deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15596
Published: 2020-08-12
Description: The ALPS ALPINE touchpad driver before 8.2206.1717.634, as used on various Dell, HP, and Lenovo laptops, allows attackers to conduct Path Disclosure attacks via a "fake" DLL file.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://seclists.org/fulldisclosure/2020/Jul/30; https://support.hp.com/document/c06706305; https://seclists.org/fulldisclosure/2020/Jul/30
CVE: CVE-2020-15868
Published: 2020-08-12
Description: Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.
CVSS Score: 7.5 (HIGH)
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]33
CVE: CVE-2020-17362
Published: 2020-08-12
Description: search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/nova-lite/1.3.9/readme.txt?rev=134076; https://themes.trac.wordpress.org/browser/nova-lite/1.3.9/readme.txt?rev=134076
CVE: CVE-2020-17449
Published: 2020-08-12
Description: PHP-Fusion 9.03 allows XSS via the error_log file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/; https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/
CVE: CVE-2020-17450
Published: 2020-08-12
Description: PHP-Fusion 9.03 allows XSS on the preview page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/; https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/
CVE: CVE-2020-7300
Published: 2020-08-12
Description: Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-7301
Published: 2020-08-12
Description: Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2019-14630
Published: 2020-08-13
Description: Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00411.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00411.html
CVE: CVE-2020-12287
Published: 2020-08-13
Description: Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00399.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00399.html
CVE: CVE-2020-16287
Published: 2020-08-13
Description: A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701785; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=450da26a76286a8342ec0864b3d113856709f8f6; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16288
Published: 2020-08-13
Description: A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=aba3375ac24f8e02659d9b1eb[PII_REDACTED]cdb9f; https://bugs.ghostscript.com/show_bug.cgi?id=701791; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16289
Published: 2020-08-13
Description: A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701788; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=d31e25ed5b130499e0d880e4609b1b[PII_REDACTED]; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16290
Published: 2020-08-13
Description: A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=93cb0c0adbd9bcfefd021d59c472388f67d3300d; https://bugs.ghostscript.com/show_bug.cgi?id=701786; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16291
Published: 2020-08-13
Description: A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=ghostpdl.git;h=4f73e8b4d578e69a17f452fa60d2130c5faaefd6; https://bugs.ghostscript.com/show_bug.cgi?id=701787; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=4f73e8b4d578e69a17f452fa60d2130c5faaefd6
CVE: CVE-2020-16292
Published: 2020-08-13
Description: A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701793; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=863ada11f9a942a622a581312e2be022d9e2a6f7; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16293
Published: 2020-08-13
Description: A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.ghostscript.com/show_bug.cgi?id=701795; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7870f4951bcc6a153f317e3439e14d0e929fd231; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16294
Published: 2020-08-13
Description: A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://bugs.ghostscript.com/show_bug.cgi?id=701794; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=89f58f1aa95b3482cadf6977da49457194ee5358; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16295
Published: 2020-08-13
Description: A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=2c2dc335c212750e0fb8ae157063bc06cafa8d3e; https://bugs.ghostscript.com/show_bug.cgi?id=701796; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16296
Published: 2020-08-13
Description: A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701792; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/lips4/gdevlips.c?h=ghostscript-9.18#n163; https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=9f39ed4a92578a020ae10459643e1fe72573d134
CVE: CVE-2020-16297
Published: 2020-08-13
Description: A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701800; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=bf72f1a3dd5392ee8291e3b1518a0c2c5dc6ba39; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/gdevbjca.c?h=ghostpdl-9.18#n659
CVE: CVE-2020-16298
Published: 2020-08-13
Description: A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://bugs.ghostscript.com/show_bug.cgi?id=701799; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=849e74e5ab450dd581942192da7101e0664fa5af; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16299
Published: 2020-08-13
Description: A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugs.ghostscript.com/show_bug.cgi?id=701801; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=19cebe708b9ee3d9e0f8bcdd79dbc6ef9ddc70d2; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=4fcbece46870
CVE: CVE-2020-16300
Published: 2020-08-13
Description: A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701807; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=714e8995cd582d418276915cbbec3c70711fb19e; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16301
Published: 2020-08-13
Description: A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://bugs.ghostscript.com/show_bug.cgi?id=701808; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=f54414c8b15b2c27d1dcadd92cfe84f6d15f18dc; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16302
Published: 2020-08-13
Description: A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://bugs.ghostscript.com/show_bug.cgi?id=701815; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=366ad48d076c1aa4c8f83c65011258a04e348207; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16303
Published: 2020-08-13
Description: A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://bugs.ghostscript.com/show_bug.cgi?id=701818; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=94d8955cb77; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16304
Published: 2020-08-13
Description: A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=027c546e0dd11e0526f1780a7f3c2c66acffe209; https://bugs.ghostscript.com/show_bug.cgi?id=701816; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/base/gxicolor.c?h=ghostscript-9.18#n825
CVE: CVE-2020-16305
Published: 2020-08-13
Description: A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701819; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2793769ff107d8d22dadd30c6e68cd781b569550; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16306
Published: 2020-08-13
Description: A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=aadb53eb834b3def3ef68d78865ff87a68901804; https://bugs.ghostscript.com/show_bug.cgi?id=701821; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16307
Published: 2020-08-13
Description: A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=407c98a38c3a6ac1681144ed45cc2f4fc374c91f; https://bugs.ghostscript.com/show_bug.cgi?id=701822; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16308
Published: 2020-08-13
Description: A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701829; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=af004276fd8f6c305727183c159b83021020f7d6; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16309
Published: 2020-08-13
Description: A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701827; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a6f7464dddc689386668a38b92dfd03cc1b38a10; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-16310
Published: 2020-08-13
Description: A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://bugs.ghostscript.com/show_bug.cgi?id=701828; https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=eaba1d97b62831b42c51840cc8ee2bc4576c942e; https://lists.debian.org/debian-lts-announce/2020/08/msg00032.html
CVE: CVE-2020-17538
Published: 2020-08-13
Description: A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.ghostscript.com/show_bug.cgi?id=701792; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/tree/contrib/lips4/gdevlips.c?h=ghostscript-9.18#n148; https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=9f39ed4a92578a020ae10459643e1fe72573d134
CVE: CVE-2020-7302
Published: 2020-08-13
Description: Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-7303
Published: 2020-08-13
Description: Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-7304
Published: 2020-08-13
Description: Cross site request forgery vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label.
CVSS Score: 7.6 (HIGH)
CWE: CWE-352, CWE-352
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-7305
Published: 2020-08-13
Description: Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-7306
Published: 2020-08-13
Description: Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10326; https://kc.mcafee.com/corporate/index?page=content&id=SB10326
CVE: CVE-2020-8706
Published: 2020-08-13
Description: Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8707
Published: 2020-08-13
Description: Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8708
Published: 2020-08-13
Description: Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8709
Published: 2020-08-13
Description: Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8710
Published: 2020-08-13
Description: Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8711
Published: 2020-08-13
Description: Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8712
Published: 2020-08-13
Description: Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-8713
Published: 2020-08-13
Description: Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00384.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/