deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8438
Published: 2020-01-29
Description: Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/ruckus-rce-ruckus-m500-via-injection-on.html; https://sku11army.blogspot.com/2020/01/ruckus-rce-ruckus-m500-via-injection-on.html
CVE: CVE-2020-8442
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a heap-based buffer overflow in the rootcheck decoder component via an authenticated client.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/ossec/ossec-hids/issues/1820; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8443
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to an off-by-one heap-based buffer overflow during the cleaning of crafted syslog msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193, CWE-787
References: https://github.com/ossec/ossec-hids/issues/1816; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8444
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/ossec/ossec-hids/issues/1817; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8445
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages. In many cases, those characters are later logged. Because newlines (\n) are permitted in messages processed by ossec-analysisd, it may be possible to inject nested events into the ossec log. Use of terminal control characters may allow obfuscating events or executing commands when viewed through vulnerable terminal emulators. This may be an unauthenticated remote attack for certain types and origins of logged data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/ossec/ossec-hids/issues/1814; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8446
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write access) via crafted syscheck messages written directly to the analysisd UNIX domain socket by a local user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/ossec/ossec-hids/issues/1813; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8447
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from authenticated remote agents and delivered to the analysisd processing queue by ossec-remoted).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/ossec/ossec-hids/issues/1818; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2020-8448
Published: 2020-01-30
Description: In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written directly to the analysisd UNIX domain socket by a local user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ossec/ossec-hids/issues/1815; https://github.com/ossec/ossec-hids/issues/1821; https://security.gentoo.org/glsa/202007-33
CVE: CVE-2013-0291
Published: 2020-01-30
Description: NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2013/02/15/3; http://www.securityfocus.com/bid/57957; http://www.openwall.com/lists/oss-security/2013/02/15/3
CVE: CVE-2013-0725
Published: 2020-01-30
Description: ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/bid/63862; https://exchange.xforce.ibmcloud.com/vulnerabilities/89185; http://www.securityfocus.com/bid/63862
CVE: CVE-2013-0738
Published: 2020-01-30
Description: Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/58735; https://exchange.xforce.ibmcloud.com/vulnerabilities/83104; http://www.securityfocus.com/bid/58735
CVE: CVE-2013-0739
Published: 2020-01-30
Description: Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/58735; https://exchange.xforce.ibmcloud.com/vulnerabilities/83105; http://www.securityfocus.com/bid/58735
CVE: CVE-2013-1350
Published: 2020-01-30
Description: Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: http://www.securityfocus.com/bid/58334; https://exchange.xforce.ibmcloud.com/vulnerabilities/82705; http://www.securityfocus.com/bid/58334
CVE: CVE-2013-1351
Published: 2020-01-30
Description: Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-294
References: http://www.securityfocus.com/bid/58334; https://andrewbrooksblog.wordpress.com/2013/03/03/verax-nms-13-cve-2013-1351/; https://exchange.xforce.ibmcloud.com/vulnerabilities/82704
CVE: CVE-2013-1352
Published: 2020-01-30
Description: Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/58334; https://exchange.xforce.ibmcloud.com/vulnerabilities/82706; https://packetstormsecurity.com/files/cve/CVE-2013-1352/page1/
CVE: CVE-2013-1631
Published: 2020-01-30
Description: Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/58334; https://andrewbrooksblog.wordpress.com/2013/03/06/verax-nms-23-cve-2013-1352-cve-2013-1631/; http://www.securityfocus.com/bid/58334
CVE: CVE-2013-1866
Published: 2020-01-30
Description: OpenSC OpenSC.tokend has an Arbitrary File Creation/Overwrite Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/bid/58620; https://exchange.xforce.ibmcloud.com/vulnerabilities/82987; http://www.securityfocus.com/bid/58620
CVE: CVE-2013-1867
Published: 2020-01-30
Description: Gemalto Tokend 2013 has an Arbitrary File Creation/Overwrite Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/bid/58618; https://exchange.xforce.ibmcloud.com/vulnerabilities/82988; http://www.securityfocus.com/bid/58618
CVE: CVE-2019-20050
Published: 2020-01-30
Description: Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated user should create a new folder with a "tricky" name in the filemanager. The exploit works when the php-fileinfo extension is disabled on the host system. The attacker must include shell metacharacters in the content type.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://k4m1ll0.com/cve-2019-20050.html; https://k4m1ll0.com/cve-2019-20050.html
CVE: CVE-2019-17273
Published: 2020-01-30
Description: E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in IPv6 environments.
