deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7619
Published: 2020-04-02
Description: get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/chardos/get-git-data/blob/master/index.js#L7%2C; https://snyk.io/vuln/SNYK-JS-GETGITDATA-564222; https://github.com/chardos/get-git-data/blob/master/index.js#L7%2C
CVE: CVE-2020-7620
Published: 2020-04-02
Description: pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/halfblood369/monitor/blob/900b5cadf59edcccac4754e5706a22719925ddb9/lib/processMonitor.js%2C; https://snyk.io/vuln/SNYK-JS-POMELOMONITOR-173695; https://github.com/halfblood369/monitor/blob/900b5cadf59edcccac4754e5706a22719925ddb9/lib/processMonitor.js%2C
CVE: CVE-2020-7621
Published: 2020-04-02
Description: strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/strongloop/strong-nginx-controller/blob/master/lib/server.js#L65%2C; https://snyk.io/vuln/SNYK-JS-STRONGNGINXCONTROLLER-564248; https://github.com/strongloop/strong-nginx-controller/blob/master/lib/server.js#L65%2C
CVE: CVE-2020-7623
Published: 2020-04-02
Description: jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/node-modules/jscover/blob/master/lib/jscover.js#L59%2C; https://snyk.io/vuln/SNYK-JS-JSCOVER-564250; https://github.com/node-modules/jscover/blob/master/lib/jscover.js#L59%2C
CVE: CVE-2020-9067
Published: 2020-04-02
Description: There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal (OLT). Affected product versions include:SmartAX MA5600T versions V800R013C10, V800R015C00, V800R015C10, V800R017C00, V800R017C10, V800R018C00, V800R018C10; SmartAX MA5800 versions V100R017C00, V100R017C10, V100R018C00, V100R018C10, V100R019C10; SmartAX EA5800 versions V100R018C00, V100R018C10, V100R019C10.
CVSS Score: 8.0 (HIGH)
CWE: CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200401-01-overflow-en
CVE: CVE-2020-10515
Published: 2020-04-02
Description: STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: https://herolab.usd.de/security-advisories/; https://support.starface.de/forum/showthread.php?7916-UCC-Client-f%FCr-Windows-Version-6-7-1-204-Released-26-03-2020&p=47548; https://www.starface.com/en/business-telephony/
CVE: CVE-2020-7624
Published: 2020-04-02
Description: effect through 1.0.4 is vulnerable to Command Injection. It allows execution of arbitrary command via the options argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/Javascipt/effect/blob/master/helper.js#L24%2C; https://snyk.io/vuln/SNYK-JS-EFFECT-564256; https://github.com/Javascipt/effect/blob/master/helper.js#L24%2C
CVE: CVE-2020-7625
Published: 2020-04-02
Description: op-browser through 1.0.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/hiproxy/open-browser/blob/master/lib/index.js#L75%2C; https://snyk.io/vuln/SNYK-JS-OPBROWSER-564259; https://github.com/hiproxy/open-browser/blob/master/lib/index.js#L75%2C
CVE: CVE-2020-7626
Published: 2020-04-02
Description: karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/amireh/karma-mojo/blob/master/index.js#L100%2C; https://snyk.io/vuln/SNYK-JS-KARMAMOJO-564260; https://github.com/amireh/karma-mojo/blob/master/index.js#L100%2C
CVE: CVE-2020-7627
Published: 2020-04-02
Description: node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute()' function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/garimpeiro-it/node-key-sender/blob/master/key-sender.js#L117%2C; https://snyk.io/vuln/SNYK-JS-NODEKEYSENDER-564261; https://github.com/garimpeiro-it/node-key-sender/blob/master/key-sender.js#L117%2C
CVE: CVE-2020-7628
Published: 2020-04-02
Description: umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-UMOUNT-564265; https://snyk.io/vuln/SNYK-JS-UMOUNT-564265
CVE: CVE-2020-7629
Published: 2020-04-02
Description: install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/1000ch/install-package/blob/master/index.js#L82%2C; https://snyk.io/vuln/SNYK-JS-INSTALLPACKAGE-564267; https://github.com/1000ch/install-package/blob/master/index.js#L82%2C
CVE: CVE-2020-7630
Published: 2020-04-02
Description: git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/jonschlinkert/git-add-remote/blob/master/index.js#L21%2C; https://snyk.io/vuln/SNYK-JS-GITADDREMOTE-564269; https://github.com/jonschlinkert/git-add-remote/blob/master/index.js#L21%2C
CVE: CVE-2020-11498
Published: 2020-04-02
Description: Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persistence or to bypass security controls. NOTE: the vendor states that this "requires a high degree of access and other preconditions that are tough to achieve."
