deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10939
Published: 2019-09-13
Description: The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://lenonleite.com.br/en/blog/2016/12/16/xtreme-locator-dealer-locator-plugin-wordpress-sql-injection/; https://wordpress.org/plugins/xtremelocator/#developers; http://lenonleite.com.br/en/blog/2016/12/16/xtreme-locator-dealer-locator-plugin-wordpress-sql-injection/
CVE: CVE-2016-10940
Published: 2019-09-13
Description: The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/; https://wordpress.org/plugins/zm-gallery/#developers; http://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/
CVE: CVE-2016-10941
Published: 2019-09-13
Description: The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.ripstech.com/2016/the-state-of-wordpress-security/; https://github.com/podlove/podlove-publisher/blob/master/changelog.txt; https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers
CVE: CVE-2016-10942
Published: 2019-09-13
Description: The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.ripstech.com/2016/the-state-of-wordpress-security/; https://github.com/podlove/podlove-publisher/blob/master/changelog.txt; https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers
CVE: CVE-2016-10943
Published: 2019-09-13
Description: The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://lenonleite.com.br/en/2016/12/16/english-zx_csv-upload-1-plugin-wordpress-sql-injection/; https://wordpress.org/plugins/zx-csv-upload/#developers; https://wpvulndb.com/vulnerabilities/8702
CVE: CVE-2016-10944
Published: 2019-09-13
Description: The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://advisories.dxw.com/advisories/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do/; https://wordpress.org/plugins/multisite-post-duplicator/#developers; https://advisories.dxw.com/advisories/csrf-vulnerability-in-multisite-post-duplicator-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can-do/
CVE: CVE-2016-10945
Published: 2019-09-13
Description: The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://klikki.fi/adv/pagelines.html; https://wpvulndb.com/vulnerabilities/8681; https://klikki.fi/adv/pagelines.html
CVE: CVE-2017-18612
Published: 2019-09-13
Description: The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://rastating.github.io/wp-whois-domain-reflected-xss/; https://wordpress.org/plugins/wp-whois-domain/#developers; https://rastating.github.io/wp-whois-domain-reflected-xss/
CVE: CVE-2017-18613
Published: 2019-09-13
Description: The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_trust_form_wordpress_plugin.html; https://wordpress.org/plugins/trust-form/#developers; https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_trust_form_wordpress_plugin.html
CVE: CVE-2017-18614
Published: 2019-09-13
Description: The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://seclists.org/fulldisclosure/2017/Feb/67; https://wordpress.org/plugins/kama-clic-counter/#developers; https://seclists.org/fulldisclosure/2017/Feb/67
CVE: CVE-2017-18615
Published: 2019-09-13
Description: The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/kama-clic-counter/#developers; https://wordpress.org/plugins/kama-clic-counter/#developers
CVE: CVE-2019-16277
Published: 2019-09-13
Description: PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://gitlab.com/zsaleeba/picoc/issues/44; https://gitlab.com/zsaleeba/picoc/issues/44
CVE: CVE-2016-10946
Published: 2019-09-13
Description: The wp-d3 plugin before 2.4.1 for WordPress has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/wp-d3/#developers; https://wpvulndb.com/vulnerabilities/8679; https://wordpress.org/plugins/wp-d3/#developers
CVE: CVE-2016-10947
Published: 2019-09-13
Description: The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://advisories.dxw.com/advisories/sql-injection-in-post-indexer-allows-super-admins-to-read-the-contents-of-the-database/; https://advisories.dxw.com/advisories/sql-injection-in-post-indexer-allows-super-admins-to-read-the-contents-of-the-database/
CVE: CVE-2016-10948
Published: 2019-09-13
Description: The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://advisories.dxw.com/advisories/unserialisation-in-post-indexer-could-allow-man-in-the-middle-to-execute-arbitrary-code-in-some-circumstances/; https://advisories.dxw.com/advisories/unserialisation-in-post-indexer-could-allow-man-in-the-middle-to-execute-arbitrary-code-in-some-circumstances/
CVE: CVE-2016-10949
Published: 2019-09-13
Description: The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://advisories.dxw.com/advisories/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances/; https://advisories.dxw.com/advisories/sql-injection-and-unserialization-vulnerability-in-relevanssi-premium-could-allow-admins-to-execute-arbitrary-code-in-some-circumstances/
CVE: CVE-2016-10950
Published: 2019-09-13