CVSS Score: 6.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-1930
Published: 2020-01-30
Description: A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. With this bug unpatched, exploits can be injected in a number of scenarios including the same privileges as spamd is run which may be elevated though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places. If you cannot upgrade, do not use 3rd party rulesets, do not use sa-compile and do not run spamd as an account with elevated privileges.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00003.html; https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7648; https://lists.apache.org/thread.html/r6729f3d3be754a06c39bb4f11c925a3631e8ea2b4c865546d755cb0a%40%3Cannounce.apache.org%3E
CVE: CVE-2020-1931
Published: 2020-01-30
Description: A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.cf) files can be configured to run system commands similar to CVE-2018-11805. This issue is less stealthy and attempts to exploit the issue will throw warnings. Thanks to Damian Lukowski at credativ for reporting the issue ethically. With this bug unpatched, exploits can be injected in a number of scenarios though doing so remotely is difficult. In addition to upgrading to SA 3.4.4, we again recommend that users should only use update channels or 3rd party .cf files from trusted places.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00003.html; https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7784; https://lists.debian.org/debian-lts-announce/2020/02/msg00015.html
CVE: CVE-2020-7904
Published: 2020-01-30
Description: In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7905
Published: 2020-01-30
Description: Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7906
Published: 2020-01-30
Description: In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7908
Published: 2020-01-30
Description: In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7909
Published: 2020-01-30
Description: In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7910
Published: 2020-01-30
Description: JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7911
Published: 2020-01-30
Description: In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7912
Published: 2020-01-30
Description: In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7913
Published: 2020-01-30
Description: JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-8092
Published: 2020-01-30
Description: A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac versions prior to 8.0.0.
CVSS Score: 1.6 (LOW)
CWE: CWE-264, CWE-269
References: https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-av-for-mac-va-3499/; https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-av-for-mac-va-3499/
CVE: CVE-2020-3147
Published: 2020-01-30
Description: A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. This vulnerability affects firmware releases prior than 1.3.7.18
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smlbus-switch-dos-R6VquS2u; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smlbus-switch-dos-R6VquS2u
CVE: CVE-2020-5233
Published: 2020-01-30
Description: OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/pusher/oauth2_proxy/commit/a316f8a06f3c0ca2b5fc5fa18a91781b313607b2; https://github.com/pusher/oauth2_proxy/releases/tag/v5.0.0; https://github.com/pusher/oauth2_proxy/security/advisories/GHSA-qqxw-m5fj-f7gv
CVE: CVE-2020-8093
Published: 2020-01-30
Description: A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264, CWE-74
References: https://www.bitdefender.com/support/security-advisories/code-injection-into-bitdefender-antivirus-for-mac-va-3441/; https://www.bitdefender.com/support/security-advisories/code-injection-into-bitdefender-antivirus-for-mac-va-3441/
CVE: CVE-2020-8492
Published: 2020-01-30
Description: Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html; https://bugs.python.org/issue39503; https://github.com/python/cpython/pull/18284
CVE: CVE-2014-3718
Published: 2020-01-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the (1) find, (2) lib, or (3) sid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/126654/Aleph-500-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2014/May/67; http://packetstormsecurity.com/files/126654/Aleph-500-Cross-Site-Scripting.html
CVE: CVE-2014-3719
Published: 2020-01-30
Description: Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the (1) find, (2) lib, or (3) sid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/126635/Aleph-500-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/May/65; http://packetstormsecurity.com/files/126635/Aleph-500-SQL-Injection.html
CVE: CVE-2020-5228
Published: 2020-01-30
Description: Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH is part of the default workflow and is activated by default, requiring active user intervention of users to protect media. This leads to users unknowingly handing out public access to events without their knowledge. The problem has been addressed in Opencast 7.6 and 8.1 where the OAI-PMH endpoint is configured to require users with `ROLE_ADMIN` by default. In addition to this, Opencast 9 removes the OAI-PMH publication from the default workflow, making the publication a conscious decision users have to make by updating their workflows.
