: 2020-12-11
Description: lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/aheckmann/mquery/commit/792e69fd0a7281a0300be5cade5a6d7c1d468ad4; https://github.com/aheckmann/mquery/commit/792e69fd0a7281a0300be5cade5a6d7c1d468ad4
CVE: CVE-2020-5948
Published: 2020-12-11
Description: On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://support.f5.com/csp/article/K42696541; https://support.f5.com/csp/article/K42696541
CVE: CVE-2020-5949
Published: 2020-12-11
Description: On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K20984059; https://support.f5.com/csp/article/K20984059