deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-4691
Published: 2019-12-27
Description: Sencha Labs Connect has XSS with connect.methodOverride()
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://github.com/senchalabs/connect/issues/831; http://github.com/senchalabs/connect/issues/831
CVE: CVE-2013-4693
Published: 2019-12-27
Description: WordPress Xorbin Digital Flash Clock 1.0 has XSS
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/122223/Xorbin-Digital-Flash-Clock-1.0-For-WordPress-XSS.html; http://packetstormsecurity.com/files/122223/Xorbin-Digital-Flash-Clock-1.0-For-WordPress-XSS.html
CVE: CVE-2013-4695
Published: 2019-12-27
Description: Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: http://www.exploit-db.com/exploits/26557; http://www.securitytracker.com/id/1030107; http://www.exploit-db.com/exploits/26557
CVE: CVE-2019-16896
Published: 2019-12-27
Description: In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0117/README.md; https://support.k7computing.com/index.php?/selfhelp/categories/Vulnerability%20Report%20and%20Advisory/29; https://github.com/NtRaiseHardError/Antimalware-Research/blob/master/K7%20Security/Local%20Privilege%20Escalation/v16.0.0117/README.md
CVE: CVE-2013-4621
Published: 2019-12-27
Description: Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/60761; https://exchange.xforce.ibmcloud.com/vulnerabilities/85252; http://www.securityfocus.com/bid/60761
CVE: CVE-2013-4692
Published: 2019-12-27
Description: Xorbin Analog Flash Clock 1.0 extension for Joomia has XSS
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/122224/Xorbin-Analog-Flash-Clock-1.0-For-Joomla-XSS.html; http://www.securityfocus.com/bid/60860; https://exchange.xforce.ibmcloud.com/vulnerabilities/85418
CVE: CVE-2013-4743
Published: 2019-12-27
Description: Static HTTP Server 1.0 has a Local Overflow
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.exploit-db.com/exploits/26520; https://exchange.xforce.ibmcloud.com/vulnerabilities/85417; http://www.exploit-db.com/exploits/26520
CVE: CVE-2013-4763
Published: 2019-12-27
Description: Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-276
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0108.html; https://www.securityfocus.com/bid/61280; http://archives.neohapsis.com/archives/bugtraq/2013-07/0108.html
CVE: CVE-2013-4764
Published: 2019-12-27
Description: Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: http://shouji.360.cn/securityReportlist/CVE-2013-4764.html; https://seclists.org/bugtraq/2013/Jul/107; http://shouji.360.cn/securityReportlist/CVE-2013-4764.html
CVE: CVE-2013-4796
Published: 2019-12-27
Description: ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard/; https://exchange.xforce.ibmcloud.com/vulnerabilities/86411; http://www.tripwire.com/state-of-security/vulnerability-management/vulnerabilities-its-time-to-review-your-reviewboard/
CVE: CVE-2013-4859
Published: 2019-12-27
Description: INSTEON Hub 2242-222 lacks Web and API authentication
CVSS Score: 8.1 (HIGH)
CWE: CWE-276
References: http://www.exploit-db.com/exploits/27284; https://exchange.xforce.ibmcloud.com/vulnerabilities/86196; http://www.exploit-db.com/exploits/27284
CVE: CVE-2013-4867
Published: 2019-12-27
Description: Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269
References: http://www.exploit-db.com/exploits/27285; https://exchange.xforce.ibmcloud.com/vulnerabilities/86222; http://www.exploit-db.com/exploits/27285
CVE: CVE-2013-4868
Published: 2019-12-27
Description: Karotz API 12.07.19.00: Session Token Information Disclosure
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.exploit-db.com/exploits/27285; http://www.securityfocus.com/bid/61584; https://exchange.xforce.ibmcloud.com/vulnerabilities/86221
CVE: CVE-2013-4975
Published: 2019-12-27
Description: Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities; http://www.securityfocus.com/bid/61643; https://exchange.xforce.ibmcloud.com/vulnerabilities/86291
CVE: CVE-2013-4976
Published: 2019-12-27
Description: Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.coresecurity.com/advisories/hikvision-ip-cameras-multiple-vulnerabilities; http://www.securityfocus.com/bid/61646; https://exchange.xforce.ibmcloud.com/vulnerabilities/86293
