deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-16451
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://www.zerodayinitiative.com/advisories/ZDI-20-145/; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16452
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16453
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16454
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16455
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16456
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16457
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16458
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16459
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16460
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16461
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16462
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16463
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-11780
Published: 2019-12-19
Description: Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests, which could lead to privilege escalation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://github.com/odoo/odoo/issues/42196; https://github.com/odoo/odoo/issues/42196
CVE: CVE-2019-16464
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-16465
Published: 2019-12-19
Description: Adobe Acrobat and Reader versions , 2[PII_REDACTED]6 and earlier, 2[PII_REDACTED]2 and earlier, 2[PII_REDACTED]5 and earlier version, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]5 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb19-55.html; https://helpx.adobe.com/security/products/acrobat/apsb19-55.html
CVE: CVE-2019-17633
Published: 2019-12-19
Description: For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local installations (e.g. on personal laptops). In that case, even if the Che API is not exposed externally, some javascript running in the local browser is able to send requests to it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=551596; https://bugs.eclipse.org/bugs/show_bug.cgi?id=551596
CVE: CVE-2019-18615
Published: 2019-12-19
Description: In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. This only affects CVP environments where: 1. Devices have enable mode passwords which are different from the user's login password, OR 2. There are configlet builders that use the Device class and specify username and password explicitly Application logs are not accessible or visible from the CVP GUI. Application logs can only be read by authorized users with privileged access to the VM hosting the CVP application.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-312, CWE-522
References: https://www.arista.com/en/support/advisories-notices/security-advisories/9002-security-advisory-45; https://www.arista.com/en/support/advisories-notices/security-advisories/9002-security-advisory-45
CVE: CVE-2019-18955
Published: 2019-12-19
Description: The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.lansweeper.com/changelog/; https://www.lansweeper.com/changelog/
CVE: CVE-2019-19905
Published: 2019-12-19
Description: NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://bugs.debian.org/947005; https://github.com/NetHack/NetHack/commit/f001de79542b8c38b1f8e6d7eaefbbd28ab94b47; https://github.com/NetHack/NetHack/commit/f4a840a48f4bcf11757b3d859e9d53cc9d5ef226
CVE: CVE-2019-19906
Published: 2019-12-19
Description: cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193, CWE-787
References: http://seclists.org/fulldisclosure/2020/Jul/23; http://seclists.org/fulldisclosure/2020/Jul/24; http://www.openwall.com/lists/oss-security/2022/02/23/4
CVE: CVE-2019-19907
Published: 2019-12-19
Description: HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00006.html; https://stash.kopano.io/projects/KC/repos/kopanocore/browse/RELNOTES.txt; https://stash.kopano.io/projects/KC/repos/kopanocore/commits/4e02b420fff
CVE: CVE-2019-18181
Published: 2019-12-19
Description: In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.
CVSS Score: 7.8 (HIGH)
References: https://www.arista.com/en/support/advisories-notices/security-advisories/9001-security-advisory-44; https://www.arista.com/en/support/advisories-notices/security-advisories/9001-security-advisory-44
CVE: CVE-2019-19909
Published: 2019-12-19
Description: An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-502
References: https://github.com/pkp/pkp-lib/compare/3_1_2-1...3_1_2-2; https://github.com/pkp/pkp-lib/issues/5302; https://pkp.sfu.ca/ojs/ojs_download/
CVE: CVE-2019-19910
Published: 2019-12-19
Description: The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 (1.35 and/or 1.34) mishandles certain HTML attributes, as demonstrated by IMG onmouseover= (impact is XSS) and IMG src=http (impact is disclosing the client's IP address). This can occur within a talk page topical header that is viewed within a mobile (MobileFrontend) context.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/Ida471291f1698387a26736931ab17e6899e05b51; https://phabricator.wikimedia.org/T240487; https://gerrit.wikimedia.org/r/q/Ida471291f1698387a26736931ab17e6899e05b51
CVE: CVE-2019-11294
Published: 2019-12-19
Description: Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://www.cloudfoundry.org/blog/cve-2019-11294; https://www.cloudfoundry.org/blog/cve-2019-11294
CVE: CVE-2019-8253
Published: 2019-12-19
Description: Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb19-56.html; https://helpx.adobe.com/security/products/photoshop/apsb19-56.html
CVE: CVE-2019-8254
Published: 2019-12-19
Description: Adobe Photoshop CC versions before 20.0.8 and 21.0.x before 21.0.2 have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb19-56.html; https://helpx.adobe.com/security/products/photoshop/apsb19-56.html
CVE: CVE-2019-8255
Published: 2019-12-19
Description: Brackets versions 1.14 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/brackets/apsb19-57.html; https://helpx.adobe.com/security/products/brackets/apsb19-57.html
CVE: CVE-2019-8256
Published: 2019-12-19