Description: The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://lenonleite.com.br/en/2016/11/10/sirv-1-3-1-plugin-for-wordpress/; https://wordpress.org/plugins/sirv/#developers; https://wpvulndb.com/vulnerabilities/8673
CVE: CVE-2016-10951
Published: 2019-09-13
Description: The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://lenonleite.com.br/en/2016/11/10/firestorm-shopping-cart-ecommerce-plugin-2-07-02-for-wordpress/; https://wordpress.org/plugins/fs-shopping-cart/#developers; https://wpvulndb.com/vulnerabilities/8672
CVE: CVE-2016-10952
Published: 2019-09-13
Description: The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sumofpwn.nl/advisory/2016/cross_site_scripting_vulnerability_in_quotes_collection_wordpress_plugin.html; https://wordpress.org/plugins/quotes-collection/#developers; https://wpvulndb.com/vulnerabilities/8649
CVE: CVE-2016-10953
Published: 2019-09-13
Description: The Headway theme before 3.8.9 for WordPress has XSS via the license key field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wptavern.com/headway-3-8-9-patches-potential-xss-vulnerability; https://wpvulndb.com/vulnerabilities/8641; https://wptavern.com/headway-3-8-9-patches-potential-xss-vulnerability
CVE: CVE-2016-10954
Published: 2019-09-13
Description: The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://lifeforms.nl/20160919/unrestricted-upload-neosense; https://wpvulndb.com/vulnerabilities/8622; https://lifeforms.nl/20160919/unrestricted-upload-neosense
CVE: CVE-2016-10955
Published: 2019-09-13
Description: The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wordpress.org/plugins/cysteme-finder/#developers; https://wpvulndb.com/vulnerabilities/8612; https://wordpress.org/plugins/cysteme-finder/#developers
CVE: CVE-2019-12516
Published: 2019-09-13
Description: The slickquiz plugin through 1.3.7.1 for WordPress allows SQL Injection by Subscriber users, as demonstrated by a /wp-admin/admin.php?page=slickquiz-scores&id= or /wp-admin/admin.php?page=slickquiz-edit&id= or /wp-admin/admin.php?page=slickquiz-preview&id= URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154440/WordPress-SlickQuiz-1.3.7.1-SQL-Injection.html; https://wordpress.org/plugins/slickquiz/#developers; http://packetstormsecurity.com/files/154440/WordPress-SlickQuiz-1.3.7.1-SQL-Injection.html
CVE: CVE-2019-12517
Published: 2019-09-13
Description: An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The save_quiz_score functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress backend for all users with at least Subscriber rights. Because the plugin does not properly validate and sanitize this data, a malicious payload in either the name or email field is executed directly within the backend at /wp-admin/admin.php?page=slickquiz across all users with the privileges of at least Subscriber.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154439/WordPress-SlickQuiz-1.3.7.1-Cross-Site-Scripting.html; https://wordpress.org/plugins/slickquiz/#developers; http://packetstormsecurity.com/files/154439/WordPress-SlickQuiz-1.3.7.1-Cross-Site-Scripting.html
CVE: CVE-2019-12922
Published: 2019-09-13
Description: A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html; http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.html
CVE: CVE-2019-13363
Published: 2019-09-13
Description: admin.php?page=notification_by_mail in Piwigo 2.9.5 has XSS via the nbm&#95;send&#95;html&#95;mail, nbm&#95;send&#95;mail&#95;as, nbm&#95;send&#95;detailed&#95;content, nbm&#95;complementary&#95;mail&#95;content, nbm&#95;send&#95;recent&#95;post&#95;dates, or param&#95;submit parameter. This is exploitable via CSRF.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-352
References: http://packetstormsecurity.com/files/154484/Piwigo-2.9.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Sep/25; http://seclists.org/fulldisclosure/2020/Jun/29
CVE: CVE-2019-13364
Published: 2019-09-13
Description: admin.php?page=account_billing in Piwigo 2.9.5 has XSS via the vat&#95;number, billing&#95;name, company, or billing&#95;address parameter. This is exploitable via CSRF.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-352
References: http://packetstormsecurity.com/files/154484/Piwigo-2.9.5-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Sep/25; http://seclists.org/fulldisclosure/2020/Jun/29
CVE: CVE-2019-15030
Published: 2019-09-13
Description: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://www.openwall.com/lists/oss-security/2019/09/10/3
CVE: CVE-2019-15031
Published: 2019-09-13
Description: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-662
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html; http://www.openwall.com/lists/oss-security/2019/09/10/4
CVE: CVE-2019-3646
Published: 2019-09-13
Description: DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-714, CWE-426
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS102968; http://service.mcafee.com/FAQDocument.aspx?&id=TS102968
CVE: CVE-2019-16288
Published: 2019-09-13
Description: On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash.
