deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-27193
Published: 2020-11-12
Description: A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ckeditor.com/blog/CKEditor-4.15.1-with-a-security-patch-released/; https://ckeditor.com/cke4/release/CKEditor-4.15.1; https://ckeditor.com/ckeditor-4/download/
CVE: CVE-2020-7033
Published: 2020-11-13
Description: A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.10.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://downloads.avaya.com/css/P8/documents/101072147; https://downloads.avaya.com/css/P8/documents/101072147
CVE: CVE-2020-7032
Published: 2020-11-13
Description: An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://packetstormsecurity.com/files/160123/Avaya-Web-License-Manager-XML-Injection.html; http://seclists.org/fulldisclosure/2020/Nov/31; https://downloads.avaya.com/css/P8/documents/101072249
CVE: CVE-2020-1847
Published: 2020-11-13
Description: There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-dos-en
CVE: CVE-2020-26825
Published: 2020-11-13
Description: SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a different end user (victim), because News tile does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. Information maintained in the victim's web browser can be read, modified, and sent to the attacker. The malicious code cannot significantly impact the victim's browser and the victim can easily close the browser tab to terminate it.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2984627; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571; https://launchpad.support.sap.com/#/notes/2984627
CVE: CVE-2020-4886
Published: 2020-11-13
Description: IBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has access to the same system. IBM X-Force ID: 190910.
CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190910; https://www.ibm.com/support/pages/node/6366715; https://exchange.xforce.ibmcloud.com/vulnerabilities/190910
CVE: CVE-2020-6147
Published: 2020-11-13
Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://seclists.org/fulldisclosure/2020/Nov/20; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094; http://seclists.org/fulldisclosure/2020/Nov/20
CVE: CVE-2020-6148
Published: 2020-11-13
Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE: CVE-2020-6149
Published: 2020-11-13
Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance in USDC file format PATHS section.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE: CVE-2020-6150
Published: 2020-11-13
Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE: CVE-2020-6155
Published: 2020-11-13
Description: A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1101; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1101
CVE: CVE-2020-6156
Published: 2020-11-13
Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE: CVE-2020-9127
Published: 2020-11-13
Description: Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may inject some malicious codes in some files of the affected products. Successful exploit may cause command injection.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-injection-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-injection-en
CVE: CVE-2020-9129
Published: 2020-11-13
Description: HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-01-smartphone-en
CVE: CVE-2020-21667
Published: 2020-11-13
Description: In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/che-my/fastadmin-tp6/issues/2; https://github.com/che-my/fastadmin-tp6/issues/2
CVE: CVE-2020-25151
Published: 2020-11-13
Description: The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 (all versions).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02
CVE: CVE-2020-25155
Published: 2020-11-13
Description: The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 (all versions).
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-308-02
CVE: CVE-2020-25165
Published: 2020-11-13
Description: BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the BD Alaris Systems Manager. If exploited, an attacker could perform a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial-of-service attack could lead to a drop in the wireless capability of the BD Alaris PC Unit, resulting in manual operation of the PC Unit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01
CVE: CVE-2020-25538
Published: 2020-11-13
Description: An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html; https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution_30.html; http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html
CVE: CVE-2020-25557
Published: 2020-11-13
Description: In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the application, attacker's code will be run. As a result of this vulnerability, authenticated user can run command on the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html; https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution.html; http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html
CVE: CVE-2020-26222
Published: 2020-11-13
Description: Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before version 0.125.1, there is a remote code execution vulnerability in dependabot-common and dependabot-go_modules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$({curl,127.0.0.1})", Dependabot will make a HTTP request to the following URL: 127.0.0.1 when cloning the source repository. The fix was applied to version 0.125.1. As a workaround, one can escape the branch name prior to passing it to the Dependabot::Source class.
CVSS Score: 8.7 (HIGH)
CWE: CWE-74
References: https://github.com/dependabot/dependabot-core/commit/e089116abbe284425b976f7920e502b8e83a61b5; https://github.com/dependabot/dependabot-core/pull/2727; https://github.com/dependabot/dependabot-core/security/advisories/GHSA-23f7-99jx-m54r
CVE: CVE-2020-6019
Published: 2020-11-13
Description: Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/ValveSoftware/GameNetworkingSockets/commit/d944a10808891d202bb1d5e1998de6e0423af678; https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/; https://github.com/ValveSoftware/GameNetworkingSockets/commit/d944a10808891d202bb1d5e1998de6e0423af678
CVE: CVE-2020-8582
Published: 2020-11-13
Description: Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information.
CVSS Score: 6.5 (MEDIUM)
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2020-8583
Published: 2020-11-13
Description: Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session.
CVSS Score: 7.5 (HIGH)
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2020-26223
Published: 2020-11-13
Description: Spree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. The perpetrator could query the API v2 Order Status endpoint with an empty string passed as an Order token. This is patched in versions 3.7.11, 4.0.4, or 4.1.11 depending on your used Spree version. Users of Spree < 3.7 are not affected.