Description: ColdFusion versions Update 6 and earlier have an insecure inherited permissions of default installation directory vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://helpx.adobe.com/security/products/coldfusion/apsb19-58.html; https://helpx.adobe.com/security/products/coldfusion/apsb19-58.html
CVE: CVE-2019-16871
Published: 2019-12-19
Description: Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution (as SYSTEM) via the Beckhoff ADS protocol.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf; https://www.ic4.be/2019/12/18/beckhoff-cve-2019-16871/#more-648; https://download.beckhoff.com/download/document/product-security/Advisories/advisory-2017-001.pdf
CVE: CVE-2019-17527
Published: 2019-12-19
Description: dataForDepandantField in models/custormfields.php in the JS JOBS FREE extension before 1.2.7 for Joomla! allows SQL Injection via the index.php?option=com_jsjobs&task=customfields.getfieldtitlebyfieldandfieldfo child parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/blackcon/c61771eb8c9f0aeef6f6797f945efa13; https://gist.github.com/blackcon/c61771eb8c9f0aeef6f6797f945efa13
CVE: CVE-2019-19232
Published: 2019-12-19
Description: In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a user not present in the local password database is an intentional feature. Because this behavior surprised some users, sudo 1.8.30 introduced an option to enable/disable this behavior with the default being disabled. However, this does not change the fact that sudo was behaving as intended, and as documented, in earlier versions
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/fulldisclosure/2020/Mar/31; https://access.redhat.com/security/cve/cve-2019-19232; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/
CVE: CVE-2019-19234
Published: 2019-12-19
Description: In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes that this CVE is not valid. Disabling local password authentication for a user is not the same as disabling all access to that user--the user may still be able to login via other means (ssh key, kerberos, etc). Both the Linux shadow(5) and passwd(1) manuals are clear on this. Indeed it is a valid use case to have local accounts that are _only_ accessible via sudo and that cannot be logged into with a password. Sudo 1.8.30 added an optional setting to check the _shell_ of the target user (not the encrypted password!) against the contents of /etc/shells but that is not the same thing as preventing access to users with an invalid password hash
CVSS Score: 7.5 (HIGH)
References: https://access.redhat.com/security/cve/cve-2019-19234; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/
CVE: CVE-2019-19340
Published: 2019-12-19
Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitmq_enable_manager=true' exposes the RabbitMQ management interface publicly, as expected. If the default admin user is still active, an attacker could guess the password and gain access to the system.
CVSS Score: 8.2 (HIGH)
CWE: CWE-1188, CWE-1188
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19340; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19340
CVE: CVE-2019-19341
Published: 2019-12-19
Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the SECRET_KEY and the database backup. Any user with access to the Tower server, and knowledge of when a backup is run, could retrieve every credential stored in Tower. Access to data is the highest threat with this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19341; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19341
CVE: CVE-2019-19342
Published: 2019-12-19
Description: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker could easily guess some predictable passwords or brute force the password.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19342; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19342
CVE: CVE-2019-19915
Published: 2019-12-19
Description: The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=eps_redirect_save and /admin-ajax.php?action=eps_redirect_delete actions. This could result in a loss of site availability, malicious redirects, and user infections. This could also be exploited via CSRF.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-352, CWE-732
References: https://wpvulndb.com/vulnerabilities/9979; https://www.wordfence.com/blog/2019/12/critical-vulnerability-patched-in-301-redirects-easy-redirect-manager/; https://wpvulndb.com/vulnerabilities/9979
CVE: CVE-2019-19141
Published: 2019-12-19
Description: The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write files anywhere the user account running the Plex Media Server has permissions. This allows remote code execution via a variety of methods, such as (on a default Ubuntu installation) creating a .ssh folder in the plex user's home directory via directory traversal, uploading an SSH authorized_keys file there, and logging into the host as the Plex user via SSH.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.plex.tv/t/security-camera-upload/507289; https://forums.plex.tv/t/security-camera-upload/507289
CVE: CVE-2[PII_REDACTED]
Published: 2019-12-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10539. Reason: This candidate is a duplicate of CVE-2016-10539. Notes: All CVE users should reference CVE-2016-10539 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-19789
Published: 2019-12-20
Description: 3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12946&token=edd5d8e821edaf3189d36bb1cac1aa1bfc42351f&download=; https://www.codesys.com; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=12946&token=edd5d8e821edaf3189d36bb1cac1aa1bfc42351f&download=
CVE: CVE-2019-19908
Published: 2019-12-20
Description: phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ciprianmp.com/; https://cinzinga.github.io/CVE-2019-19908/; https://sourceforge.net/projects/phpmychat/
CVE: CVE-2012-3409
Published: 2019-12-20
Description: ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2012/07/11/23; http://www.openwall.com/lists/oss-security/2012/07/12/1; http://www.openwall.com/lists/oss-security/2012/07/13/5