CVE: CVE-2013-4982
Published: 2019-12-27
Description: AVTECH AVN801 DVR has a security bypass via the administration login captcha
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2013/Aug/284; http://www.securityfocus.com/bid/62035; https://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities
CVE: CVE-2013-4985
Published: 2019-12-27
Description: Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://www.coresecurity.com/advisories/vivotek-ip-cameras-rtsp-authentication-bypass; http://www.exploit-db.com/exploits/29516; http://www.securityfocus.com/bid/63541
CVE: CVE-2014-4519
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in the Conversador plugin 2.61 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the 'page' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-conversador-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-conversador-a3-cross-site-scripting-xss
CVE: CVE-2014-4592
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in rss.class/scripts/magpie_debug.php in the WP-Planet plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-wp-planet-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-wp-planet-a3-cross-site-scripting-xss
CVE: CVE-2007-0158
Published: 2019-12-27
Description: thttpd 2007 has buffer underflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://taviso.decsystem.org/research.t2t; http://taviso.decsystem.org/research.t2t
CVE: CVE-2013-5027
Published: 2019-12-27
Description: Collabtive 1.0 has incorrect access control
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://www.immuniweb.com/advisory/HTB23169; https://www.immuniweb.com/advisory/HTB23169
CVE: CVE-2014-4539
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-movies-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-movies-a3-cross-site-scripting-xss
CVE: CVE-2014-4544
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in the Podcast Channels plugin 0.20 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the Filename parameter to getid3/demos/demo.write.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-podcast-channels-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-podcast-channels-a3-cross-site-scripting-xss
CVE: CVE-2014-4548
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-ruven-toolkit-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-ruven-toolkit-a3-cross-site-scripting-xss
CVE: CVE-2014-4558
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-woocommerce-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-woocommerce-a3-cross-site-scripting-xss
CVE: CVE-2014-4567
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-video-comments-webcam-recorder-a3-cross-site-scripting-xss; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=839986%40video-comments-webcam-recorder&old=686438%40video-comments-webcam-recorder; http://codevigilant.com/disclosure/wp-plugin-video-comments-webcam-recorder-a3-cross-site-scripting-xss
CVE: CVE-2019-20047
Published: 2019-12-27
Description: An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded in a reversible format. Sessions are stored in /sessions/sess_<sessionid>.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://git.lsd.cat/g/omnivista-rce; https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html; https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE: CVE-2019-20048
Published: 2019-12-27
Description: An issue was discovered on Alcatel-Lucent OmniVista 8770 devices before 4.1.2. An authenticated remote attacker, with elevated privileges in the Web Directory component on port 389, may upload a PHP file to achieve Remote Code Execution as SYSTEM.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://git.lsd.cat/g/omnivista-rce; https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html; https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE: CVE-2019-20049
Published: 2019-12-27
Description: An issue was discovered on Alcatel-Lucent OmniVista 4760 devices. A remote unauthenticated attacker can chain a directory traversal (which helps to bypass authentication) with an insecure file upload to achieve Remote Code Execution as SYSTEM. The directory traversal is in the __construct() whereas the insecure file upload is in SetSkinImages().