CVSS Score: 7.7 (HIGH)
CWE: CWE-863
References: https://github.com/spree/spree/pull/10573; https://github.com/spree/spree/security/advisories/GHSA-m2jr-hmc3-qmpr; https://guides.spreecommerce.org/api/v2/storefront#tag/Order-Status
CVE: CVE-2020-26230
Published: 2020-11-13
Description: Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and de-anonymization of COVID-19 positive users when using Radar COVID. The vulnerability is caused by the fact that Radar COVID connections to the server (uploading of TEKs to the backend) are only made by COVID-19 positives. Therefore, any on-path observer with the ability to monitor traffic between the app and the server can identify which users had a positive test. Such an adversary can be the mobile network operator (MNO) if the connection is done through a mobile network, the Internet Service Provider (ISP) if the connection is done through the Internet (e.g., a home network), a VPN provider used by the user, the local network operator in the case of enterprise networks, or any eavesdropper with access to the same network (WiFi or Ethernet) as the user as could be the case of public WiFi hotspots deployed at shopping centers, airports, hotels, and coffee shops. The attacker may also de-anonymize the user. For this additional stage to succeed, the adversary needs to correlate Radar COVID traffic to other identifiable information from the victim. This could be achieved by associating the connection to a contract with the name of the victim or by associating Radar COVID traffic to other user-generated flows containing identifiers in the clear (e.g., HTTP cookies or other mobile flows sending unique identifiers like the IMEI or the AAID without encryption). The former can be executed, for instance, by the Internet Service Provider or the MNO. The latter can be executed by any on-path adversary, such as the network provider or even the cloud provider that hosts more than one service accessed by the victim. The farther the adversary is either from the victim (the client) or the end-point (the server), the less likely it may be that the adversary has access to re-identification information. The vulnerability has been mitigated with the injection of dummy traffic from the application to the backend. Dummy traffic is generated by all users independently of whether they are COVID-19 positive or not. The issue was fixed in iOS in version 1.0.8 (uniform distribution), 1.1.0 (exponential distribution), Android in version 1.0.7 (uniform distribution), 1.1.0 (exponential distribution), Backend in version 1.1.2-RELEASE. For more information see the referenced GitHub Security Advisory.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: https://github.com/DP-3T/documents/blob/master/DP3T%20-%20Best%20Practices%20for%20Operation%20Security%20in%20Proximity%20Tracing.pdf; https://github.com/RadarCOVID/radar-covid-android/commit/09d00e5ede801ca400d45c7feda5a99c34e4176c; https://github.com/RadarCOVID/radar-covid-android/commit/53252773ffa81e116deabcbbea3bac96872b9888
CVE: CVE-2020-7962
Published: 2020-11-13
Description: An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a valid answer based on the HTTP response content, and reuse this answer later for a password reset on a chosen password. The enumeration is possible because, within the HTTP response content, WRONG ID is only returned when the answer is incorrect.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2020-0599
Published: 2020-11-13
Description: Improper access control in the PMC for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00360
CVE: CVE-2020-12313
Published: 2020-11-13
Description: Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00402
CVE: CVE-2020-12338
Published: 2020-11-13
Description: Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00424; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00424
CVE: CVE-2020-13638
Published: 2020-11-13
Description: lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/; https://theguly.github.io/2020/09/rconfig-3.9.4-multiple-vulnerabilities/
CVE: CVE-2020-27217
Published: 2020-11-13
Description: In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP 1.0 protocol explicitly disallows a peer to send such messages, a hand crafted AMQP 1.0 client could exploit this behavior in order to send a message of unlimited size to the adapter, eventually causing the adapter to fail with an out of memory exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=567068; https://bugs.eclipse.org/bugs/show_bug.cgi?id=567068
CVE: CVE-2020-5796
Published: 2020-11-13
Description: Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to and execute arbitrary PHP code with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.tenable.com/security/research/tra-2020-61; https://www.tenable.com/security/research/tra-2020-61
CVE: CVE-2020-6157
Published: 2020-11-13
Description: Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate another page and trick a user into providing sensitive data.
CVSS Score: 4.3 (MEDIUM)
References: https://security.opera.com/address-bar-spoofing-in-opera-touch-for-ios-opera-security-advisories/; https://security.opera.com/address-bar-spoofing-in-opera-touch-for-ios-opera-security-advisories/
CVE: CVE-2020-15481
Published: 2020-11-13
Description: An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0.
CVSS Score: 7.8 (HIGH)
References: https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15481/CVE-2020-15481.md; https://www.passmark.com/products/performancetest/history.php; https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15481/CVE-2020-15481.md
CVE: CVE-2020-28638
Published: 2020-11-13
Description: ask_password in Tomb 2.0 through 2.7 returns a warning when pinentry-curses is used and $DISPLAY is non-empty, causing affected users' files to be encrypted with "tomb {W] Detected DISPLAY, but only pinentry-curses is found." as the encryption key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/dyne/Tomb/issues/385; https://github.com/dyne/Tomb/issues/385
CVE: CVE-2020-7772
Published: 2020-11-15
Description: This affects the package doc-path before 2.1.2.
CVSS Score: 7.5 (HIGH)
References: https://github.com/mrodrig/doc-path/blob/stable/src/path.js%23L54; https://github.com/mrodrig/doc-path/commit/3e2bb168cf303bffcd7fae5f8d05e5300c1541c7; https://snyk.io/vuln/SNYK-JS-DOCPATH-1011952
CVE: CVE-2020-28268
Published: 2020-11-15
Description: Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/hlfshell/controlled-merge/commit/5a4b2e9ffe5a0be7f8843d4ab038599d3ae5f9d4; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28268; https://github.com/hlfshell/controlled-merge/commit/5a4b2e9ffe5a0be7f8843d4ab038599d3ae5f9d4