deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-3551
Published: 2020-02-21
Description: Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://advisories.mageia.org/MGASA-2013-0196.html; https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-3551; http://advisories.mageia.org/MGASA-2013-0196.html
CVE: CVE-2013-4088
Published: 2020-02-21
Description: Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://advisories.mageia.org/MGASA-2013-0196.html; http://archives.neohapsis.com/archives/bugtraq/2013-07/0015.html; https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4088
CVE: CVE-2019-19865
Published: 2020-02-21
Description: Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://networks.unify.com/security/advisories/OBSO-2002-01.pdf; https://unify.com/en/support/security-advisories; https://networks.unify.com/security/advisories/OBSO-2002-01.pdf
CVE: CVE-2019-19866
Published: 2020-02-21
Description: Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with their numbers and access PINs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://networks.unify.com/security/advisories/OBSO-2002-01.pdf; https://unify.com/en/support/security-advisories; https://networks.unify.com/security/advisories/OBSO-2002-01.pdf
CVE: CVE-2020-6841
Published: 2020-02-21
Description: D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://gist.github.com/jezzaaa/38c752d0a129576b2cc523ce6325050f; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10152; https://gist.github.com/jezzaaa/38c752d0a129576b2cc523ce6325050f
CVE: CVE-2020-6842
Published: 2020-02-21
Description: D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://gist.github.com/jezzaaa/9d704400a7e23f988dfb4f73658678b8; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10152; https://gist.github.com/jezzaaa/9d704400a7e23f988dfb4f73658678b8
CVE: CVE-2012-6277
Published: 2020-02-21
Description: Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, related to "a number of underlying issues" in which "some of these cases demonstrated memory corruption with attacker-controlled input and could be exploited to run arbitrary code."
CVSS Score: 7.8 (HIGH)
References: https://support.symantec.com/us/en/article.symsa1262.html; https://tools.cisco.com/security/center/viewAlert.x?alertId=27482; https://vulmon.com/vulnerabilitydetails?qid=CVE-2012-6277
CVE: CVE-2012-0828
Published: 2020-02-21
Description: Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2012/02/01/9; https://access.redhat.com/security/cve/cve-2012-0828; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0828
CVE: CVE-2012-0844
Published: 2020-02-21
Description: Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2012/02/11/3; https://access.redhat.com/security/cve/cve-2012-0844; https://security-tracker.debian.org/tracker/CVE-2012-0844
CVE: CVE-2013-3587
Published: 2020-02-21
Description: The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://breachattack.com/; http://github.com/meldium/breach-mitigation-rails; http://security.stackexchange.com/questions/20406/is-http-compression-safe#20407
CVE: CVE-2012-1093
Published: 2020-02-21
Description: The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://vladz.devzero.fr/012_x11-common-vuln.html; http://www.openwall.com/lists/oss-security/2012/02/29/1; http://www.openwall.com/lists/oss-security/2012/03/01/1
CVE: CVE-2019-18846
Published: 2020-02-21
Description: OX App Suite through 7.10.2 allows SSRF.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html; http://packetstormsecurity.com/files/158070/OX-App-Suite-OX-Documents-7.10.3-XSS-SSRF-Improper-Validation.html; http://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.html
CVE: CVE-2020-7907
Published: 2020-02-21
Description: In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-9327
Published: 2020-02-21
Description: In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://security.gentoo.org/glsa/202003-16; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-9329
Published: 2020-02-21
Description: Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://github.com/gogs/gogs/issues/5926; https://github.com/gogs/gogs/issues/5926
CVE: CVE-2020-9330
Published: 2020-02-21
Description: Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices (e.g., by using default credentials) can change the LDAP connection IP address to a system owned by the actor without knowledge of the LDAP bind credentials. After changing the LDAP connection IP address, subsequent authentication attempts will result in the printer sending plaintext LDAP (Active Directory) credentials to the actor. Although the credentials may belong to a non-privileged user, organizations frequently use privileged service accounts to bind to Active Directory. The attacker gains a foothold on the Active Directory domain at a minimum, and may use the credentials to take over control of the Active Directory domain. This affects 3655*, 3655i*, 58XX*, 58XXi*, 59XX*, 59XXi*, 6655**, 6655i**, 72XX*, 72XXi*, 78XX**, 78XXi**, 7970**, 7970i**, EC7836**, and EC7856** devices.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://securitydocs.business.xerox.com/wp-content/uploads/2020/02/cert_Security_Mini_Bulletin_XRX20D_for_ConnectKey.pdf; https://www.securicon.com/hackers-can-gain-active-directory-privileges-through-new-vulnerability-in-xerox-printers/; https://securitydocs.business.xerox.com/wp-content/uploads/2020/02/cert_Security_Mini_Bulletin_XRX20D_for_ConnectKey.pdf
CVE: CVE-2020-8860
Published: 2020-02-22
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the baseband processor. Was ZDI-CAN-9658.
CVSS Score: 8.0 (HIGH)
CWE: CWE-121, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://www.zerodayinitiative.com/advisories/ZDI-20-255/; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2020-8861
Published: 2020-02-22
Description: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of cookies. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9554.
CVSS Score: 8.8 (HIGH)
CWE: CWE-303, CWE-287
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10155; https://www.zerodayinitiative.com/advisories/ZDI-20-265/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10155
CVE: CVE-2020-8862
Published: 2020-02-22
Description: This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper password checking. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-10082.