CVSS Score: 7.5 (HIGH)
References: https://pastebin.com/yu8hPE8w; https://pastebin.com/yu8hPE8w
CVE: CVE-2019-16289
Published: 2019-09-13
Description: The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://generaleg0x01.com/2019/09/13/xss-woody/; https://wordpress.org/plugins/insert-php/#developers; https://wpvulndb.com/vulnerabilities/9880
CVE: CVE-2010-5333
Published: 2019-09-13
Description: The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/purpl3-f0x/OSCE-prep/blob/master/eip_integard.py; https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/integard_password_bof.rb; https://purpl3f0xsec.tech/2019/08/04/osce-prep-integard.html
CVE: CVE-2018-7081
Published: 2019-09-13
Description: A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit specially-crafted IP traffic to a mobility controller could exploit this vulnerability and cause a process crash or to execute arbitrary code within the underlying operating system with full system privileges. Such an attack could lead to complete system compromise. The ability to transmit traffic to an IP interface on the mobility controller is required to carry out an attack. The attack leverages the PAPI protocol (UDP port 8211). If the mobility controller is only bridging L2 traffic to an uplink and does not have an IP address that is accessible to the attacker, it cannot be attacked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt; https://x-c3ll.github.io/posts/CVE-2018-7081-RCE-ArubaOS/; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt
CVE: CVE-2019-10937
Published: 2019-09-13
Description: A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf; https://www.us-cert.gov/ics/advisories/icsa-19-253-05; https://cert-portal.siemens.com/productcert/pdf/ssa-250618.pdf
CVE: CVE-2019-13532
Published: 2019-09-13
Description: CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.us-cert.gov/ics/advisories/icsa-19-255-01; https://www.us-cert.gov/ics/advisories/icsa-19-255-01
CVE: CVE-2019-13548
Published: 2019-09-13
Description: CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-19-255-01; https://www.us-cert.gov/ics/advisories/icsa-19-255-01
CVE: CVE-2019-13918
Published: 2019-09-13
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-521
References: https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
CVE: CVE-2019-13919
Published: 2019-09-13
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed by a non-privileged user. The security vulnerability could be exploited by an attacker with network access and valid credentials for the web interface. No user interaction is required. The vulnerability could allow an attacker to access information that he should not be able to read. The affected information does not include passwords. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
CVE: CVE-2019-13920
Published: 2019-09-13
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a logged-in user to the application. The vulnerability could allow switching the connectivity state of a user or a device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
CVE: CVE-2019-13922
Published: 2019-09-13
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device's password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 2.7 (LOW)
CWE: CWE-311, CWE-311
References: https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-884497.pdf
CVE: CVE-2019-13923
Published: 2019-09-13
Description: A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf; https://www.us-cert.gov/ics/advisories/icsa-19-253-04; https://cert-portal.siemens.com/productcert/pdf/ssa-191683.pdf
CVE: CVE-2019-16293
Published: 2019-09-13
Description: The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://community.opmantek.com/display/OA/Errata+-+3.1.2+Security+issue%2C+September+2019; https://community.opmantek.com/display/OA/Errata+-+3.1.2+Security+issue%2C+September+2019
CVE: CVE-2019-5314
Published: 2019-09-13
Description: Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt
CVE: CVE-2019-5315
Published: 2019-09-13
Description: A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt
CVE: CVE-2019-11660
Published: 2019-09-13
Description: Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html; https://softwaresupport.softwaregrp.com/doc/KM03525630; http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html