deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-4286
Published: 2020-04-29
Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160514; https://www.ibm.com/support/pages/node/6202556; https://exchange.xforce.ibmcloud.com/vulnerabilities/160514
CVE: CVE-2019-4288
Published: 2020-04-29
Description: IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160631; https://www.ibm.com/support/pages/node/6202708; https://exchange.xforce.ibmcloud.com/vulnerabilities/160631
CVE: CVE-2020-10797
Published: 2020-04-29
Description: An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/pfsense/en/latest/releases/2-4-5-new-features-and-changes.html; https://github.com/pfsense/pfsense/commit/cc3990a334059018b004c91eeb66c147d8afe83d; https://redmine.pfsense.org/issues/10355
CVE: CVE-2020-11446
Published: 2020-04-29
Description: ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://support.eset.com/en/ca7489-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows; https://support.eset.com/en/ca7489-local-privilege-escalation-vulnerability-fixed-in-eset-products-for-windows
CVE: CVE-2020-11674
Published: 2020-04-29
Description: Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
CVSS Score: 8.8 (HIGH)
References: https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/; https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE: CVE-2020-11675
Published: 2020-04-29
Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/; https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE: CVE-2020-11676
Published: 2020-04-29
Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/; https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE: CVE-2020-11677
Published: 2020-04-29
Description: Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/; https://www.x41-dsec.de/lab/advisories/x41-2019-008-medico/
CVE: CVE-2020-12251
Published: 2020-04-29
Description: An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value (in the POST method) from the original filename to achieve directory traversal via a ../ sequence and, for example, obtain a complete directory listing of the machine.
CVSS Score: 2.2 (LOW)
CWE: CWE-22
References: http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html; https://seclists.org/fulldisclosure/2020/Apr/56; http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html
CVE: CVE-2020-12252
Published: 2020-04-29
Description: An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-434
References: http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html; https://seclists.org/fulldisclosure/2020/Apr/56; http://packetstormsecurity.com/files/157484/Gigamon-GigaVUE-5.5.01.11-Directory-Traversal-File-Upload.html
CVE: CVE-2020-12446
Published: 2020-04-29
Description: The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input from and output to I/O ports to local non-privileged users. This leads to privilege escalation to NT AUTHORITY\SYSTEM.
CVSS Score: 7.8 (HIGH)
References: https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-003.md; https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-003.md
CVE: CVE-2020-2575
Published: 2020-04-29
Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://security.gentoo.org/glsa/202101-09; https://www.oracle.com/security-alerts/cpuapr2020.html; https://www.zerodayinitiative.com/advisories/ZDI-20-582/
CVE: CVE-2020-7804
Published: 2020-04-29
Description: ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: http://www.handysoft.co.kr/product/product.html?seq=12; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35368; http://www.handysoft.co.kr/product/product.html?seq=12
CVE: CVE-2020-8773
Published: 2020-04-29
Description: The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536; https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536
CVE: CVE-2020-8774
Published: 2020-04-29
Description: Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://community.pega.com/node/1913996; https://community.pega.com/node/1913996
CVE: CVE-2019-19165
Published: 2020-04-29
Description: AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder and execute. This issue affects: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) version 1.0.5.0 and later versions on windows 7/8/10.
CVSS Score: 7.2 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.ebiz4u.co.kr/home.do; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35348; http://www.ebiz4u.co.kr/home.do
CVE: CVE-2020-12458
Published: 2020-04-29
Description: An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://access.redhat.com/security/cve/CVE-2020-12458; https://bugzilla.redhat.com/show_bug.cgi?id=1827765; https://github.com/grafana/grafana/issues/8283
CVE: CVE-2020-12459
Published: 2020-04-29
Description: In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://access.redhat.com/security/cve/CVE-2020-12459; https://bugzilla.redhat.com/show_bug.cgi?id=1829724; https://github.com/grafana/grafana/issues/8283
CVE: CVE-2020-8775
Published: 2020-04-29
Description: Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536; https://www.pega.com/products/pega-platform; https://community.pega.com/knowledgebase/products/platform/resolved-issues?q=issue%20529706&f%5B0%5D=version%3A32536
CVE: CVE-2020-11009
Published: 2020-04-29
Description: In Rundeck before version 3.2.6, authenticated users can craft a request that reveals Execution data and logs and Job details that they are not authorized to see. Depending on the configuration and the way that Rundeck is used, this could result in anything between a high severity risk, or a very low risk. If access is tightly restricted and all users on the system have access to all projects, this is not really much of an issue. If access is wider and allows login for users that do not have access to any projects, or project access is restricted, there is a larger issue. If access is meant to be restricted and secrets, sensitive data, or intellectual property are exposed in Rundeck execution output and job data, the risk becomes much higher. This vulnerability is patched in version 3.2.6
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-639
References: https://docs.rundeck.com/docs/history/3_2_x/version-3.2.6.html; https://github.com/rundeck/rundeck/security/advisories/GHSA-5679-7qrc-5m7j; https://docs.rundeck.com/docs/history/3_2_x/version-3.2.6.html
CVE: CVE-2020-12275
Published: 2020-04-29
Description: GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
CVSS Score: 5.3 (MEDIUM)
References: https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/; https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE: CVE-2020-12276
Published: 2020-04-29
Description: GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/; https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE: CVE-2020-12277
Published: 2020-04-29
Description: GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/; https://about.gitlab.com/releases/2020/03/26/security-release-12-dot-9-dot-1-released/
CVE: CVE-2020-12461
Published: 2020-04-29
Description: PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822; https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2; https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d[PII_REDACTED]6c898b98e6be10754e03d
CVE: CVE-2020-12462
Published: 2020-04-29
Description: The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/ninja-forms/#developers; https://wordpress.org/plugins/ninja-forms/#developers
CVE: CVE-2020-11020
Published: 2020-04-29
Description: Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vulnerability allows any client to bypass checks put in place by server-side extensions, by appending extra segments to the message channel. It is patched in versions 1.0.4, 1.1.3 and 1.2.5.