CVSS Score: 8.8 (HIGH)
CWE: CWE-697, CWE-287
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10154; https://www.zerodayinitiative.com/advisories/ZDI-20-266/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10154
CVE: CVE-2020-8813
Published: 2020-02-22
Description: graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00048.html; http://packetstormsecurity.com/files/156537/Cacti-1.2.8-Unauthenticated-Remote-Code-Execution.html
CVE: CVE-2020-9039
Published: 2020-02-22
Description: Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /settings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://www.couchbase.com/resources/security#SecurityAlerts; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2020-9336
Published: 2020-02-22
Description: fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xEmma/CVEs/blob/master/CVEs/eLection-2.0-XSS.md; https://github.com/0xEmma/CVEs/blob/master/CVEs/eLection-2.0-XSS.md
CVE: CVE-2020-9338
Published: 2020-02-22
Description: SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xEmma/CVEs/blob/master/CVEs/2020-02-14-SoPlanning-Admin-XSS.md; https://github.com/0xEmma/CVEs/blob/master/CVEs/2020-02-14-SoPlanning-Admin-XSS.md
CVE: CVE-2020-9339
Published: 2020-02-22
Description: SOPlanning 1.45 allows XSS via the Name or Comment to status.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xEmma/CVEs/blob/master/CVEs/2020-02-14-SoPlanning-Status-XSS.md; https://github.com/0xEmma/CVEs/blob/master/CVEs/2020-02-14-SoPlanning-Status-XSS.md
CVE: CVE-2020-9340
Published: 2020-02-22
Description: fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/J3rryBl4nks/eLection-TriPath-/blob/master/SQLiIntoRCE.md; https://github.com/J3rryBl4nks/eLection-TriPath-/blob/master/SQLiIntoRCE.md
CVE: CVE-2020-9341
Published: 2020-02-22
Description: CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/J3rryBl4nks/CandidATS/blob/master/AddAdminUserCSRF.md; https://github.com/J3rryBl4nks/CandidATS/blob/master/AddAdminUserCSRF.md
CVE: CVE-2020-9342
Published: 2020-02-22
Description: The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-436
References: http://packetstormsecurity.com/files/156506/F-SECURE-Generic-Malformed-Container-Bypass.html; http://seclists.org/fulldisclosure/2020/Feb/33; https://blog.zoller.lu/p/tzo-16-2020-f-secure-generic-malformed.html
CVE: CVE-2020-9350
Published: 2020-02-23
Description: Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://support.sas.com/kb/65/358.html; http://support.sas.com/kb/65/358.html
CVE: CVE-2020-9351
Published: 2020-02-23
Description: An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the _transaction parameter, the server replies with a verbose error showing where the application resides (the absolute path). NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://seclists.org/fulldisclosure/2020/Feb/18; https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment; https://seclists.org/fulldisclosure/2020/Feb/18
CVE: CVE-2020-9352
Published: 2020-02-23
Description: An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://blog.certimetergroup.com/it/articolo/security/smartclient-v12-xml-external-entity--cve-2020-9352; https://seclists.org/fulldisclosure/2020/Feb/18; https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment
CVE: CVE-2020-9353
Published: 2020-02-23
Description: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL is affected by unauthenticated Local File Inclusion via directory-traversal sequences in the elem XML element in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://seclists.org/fulldisclosure/2020/Feb/18; https://www-demos.smartclient.com/smartclient-12.0/isomorphic/system/reference/?id=group..toolsDeployment; https://seclists.org/fulldisclosure/2020/Feb/18
CVE: CVE-2020-9354
Published: 2020-02-23
Description: An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://seclists.org/fulldisclosure/2020/Feb/18; https://seclists.org/fulldisclosure/2020/Feb/18
CVE: CVE-2020-9355
Published: 2020-02-23
Description: danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
CVSS Score: 9.8 (CRITICAL)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1803499; https://github.com/danfruehauf/NetworkManager-ssh/pull/98; https://github.com/danfruehauf/NetworkManager-ssh/releases/tag/1.2.11
CVE: CVE-2019-3670
Published: 2020-02-24
Description: Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103008; https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103008
CVE: CVE-2019-15299
Published: 2020-02-24
Description: An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html; https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html; https://github.com/centreon/centreon/pull/8072
CVE: CVE-2019-20044
Published: 2020-02-24
Description: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().
CVSS Score: 7.8 (HIGH)
CWE: CWE-273
References: http://seclists.org/fulldisclosure/2020/May/49; http://seclists.org/fulldisclosure/2020/May/53; http://seclists.org/fulldisclosure/2020/May/55
CVE: CVE-2015-9542
Published: 2020-02-24
Description: add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542; https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0; https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html
CVE: CVE-2019-18182
Published: 2020-02-24
Description: pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable a non-default XferCommand and retrieve an attacker-controlled crafted database and package.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://git.archlinux.org/pacman.git/commit/?id=808a4f15ce82d2ed7eeb06de73d0f313620558ee; https://git.archlinux.org/pacman.git/tree/src/pacman/conf.c?h=v5.1.3#n263; https://github.com/alpinelinux/alpine-secdb/blob/master/v3.11/community.yaml
CVE: CVE-2019-18183
Published: 2020-02-24
Description: pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable the non-default delta feature and retrieve an attacker-controlled crafted database and delta file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://git.archlinux.org/pacman.git/commit/?id=c0e9be7973be6c81b22fde91516fb8991e7bb07b; https://git.archlinux.org/pacman.git/tree/lib/libalpm/sync.c?h=v5.1.3#n767; https://github.com/alpinelinux/alpine-secdb/blob/master/v3.11/community.yaml
CVE: CVE-2019-20480
Published: 2020-02-24
Description: In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the "admin panel" because there is no CSRF protection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cert.vde.com/en-us/advisories/vde-2019-010; https://cert.vde.com/en-us/advisories/vde-2019-010
CVE: CVE-2019-20481
Published: 2020-02-24
Description: In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://cert.vde.com/en-us/advisories/vde-2019-010; https://cert.vde.com/en-us/advisories/vde-2019-010