deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-18329
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18330
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18329. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18331
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18332
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to directory listings of the server by sending specifically crafted packets to 80/tcp, 8095/tcp or 8080/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-287
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18333
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18334
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to enumerate valid user names by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18335
Published: 2019-12-12
Description: A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf
CVE: CVE-2019-18337
Published: 2019-12-12
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an authentication bypass
vulnerability in its XML-based communication protocol as provided by default
on ports 5444/tcp and 5440/tcp.

A remote attacker with network access to the CCS server could
exploit this vulnerability to read the CCS users database, including
the passwords of all users in obfuscated cleartext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-18338
Published: 2019-12-12
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal
vulnerability in its XML-based communication protocol as provided by default
on ports 5444/tcp and 5440/tcp.

An authenticated remote attacker with network access to the CCS server
could exploit this vulnerability to list arbitrary directories
or read files outside of the CCS application context.
CVSS Score: 7.7 (HIGH)
CWE: CWE-23, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-18339
Published: 2019-12-12
Description: A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The HTTP service (default port 5401/tcp) of the SiVMS/SiNVR Video Server
contains an authentication bypass vulnerability, even when properly
configured with enforced authentication.

A remote attacker with network access to the Video Server could 
exploit this vulnerability to read the SiVMS/SiNVR users database, including
the passwords of all users in obfuscated cleartext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-18340
Published: 2019-12-12
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0), Control Center Server (CCS) (All versions >= V1.5.0), SiNVR/SiVMS Video Server (All versions < V5.0.0), SiNVR/SiVMS Video Server (All versions >= V5.0.0). Both the SiVMS/SiNVR Video Server and the Control Center Server (CCS) store
user and device passwords by applying weak cryptography.

A local attacker could exploit this vulnerability to extract
the passwords from the user database and/or the device configuration files
to conduct further attacks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-18341
Published: 2019-12-12
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) contains an authentication bypass vulnerability.

A remote attacker with network access to the CCS server could
exploit this vulnerability to read data from the EDIR directory
(for example, the list of all configured stations).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-18342
Published: 2019-12-12
Description: A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server
(CCS) does not properly limit its capabilities to the specified purpose.