CVSS Score: 9.8 (CRITICAL)
References: https://git.lsd.cat/g/omnivista-rce; https://packetstormsecurity.com/files/155595/Alcatel-Lucent-Omnivista-8770-Remote-Code-Execution.html; https://www.al-enterprise.com/en/-/media/assets/internet/documents/sa-c0065-ov8770-rce-vulnerability-en.pdf
CVE: CVE-2014-4535
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-import-legacy-media-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-import-legacy-media-a3-cross-site-scripting-xss
CVE: CVE-2014-4536
Published: 2019-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) go, (2) contactId, or (3) campaignId parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-infusionsoft-a3-cross-site-scripting-xss; http://wordpress.org/plugins/infusionsoft/changelog; http://codevigilant.com/disclosure/wp-plugin-infusionsoft-a3-cross-site-scripting-xss
CVE: CVE-2014-4550
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-shortcode-ninja-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-shortcode-ninja-a3-cross-site-scripting-xss
CVE: CVE-2012-4980
Published: 2019-12-27
Description: Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assisted attackers to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/55644; https://exchange.xforce.ibmcloud.com/vulnerabilities/78801; http://www.securityfocus.com/bid/55644
CVE: CVE-2014-3136
Published: 2019-12-27
Description: Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote attackers to hijack the authentication of administrators for requests that change the admin password via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/95022; https://packetstormsecurity.com/files/cve/CVE-2014-3136; https://www.securityfocus.com/bid/68967
CVE: CVE-2014-5289
Published: 2019-12-27
Description: Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/127912/Senkas-Kolibri-WebServer-2.0-Buffer-Overflow.html; http://www.securityfocus.com/bid/69263; https://exchange.xforce.ibmcloud.com/vulnerabilities/95350
CVE: CVE-2014-6420
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in Livefyre LiveComments 3.0 allows remote attackers to inject arbitrary web script or HTML via the name of an uploaded picture.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/128293/Livefyre-LiveComments-3.0-Cross-Site-Scripting.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/96037; http://packetstormsecurity.com/files/128293/Livefyre-LiveComments-3.0-Cross-Site-Scripting.html
CVE: CVE-2019-20051
Published: 2019-12-27
Description: A floating-point exception was discovered in PackLinuxElf::elf_hash in p_lx_elf.cpp in UPX 3.95. The vulnerability causes an application crash, which leads to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-682
References: https://github.com/upx/upx/issues/313; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D7XU42G6MUQQXHWRP7DCF2JSIBOJ5GOO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUTVSTXAFTD552NO2K2RIF6MDQEHP3BE/
CVE: CVE-2019-20052
Published: 2019-12-27
Description: A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/tbeu/matio/issues/131; https://github.com/tbeu/matio/issues/131
CVE: CVE-2019-20053
Published: 2019-12-27
Description: An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html; https://github.com/upx/upx/issues/314
CVE: CVE-2019-20054
Published: 2019-12-28
Description: In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
CVE: CVE-2019-20055
Published: 2019-12-29
Description: LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://code610.blogspot.com/2019/12/testing-ssrf-in-liquifireos.html; https://code610.blogspot.com/2019/12/testing-ssrf-in-liquifireos.html
CVE: CVE-2019-20056
Published: 2019-12-29
Description: stb_image.h (aka the stb image loader) 2.23, as used in libsixel and other products, has an assertion failure in stbi__shiftsigned.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/saitoha/libsixel/issues/126; https://github.com/saitoha/libsixel/issues/126
CVE: CVE-2019-20057
Published: 2019-12-29
Description: com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled computer, enabling MITM attacks.
