deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7220
Published: 2020-01-23
Description: HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#132-january-22nd-2020; https://www.hashicorp.com/blog/category/vault/; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#132-january-22nd-2020
CVE: CVE-2012-5626
Published: 2020-01-23
Description: EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.
CVSS Score: 7.5 (HIGH)
References: https://access.redhat.com/security/cve/cve-2012-5626; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5626; https://access.redhat.com/security/cve/cve-2012-5626
CVE: CVE-2013-1592
Published: 2020-01-23
Description: A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilities; http://www.exploit-db.com/exploits/24511; http://www.securityfocus.com/bid/57956
CVE: CVE-2013-1593
Published: 2020-01-23
Description: A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04 when sending a crafted SAP Message Server packet to TCP ports 36NN and/or 39NN.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/57956; http://www.securitytracker.com/id/1028148; https://exchange.xforce.ibmcloud.com/vulnerabilities/82065
CVE: CVE-2014-2050
Published: 2020-01-23
Description: Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote attackers to hijack the authentication of users for requests that reset passwords via a crafted HTTP Host header.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/91971; https://owncloud.org/security/advisories/host-header-poisoning/; https://www.securityfocus.com/bid/66221
CVE: CVE-2015-5239
Published: 2020-01-23
Description: Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
CVE: CVE-2015-5278
Published: 2020-01-23
Description: The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
CVE: CVE-2015-5334
Published: 2020-01-23
Description: Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a crafted X.509 certificate, which triggers a stack-based buffer overflow. Note: this vulnerability exists because of an incorrect fix for CVE-2014-3508.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt; http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html; http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html
CVE: CVE-2015-5745
Published: 2020-01-23
Description: Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
CVE: CVE-2015-5333
Published: 2020-01-23
Description: Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object identifiers in X.509 certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt; http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html; http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html
CVE: CVE-2019-19893
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2019-19894
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renaming and replacing %SYSTEMDRIVE%\IXP\DATA\IXPAS.IXP.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2019-19895
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execute code in the context of other users.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2019-19896
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The default file permissions of the IXP$ share on the server allows modification of directories and files (e.g., bat-scripts), which allows execution of code in the context of NT AUTHORITY\SYSTEM on the target server and clients.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-276
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2019-19897
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT AUTHORITY\SYSTEM context of the target system by using the Execute Command Line function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2019-19898
Published: 2020-01-23
Description: In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-522
References: https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software; https://improsec.com/tech-blog/multiple-vulnerabilities-in-easyinstall-rmm-and-deployment-software
CVE: CVE-2020-7936
Published: 2020-01-23
Description: An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/an-open-redirection-on-the-login-form-and-possibly-other-places
CVE: CVE-2020-7937
Published: 2020-01-23
Description: An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/xss-in-the-title-field-on-plone-5-0-and-higher
CVE: CVE-2020-7938
Published: 2020-01-23
Description: plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/privilege-escalation-when-plone-restapi-is-installed
CVE: CVE-2020-7939
Published: 2020-01-23
Description: SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/sql-injection-in-dtml-or-in-connection-objects
CVE: CVE-2020-7940
Published: 2020-01-23
Description: Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/password-strength-checks-were-not-always-checked
CVE: CVE-2020-7941
Published: 2020-01-23
Description: A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2020/01/24/1; https://plone.org/security/hotfix/20200121; https://plone.org/security/hotfix/20200121/privilege-escalation-for-overwriting-content
CVE: CVE-2012-4606
Published: 2020-01-23
Description: Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a Local Privilege Escalation Vulnerability which could allow local users with access to a guest operating system to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/55432; http://www.securityfocus.com/bid/55432
CVE: CVE-2012-5340
Published: 2020-01-23
Description: SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.exploit-db.com/exploits/23246; https://bugs.ghostscript.com/show_bug.cgi?id=693371; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=f919270b6a732ff45c3ba2d0c105e2b39e9c9bc9
CVE: CVE-2012-5389
Published: 2020-01-23
Description: NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/58940; https://exchange.xforce.ibmcloud.com/vulnerabilities/83310; http://www.securityfocus.com/bid/58940
CVE: CVE-2012-6649
Published: 2020-01-23
Description: WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2014/06/26/4; http://www.securityfocus.com/bid/53909; http://www.openwall.com/lists/oss-security/2014/06/26/4
CVE: CVE-2012-6663
Published: 2020-01-23
Description: General Electric D20ME devices are not properly configured and reveal plaintext passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://www.rapid7.com/db/modules/auxiliary/gather/d20pass; http://www.rapid7.com/db/modules/auxiliary/gather/d20pass
CVE: CVE-2019-14885
Published: 2020-01-23
Description: A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14885; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14885
CVE: CVE-2019-17570
Published: 2020-01-23
Description: An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-RPC is no longer maintained and this issue will not be fixed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2020/01/24/2; https://access.redhat.com/errata/RHSA-2020:0310; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-17570%3B
CVE: CVE-2020-6007
Published: 2020-01-23
Description: Philips Hue Bridge model 2.X prior to and including version[PII_REDACTED] contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.