In conjunction with CVE-2019-18341, an unauthenticated remote attacker with
network access to the CCS server could exploit this vulnerability
to read or delete arbitrary files, or access other resources on the same
server.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-749
References: https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
CVE: CVE-2019-19766
Published: 2019-12-12
Description: The Bitwarden server through 1.32.0 has a potentially unwanted KDF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-916
References: https://github.com/bitwarden/jslib/issues/52; https://github.com/bitwarden/server/issues/589; https://github.com/bitwarden/jslib/issues/52
CVE: CVE-2019-19767
Published: 2019-12-12
Description: The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://bugzilla.kernel.org/show_bug.cgi?id=205609; https://bugzilla.kernel.org/show_bug.cgi?id=205707
CVE: CVE-2019-19768
Published: 2019-12-12
Description: In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00039.html; https://bugzilla.kernel.org/show_bug.cgi?id=205711; https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html
CVE: CVE-2019-19769
Published: 2019-12-12
Description: In the Linux kernel 5.3.10, there is a use-after-free (read) in the perf_trace_lock_acquire function (related to include/trace/events/lock.h).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.kernel.org/show_bug.cgi?id=205705; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF4PQZBEPNXDSK5DOBMW54OCLP25FTCD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJSIZWKW7RDHKU3CHC5BFAQI43NVHLUQ/
CVE: CVE-2019-19770
Published: 2019-12-12
Description: In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
CVSS Score: 8.2 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html; https://bugzilla.kernel.org/show_bug.cgi?id=205713; https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE: CVE-2019-19771
Published: 2019-12-12
Description: The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.
CVSS Score: 8.8 (HIGH)
References: https://www.npmjs.com/advisories/1417; https://www.npmjs.com/package/lodahs; https://www.npmjs.com/advisories/1417
CVE: CVE-2019-3951
Published: 2019-12-12
Description: Advantech WebAccess before 8.4.3 allows unauthenticated remote attackers to execute arbitrary code or cause a denial of service (memory corruption) due to a stack-based buffer overflow when handling IOCTL 70533 RPC messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.tenable.com/security/research/tra-2019-52; https://www.tenable.com/security/research/tra-2019-52
CVE: CVE-2019-5061
Published: 2019-12-12
Description: An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-440, CWE-287
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0849; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0849
CVE: CVE-2019-5062
Published: 2019-12-12
Description: An exploitable denial-of-service vulnerability exists in the 802.11w security state handling for hostapd 2.6 connected clients with valid 802.11w sessions. By simulating an incomplete new association, an attacker can trigger a deauthentication against stations using 802.11w, resulting in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-440, CWE-346
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0850
CVE: CVE-2019-5144
Published: 2019-12-12
Description: An exploitable heap underflow vulnerability exists in the derive_taps_and_gains function in kdu_v7ar.dll of Kakadu Software SDK 7.10.2. A specially crafted jp2 file can cause a heap overflow, which can result in remote code execution. An attacker could provide a malformed file to the victim to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-191, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0933; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0933
CVE: CVE-2018-11805
Published: 2019-12-12
Description: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party .cf files from trusted places.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00003.html; http://www.openwall.com/lists/oss-security/2019/12/12/1; http://www.openwall.com/lists/oss-security/2020/01/30/2
CVE: CVE-2019-12420
Published: 2019-12-12
Description: In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the recommended fix but details will not be shared publicly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2019/12/12/2; https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7747; https://lists.apache.org/thread.html/5863d6c42fc9595a29566732f12348cde0ca0e41bda91695c62041de%40%3Cannounce.apache.org%3E
CVE: CVE-2019-16774
Published: 2019-12-12
Description: In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94, CWE-502
References: https://github.com/PHPSocialNetwork/phpfastcache/commit/c4527205cb7a402b595790c74310791f5b04a1a4; https://github.com/PHPSocialNetwork/phpfastcache/releases/tag/5.0.13; https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-484f-743f-6jx2
CVE: CVE-2019-16775
Published: 2019-12-13
Description: Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVSS Score: 7.7 (HIGH)
CWE: CWE-61, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html; https://access.redhat.com/errata/RHEA-2020:0330; https://access.redhat.com/errata/RHSA-2020:0573
CVE: CVE-2019-16776
Published: 2019-12-13
Description: Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin field. A properly constructed entry in the package.json bin field would allow a package publisher to modify and/or gain access to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html; https://access.redhat.com/errata/RHEA-2020:0330; https://access.redhat.com/errata/RHSA-2020:0573
CVE: CVE-2019-16777
Published: 2019-12-13
Description: Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of packages that also create a serve binary would overwrite the previous serve binary. This behavior is still allowed in local installations and also through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-269
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00027.html; https://access.redhat.com/errata/RHEA-2020:0330; https://access.redhat.com/errata/RHSA-2020:0573
CVE: CVE-2019-19777
Published: 2019-12-13
Description: stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has a heap-based buffer over-read in stbi__load_main.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/saitoha/libsixel/issues/109; https://github.com/saitoha/libsixel/issues/109
CVE: CVE-2019-19778
Published: 2019-12-13
Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer over-read in the function load_sixel at loader.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/saitoha/libsixel/issues/110; https://github.com/saitoha/libsixel/issues/110
CVE: CVE-2019-19782
Published: 2019-12-13
Description: The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown; https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/; https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown
CVE: CVE-2014-0175
Published: 2019-12-13
Description: mcollective has a default password set at install
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://access.redhat.com/security/cve/cve-2014-0175; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0175; https://security-tracker.debian.org/tracker/CVE-2014-0175
CVE: CVE-2014-0197
Published: 2019-12-13
Description: CFME: CSRF protection vulnerability via permissive check of the referrer header
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://access.redhat.com/security/cve/cve-2014-0197; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0197; https://access.redhat.com/security/cve/cve-2014-0197
CVE: CVE-2014-0212
Published: 2019-12-13
Description: qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/security/cve/cve-2014-0212; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0212; https://security-tracker.debian.org/tracker/CVE-2014-0212
CVE: CVE-2014-0241
Published: 2019-12-13
Description: rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://access.redhat.com/security/cve/cve-2014-0241; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0241; https://access.redhat.com/security/cve/cve-2014-0241
CVE: CVE-2019-13347
Published: 2019-12-13
Description: An issue was discovered in the SAML Single Sign On (SSO) plugin for several Atlassian products affecting versions 3.1.0 through 3.2.2 for Jira and Confluence, versions 2.4.0 through 3.0.3 for Bitbucket, and versions 2.4.0 through 2.5.2 for Bamboo. It allows locally disabled users to reactivate their accounts just by browsing the affected Jira/Confluence/Bitbucket/Bamboo instance, even when the applicable configuration option of the plugin has been disabled ("Reactivate inactive users"). Exploiting this vulnerability requires an attacker to be authorized by the identity provider and requires that the plugin's configuration option "User Update Method" have the "Update from SAML Attributes" value.
CVSS Score: 7.5 (HIGH)
References: https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview; https://wiki.resolution.de/doc/saml-sso/latest/all/security-advisories/2019-07-11-users-are-always-re-enabled-during-login-when-updated; https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview
CVE: CVE-2019-18801
Published: 2019-12-13
Description: An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:4222; https://blog.envoyproxy.io; https://github.com/envoyproxy/envoy/commits/master