CVSS Score: 3.7 (LOW)
CWE: CWE-345
References: https://github.com/ProxymanApp/Proxyman/issues/364; https://github.com/ProxymanApp/Proxyman/issues/364
CVE: CVE-2019-20058
Published: 2019-12-29
Description: Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bolt/bolt/issues/7830; https://github.com/bolt/bolt/issues/7830
CVE: CVE-2019-20063
Published: 2019-12-29
Description: hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
CVSS Score: 8.8 (HIGH)
CWE: CWE-665
References: https://github.com/hoene/libmysofa/compare/v0.7...v0.8; https://github.com/hoene/libmysofa/issues/67; https://github.com/hoene/libmysofa/compare/v0.7...v0.8
CVE: CVE-2019-20070
Published: 2019-12-30
Description: On Netis DL4323 devices, XSS exists via the urlFQDN parameter to form2url.cgi (aka the Keyword field of the URL Blocking Configuration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/open?id=1EtpCu6eZ0Hf2J70zg59wIlhUE8_bx1HE; https://drive.google.com/open?id=1vIHv-UY0QLdnxDi-RW1hQHrdcuho0HRf; https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-netis-dl4323.html
CVE: CVE-2019-20071
Published: 2019-12-30
Description: On Netis DL4323 devices, CSRF exists via form2logaction.cgi to delete all logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://drive.google.com/open?id=1XtSsH-1ApxRS7VExubz8zBEyENVQGhUc; https://drive.google.com/open?id=1p4HJ5C20TqY0rVNffdD5Zd7S_bGvDhnk; https://fatihhcelik.blogspot.com/2019/12/csrf-vulnerability-on-clean-log-netis.html
CVE: CVE-2019-20072
Published: 2019-12-30
Description: On Netis DL4323 devices, XSS exists via the form2Ddns.cgi hostname parameter (Dynamic DNS Configuration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/open?id=1IGRYVci8fxic0jJJb-pAfAK1kJ4V2yGM; https://drive.google.com/open?id=1VPEX136-JaVDeY0JgQTqRNdMTPOhfEN7; https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-hostname-input.html
CVE: CVE-2019-20073
Published: 2019-12-30
Description: On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter (User Account Configuration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/open?id=1CxLrSKAczEZpm_7FERIrCGGJAs2mp6Go; https://drive.google.com/open?id=1puObYuPWktesaVW1SO8uvSr1g4SnAtAw; https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-netisdl4323.html
CVE: CVE-2019-20074
Published: 2019-12-30
Description: On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se; https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html; https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se
CVE: CVE-2019-20075
Published: 2019-12-30
Description: On Netis DL4323 devices, pingrtt_v6.html has XSS (Ping6 Diagnostic).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/open?id=1795_joGaL3QXMFeJoJPiNgB_d913XePx; https://drive.google.com/open?id=1SqUHaTn_dVsGv-YtvAqPOXG1Z9APk0eI; https://fatihhcelik.blogspot.com/2019/12/xss-vulnerability-on-ping6.html
CVE: CVE-2019-20076
Published: 2019-12-30
Description: On Netis DL4323 devices, XSS exists via the form2Ddns.cgi username parameter (DynDns settings of the Dynamic DNS Configuration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/open?id=1HrYqVKlSxhQqB5tNhhLIgpyfi0Y2ZL80; https://drive.google.com/open?id=1i5gIrJRy5L7lTIsYZp9GsvR8ZGCWtnMj; https://fatihhcelik.blogspot.com/2019/12/stored-xss-on-username-input-2-netis.html
CVE: CVE-2019-20079
Published: 2019-12-30
Description: The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421; https://github.com/vim/vim/compare/v8.1.2135...v8.1.2136; https://packetstormsecurity.com/files/154898
CVE: CVE-2019-20085
Published: 2019-12-30
Description: TVT NVMS-1000 devices allow GET /.. Directory Traversal
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html; https://www.exploit-db.com/exploits/47774; http://packetstormsecurity.com/files/157196/TVT-NVMS-1000-Directory-Traversal.html
CVE: CVE-2019-20086
Published: 2019-12-30
Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_Next in GPMF_parser.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/74; https://github.com/gopro/gpmf-parser/issues/74
CVE: CVE-2019-20087
Published: 2019-12-30
Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMF_seekToSamples in GPMF-parse.c for the "matching tags" feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/76; https://github.com/gopro/gpmf-parser/issues/76
CVE: CVE-2019-20088
Published: 2019-12-30
Description: GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GetPayload in GPMF_mp4reader.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/77; https://github.com/gopro/gpmf-parser/issues/77