CVSS Score: 7.9 (HIGH)
CWE: CWE-122, CWE-787
References: https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/; https://www2.meethue.com/en-us/support/release-notes/bridge; https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/
CVE: CVE-2020-7245
Published: 2020-01-23
Description: Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance. To exploit the vulnerability, one must register with a username identical to the victim's username, but with white space inserted before and/or after the username. This will register the account with the same username as the victim. After initiating a password reset for the new account, CTFd will reset the victim's account password due to the username collision.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/CTFd/CTFd/pull/1218; https://github.com/CTFd/CTFd/releases/tag/2.2.3; https://github.com/CTFd/CTFd/pull/1218
CVE: CVE-2019-3687
Published: 2020-01-24
Description: The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html; https://bugzilla.suse.com/show_bug.cgi?id=1148788; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
CVE: CVE-2019-3692
Published: 2020-01-24
Description: The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00027.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00028.html; https://bugzilla.suse.com/show_bug.cgi?id=1154302
CVE: CVE-2019-3693
Published: 2020-01-24
Description: A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior to 2.1.15-9.6.15.1. SUSE Linux Enterprise Server 12 mailman versions prior to 2.1.17-3.11.1. openSUSE Leap 15.1 mailman version 2.1.29-lp151.2.14 and prior versions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00000.html; https://bugzilla.suse.com/show_bug.cgi?id=1154328
CVE: CVE-2019-3694
Published: 2020-01-24
Description: A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1155078; https://bugzilla.suse.com/show_bug.cgi?id=1155078
CVE: CVE-2019-3697
Published: 2020-01-24
Description: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root. This issue affects: openSUSE Leap 15.1 gnump3d version 3.0-lp151.2.1 and prior versions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1154229; https://bugzilla.suse.com/show_bug.cgi?id=1154229
CVE: CVE-2019-3699
Published: 2020-01-24
Description: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-59, CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1157449; https://bugzilla.suse.com/show_bug.cgi?id=1157449
CVE: CVE-2019-3700
Published: 2020-01-24
Description: yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until yast2-security switched to stronger defaults in 4.2.6 and used the new configuration file locations. Password created during this time used DES password encryption and are not properly protected against attackers that are able to access the password hashes.
CVSS Score: 2.9 (LOW)
CWE: CWE-327, CWE-327
References: https://bugzilla.suse.com/show_bug.cgi?id=1157541; https://bugzilla.suse.com/show_bug.cgi?id=1157541
CVE: CVE-2012-6302
Published: 2020-01-24
Description: Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2012/12/10/1; http://www.openwall.com/lists/oss-security/2012/12/10/1
CVE: CVE-2012-6451
Published: 2020-01-24
Description: Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/57761; https://exchange.xforce.ibmcloud.com/vulnerabilities/81870; http://www.securityfocus.com/bid/57761
CVE: CVE-2013-3960
Published: 2020-01-24
Description: Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/89171; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18896; https://exchange.xforce.ibmcloud.com/vulnerabilities/89171
CVE: CVE-2013-4333
Published: 2020-01-24
Description: OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2013/09/11/6; http://www.securityfocus.com/bid/62285; https://exchange.xforce.ibmcloud.com/vulnerabilities/87031
CVE: CVE-2019-19632
Published: 2020-01-24
Description: An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. An unauthenticated attacker may inject stored arbitrary JavaScript (XSS), and execute it in the content of authenticated administrators.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://know.bishopfox.com/advisories; https://know.bishopfox.com/advisories/big-monitoring-fabric; https://know.bishopfox.com/advisories
CVE: CVE-2020-7226
Published: 2020-01-24
Description: CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/apereo/cas/commit/8810f2b6c71d73341d4dde6b09a18eb46cfd6d45; https://github.com/apereo/cas/commit/93b1c3e9d90e36a19d0fa0f6efb863c6f0235e75; https://github.com/apereo/cas/commit/a042808d6adbbf44753d52c55cac5f533e24101f
CVE: CVE-2019-18900
Published: 2020-01-24
Description: : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00036.html; https://bugzilla.suse.com/show_bug.cgi?id=1158763; https://lists.debian.org/debian-lts-announce/2020/03/msg00005.html