CVSS Score: 7.6 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/opencast/opencast/blob/1fb812c7810c78f09f29a7f455ff[PII_REDACTED]07/etc/security/mh_default_org.xml#L271-L276; https://github.com/opencast/opencast/security/advisories/GHSA-6f54-3qr9-pjgj; https://github.com/opencast/opencast/blob/1fb812c7810c78f09f29a7f455ff[PII_REDACTED]07/etc/security/mh_default_org.xml#L271-L276
CVE: CVE-2020-5229
Published: 2020-01-30
Description: Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to collide which is problematic especially for popular users like the default `admin` user. This essentially means that for an attacker, it might be feasible to reconstruct a user's password given access to these hashes. Note that attackers needing access to the hashes means that they must gain access to the database in which these are stored first to be able to start cracking the passwords. The problem is addressed in Opencast 8.1 which now uses the modern and much stronger bcrypt password hashing algorithm for storing passwords. Note, that old hashes remain MD5 until the password is updated. For a list of users whose password hashes are stored using MD5, take a look at the `/user-utils/users/md5.json` REST endpoint.
CVSS Score: 7.7 (HIGH)
CWE: CWE-327, CWE-327
References: https://github.com/opencast/opencast/commit/32bfbe5f78e214e2d589f92050228b91d704758e; https://github.com/opencast/opencast/security/advisories/GHSA-h362-m8f2-5x7c; https://github.com/opencast/opencast/commit/32bfbe5f78e214e2d589f92050228b91d704758e
CVE: CVE-2012-6133
Published: 2020-01-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://issues.roundup-tracker.org/issue2550724; http://www.openwall.com/lists/oss-security/2012/11/10/2; http://www.openwall.com/lists/oss-security/2013/02/13/8
CVE: CVE-2013-2198
Published: 2020-01-30
Description: The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass intended restrictions via a crafted username.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2013/06/20/3; https://drupal.org/node/2023503; https://drupal.org/node/2023507
CVE: CVE-2013-2294
Published: 2020-01-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a (1) tag name to the Shortlog table in templates/shortlog.php or branch name to the (2) Shortlog table in templates/shortlog.php or (3) Heads table in plates/summary.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://freecode.com/projects/viewgit/releases/353086; http://packetstormsecurity.com/files/120862/ViewGit-0.0.6-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2013/Mar/174
CVE: CVE-2013-4187
Published: 2020-01-30
Description: The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote authenticated users with the permission to access content to read a link or alias to a restricted node.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2013/08/01/1; http://www.openwall.com/lists/oss-security/2013/08/10/1; http://www.openwall.com/lists/oss-security/2013/08/10/4
CVE: CVE-2013-4241
Published: 2020-01-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) image, (3) url, or (4) testimonial parameter to the Testimonial form (hms-testimonials-addnew page); (5) date_format parameter to the Settings - Default form (hms-testimonials-settings page); (6) name parameter in a Save action to the Settings - Custom Fields form (hms-testimonials-settings-fields page); or (7) name parameter in a Save action to the Settings - Template form (hms-testimonials-templates-new page).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2013/Aug/96; http://seclists.org/fulldisclosure/2013/Aug/98; http://seclists.org/oss-sec/2013/q3/345
CVE: CVE-2015-0949
Published: 2020-01-30
Description: The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.kb.cert.org/vuls/id/631788; http://www.kb.cert.org/vuls/id/631788
CVE: CVE-2015-8851
Published: 2020-01-30
Description: node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-331
References: http://www.openwall.com/lists/oss-security/2016/04/13/8; https://bugzilla.redhat.com/show_bug.cgi?id=1327056; https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d