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://www.pwn3d.org/posts/7918501-slack-nebula-relative-path-bug-bounty-disclosure; https://github.com/slackhq/nebula/pull/191; http://www.pwn3d.org/posts/7918501-slack-nebula-relative-path-bug-bounty-disclosure
CVE: CVE-2020-11499
Published: 2020-04-02
Description: Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fkie-cad/FACT_core/issues/375; https://github.com/fkie-cad/FACT_core/pull/376; https://github.com/fkie-cad/FACT_core/issues/375
CVE: CVE-2020-5283
Published: 2020-04-03
Description: ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a CVS repository exposed by an otherwise trusted ViewVC instance that also has the `show_subdir_lastmod` feature enabled. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. This vulnerability is patched in versions 1.2.1 and 1.1.28.
CVSS Score: 3.1 (LOW)
CWE: CWE-80, CWE-79
References: https://github.com/viewvc/viewvc/commit/ad0f966e9a997b17d853a6972ea283d4dcd70fa8; https://github.com/viewvc/viewvc/issues/211; https://github.com/viewvc/viewvc/security/advisories/GHSA-xpxf-fvqv-7mfg
CVE: CVE-2019-19914
Published: 2020-04-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-17954
Published: 2020-04-03
Description: An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git[PII_REDACTED].fabfd186c-9.63.1, crowbar-. SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git[PII_REDACTED].ee7da88-3.39.3, ardana-. SUSE OpenStack Cloud 9 ardana-ansible versions prior to 9.0+git[PII_REDACTED].f694f7d-3.16.1, ardana-. SUSE OpenStack Cloud Crowbar 8 crowbar-core versions prior to 5.0+git[PII_REDACTED].1a55c77c5-3.35.4, crowbar-. SUSE OpenStack Cloud Crowbar 9 crowbar-core versions prior to 6.0+git[PII_REDACTED].cbd70e833-3.19.3, crowbar-.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=1117080; https://bugzilla.suse.com/show_bug.cgi?id=1117080
CVE: CVE-2019-18904
Published: 2020-04-03
Description: A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linux Enterprise Module for Server Applications 15-SP1, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1 allows remote attackers to cause DoS against rmt by requesting migrations. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise High Performance Computing 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Public Cloud 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Module for Server Applications 15 rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Server Applications 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Server 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.5.2-3.26.1. openSUSE Leap 15.1 rmt-server versions prior to 2.5.2-lp151.2.9.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://bugzilla.suse.com/show_bug.cgi?id=1160922; https://bugzilla.suse.com/show_bug.cgi?id=1160922
CVE: CVE-2019-18905
Published: 2020-04-03
Description: A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows remote attackers to MITM connections when deprecated and unused functionality of autoyast is used to create images. This issue affects: SUSE Linux Enterprise Server 12 autoyast2 version 4.1.9-3.9.1 and prior versions. SUSE Linux Enterprise Server 15 autoyast2 version 4.0.70-3.20.1 and prior versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-345, CWE-345
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00050.html; https://bugzilla.suse.com/show_bug.cgi?id=1140711; http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00050.html
CVE: CVE-2020-11500
Published: 2020-04-03
Description: Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Within a meeting, all participants use a single 128-bit key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/; https://theintercept.com/2020/04/03/zooms-encryption-is-not-suited-for-secrets-and-has-surprising-links-to-china-researchers-discover/; https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/
CVE: CVE-2020-11501
Published: 2020-04-03
Description: GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
CVSS Score: 7.4 (HIGH)
CWE: CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00015.html; https://gitlab.com/gnutls/gnutls/-/commit/5b595e8e52653f6c5726a4cdd8fddeb6e83804d2; https://gitlab.com/gnutls/gnutls/-/issues/960
CVE: CVE-2020-4273
Published: 2020-04-03
Description: IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using specially crafted input. IBM X-Force ID: 175977.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/175977; https://www.ibm.com/support/pages/node/6151701; https://exchange.xforce.ibmcloud.com/vulnerabilities/175977
CVE: CVE-2019-17230
Published: 2020-04-03
Description: includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/; https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/
CVE: CVE-2019-17231
Published: 2020-04-03
Description: includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/; https://blog.nintechnet.com/unauthenticated-stored-xss-vulnerability-in-wordpress-onetone-theme-unpatched/
CVE: CVE-2020-10689
Published: 2020-04-03