CVSS Score: 8.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e; https://github.com/faye/faye/security/advisories/GHSA-qpg4-4w7w-2mq5; https://github.com/faye/faye/commit/65d297d341b607f3cb0b5fa6021a625a991cc30e
CVE: CVE-2020-11021
Published: 2020-04-29
Description: Actions Http-Client (NPM @actions/http-client) before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redirect scenarios. The conditions in which this happens are if consumers of the http-client: 1. make an http request with an authorization header 2. that request leads to a redirect (302) and 3. the redirect url redirects to another domain or hostname Then the authorization header will get passed to the other domain. The problem is fixed in version 1.0.8.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/actions/http-client/commit/f6aae3dda4f4c9dc0b49737b36007330f78fd53a; https://github.com/actions/http-client/pull/27; https://github.com/actions/http-client/security/advisories/GHSA-9w6v-m7wp-jwg4
CVE: CVE-2020-12464
Published: 2020-04-29
Description: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=056ad39ee[PII_REDACTED]f6469c3364964a322912b
CVE: CVE-2020-12465
Published: 2020-04-29
Description: An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.10; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b102f0c522cf668c8382c56a4f771b37d011cda2; https://github.com/torvalds/linux/commit/b102f0c522cf668c8382c56a4f771b37d011cda2
CVE: CVE-2020-12472
Published: 2020-04-29
Description: MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Multiple%20Cross-Site-Scripting; https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Multiple%20Cross-Site-Scripting
CVE: CVE-2020-12473
Published: 2020-04-29
Description: MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.
CVSS Score: 7.2 (HIGH)
References: https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20ConvertVideo; https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20ConvertVideo
CVE: CVE-2019-16011
Published: 2020-04-29
Description: A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-AcQ5MxCn; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-AcQ5MxCn
CVE: CVE-2020-11023
Published: 2020-04-29
Description: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
CVE: CVE-2020-11024
Published: 2020-04-29
Description: In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-300, CWE-200
References: https://github.com/moonlight-stream/moonlight-ios/commit/b0149b2fe9125a77ee11fe[PII_REDACTED]4b6e8cc; https://github.com/moonlight-stream/moonlight-ios/pull/405; https://github.com/moonlight-stream/moonlight-ios/security/advisories/GHSA-g298-gp8q-h6j3
CVE: CVE-2020-12467
Published: 2020-04-29
Description: Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation; https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation
CVE: CVE-2020-12468
Published: 2020-04-29
Description: Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.
CVSS Score: 7.8 (HIGH)
References: https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection; https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection
CVE: CVE-2020-12469
Published: 2020-04-29
Description: admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection; https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20Authenticated%20PHP%20Object%20Injection
CVE: CVE-2020-12470
Published: 2020-04-29
Description: MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.
CVSS Score: 7.2 (HIGH)
CWE: CWE-552
References: https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20Template%20Modification; https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Privilege%20Escalation%20via%20Template%20Modification
CVE: CVE-2020-12471
Published: 2020-04-29
Description: MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Remote%20Code%20Execution%20via%20Insecure%20Deserialization; https://github.com/belong2yourself/vulnerabilities/tree/master/MonoX%20CMS/Remote%20Code%20Execution%20via%20Insecure%20Deserialization
CVE: CVE-2016-11061
Published: 2020-04-29
Description: Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2016/10/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-1-2.pdf
CVE: CVE-2020-11022
Published: 2020-04-29
Description: In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://security.netapp.com/advisory/ntap-20[PII_REDACTED]; https://blog.jquery.com/2020/04/10/jquery-3-5-0-released; https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
CVE: CVE-2020-11942
Published: 2020-04-29
Description: An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0; https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities; https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0
CVE: CVE-2020-11943
Published: 2020-04-29
Description: An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0; https://www.coresecurity.com/advisories/open-audit-multiple-vulnerabilities; https://community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0
CVE: CVE-2020-12477
Published: 2020-04-29
Description: The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/nilsteampassnet/TeamPass/issues/2761; https://github.com/nilsteampassnet/TeamPass/issues/2761
CVE: CVE-2020-12478
Published: 2020-04-29
Description: TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/nilsteampassnet/TeamPass/issues/2764; https://github.com/nilsteampassnet/TeamPass/issues/2764
CVE: CVE-2020-12479
Published: 2020-04-29
Description: TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/nilsteampassnet/TeamPass/issues/2762; https://github.com/nilsteampassnet/TeamPass/issues/2762