Description: A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods. An authenticated user can exploit this flaw to bypass JWT proxy and gain access to the workspace pods of another user. Successful exploitation requires knowledge of the service name and namespace of the target pod.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10689; https://github.com/eclipse/che/issues/15651; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10689
CVE: CVE-2020-10960
Published: 2020-04-03
Description: In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler to any Cascading Style Sheets (CSS) selector. There is no known way to exploit this for cross-site scripting (XSS).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html; https://phabricator.wikimedia.org/T246602; https://lists.wikimedia.org/pipermail/wikitech-l/2020-March/093243.html
CVE: CVE-2020-10599
Published: 2020-04-03
Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-120
References: https://www.us-cert.gov/ics/advisories/icsa-20-084-01; https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE: CVE-2020-10601
Published: 2020-04-03
Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-326, CWE-327
References: https://www.us-cert.gov/ics/advisories/icsa-20-084-01; https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE: CVE-2020-7000
Published: 2020-04-03
Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922, CWE-922
References: https://www.us-cert.gov/ics/advisories/icsa-20-084-01; https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE: CVE-2020-7004
Published: 2020-04-03
Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.us-cert.gov/ics/advisories/icsa-20-084-01; https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE: CVE-2020-7008
Published: 2020-04-03
Description: VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://www.us-cert.gov/ics/advisories/icsa-20-084-01; https://www.us-cert.gov/ics/advisories/icsa-20-084-01
CVE: CVE-2020-6994
Published: 2020-04-03
Description: A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-12, CWE-120
References: https://www.us-cert.gov/ics/advisories/icsa-20-091-01; https://www.us-cert.gov/ics/advisories/icsa-20-091-01
CVE: CVE-2020-8637
Published: 2020-04-03
Description: A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/d99bd8277d384f3417e917ce20bef5d061110343; https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/
CVE: CVE-2020-8638
Published: 2020-04-03
Description: A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/58f3cc03d5f81cd5cc2ad8c7ba645cc486cebc05; https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/
CVE: CVE-2020-8639
Published: 2020-04-03
Description: An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an authenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to a publicly accessible directory of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/161401/TestLink-1.9.20-Shell-Upload.html; https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection/; https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/57d81ae350d569c5c95087997fe051c49e14516d
CVE: CVE-2020-8142
Published: 2020-04-03
Description: A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requires the logged in user to type the current password in order to change the e-mail address or the password. It was however possible for anyone with access to a Revive Adserver admin user interface to bypass such check and change e-email address or password of the currently logged in user by altering the form payload.The attack requires physical access to the user interface of a logged in user. If the POST payload was altered by turning the “pwold” parameter into an array, Revive Adserver would fetch and authorise the operation even if no password was provided.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://hackerone.com/reports/792895; https://www.revive-adserver.com/security/revive-sa-2020-002/; https://hackerone.com/reports/792895
CVE: CVE-2020-8143
Published: 2020-04-03
Description: An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://hackerone.com/reports/794144; https://www.revive-adserver.com/security/revive-sa-2020-002/; https://hackerone.com/reports/794144
CVE: CVE-2020-8147
Published: 2020-04-03
Description: Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using utils-extend.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-471, CWE-20
References: https://hackerone.com/reports/801522; https://hackerone.com/reports/801522
CVE: CVE-2020-5347
Published: 2020-04-04
Description: Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.dell.com/support/security/en-us/details/542190/DSA-2020-054-Dell-EMC-Isilon-OneFS-Security-Update-for-DNS-Protocol-Vulnerabilities; https://www.dell.com/support/security/en-us/details/542190/DSA-2020-054-Dell-EMC-Isilon-OneFS-Security-Update-for-DNS-Protocol-Vulnerabilities
CVE: CVE-2020-5348
Published: 2020-04-04
Description: Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in system management mode.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.dell.com/support/article/SLN320792; https://www.dell.com/support/article/SLN320792
CVE: CVE-2020-11518
Published: 2020-04-04
Description: Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5815-released-with-an-important-security-fix; https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5815-released-with-an-important-security-fix