deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-4062
Published: 2020-06-22
Description: In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's privileges to assume full control. A malicious actor who knows the IP address and port number of the Postgres database and has access into the Kubernetes cluster where Conjur runs can gain full read & write access to the Postgres database. This enables the attacker to write a policy that allows full access to retrieve any secret. This Helm chart is a method to install Conjur OSS into a Kubernetes environment. Hence, the systems impacted are only Conjur OSS systems that were deployed using this chart. Other deployments including Docker and the CyberArk Dynamic Access Provider (DAP) are not affected. To remediate this vulnerability, clone the latest Helm Chart and follow the upgrade instructions. If you are not able to fully remediate this vulnerability immediately, you can mitigate some of the risk by making sure Conjur OSS is deployed on an isolated Kubernetes cluster or namespace. The term "isolated" refers to: - No other workloads besides Conjur OSS and its backend database are running in that Kubernetes cluster/namespace. - Kubernetes and helm access to the cluster/namespace is limited to security administrators via Role-Based Access Control (RBAC).
CVSS Score: 8.7 (HIGH)
CWE: CWE-284
References: https://github.com/cyberark/conjur-oss-helm-chart/commit/2dab801ed4ab591c626fc6674f306fcf0d004c1e; https://github.com/cyberark/conjur-oss-helm-chart/security/advisories/GHSA-mg2m-623j-wpxw; https://github.com/cyberark/conjur-oss-helm-chart/commit/2dab801ed4ab591c626fc6674f306fcf0d004c1e
CVE: CVE-2020-4066
Published: 2020-06-22
Description: In Limdu before 0.95, the trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. This has been patched in 0.95.
CVSS Score: 3.8 (LOW)
CWE: CWE-78
References: https://github.com/erelsgl/limdu/security/advisories/GHSA-77qv-gh6f-pgh4; https://github.com/erelsgl/limdu/security/advisories/GHSA-77qv-gh6f-pgh4
CVE: CVE-2020-4068
Published: 2020-06-22
Description: In APNSwift 1.0.0, calling APNSwiftSigner.sign(digest:) is likely to result in a heap buffer overflow. This has been fixed in 1.0.1.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-122
References: https://github.com/kylebrowning/APNSwift/commit/97fa7f69dcdd89168fff84e0ba8f999881ee3d3f; https://github.com/kylebrowning/APNSwift/issues/31; https://github.com/kylebrowning/APNSwift/pull/32
CVE: CVE-2020-4070
Published: 2020-06-22
Description: In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/w3c/css-validator/commit/e5c09a9119167d3064db786d5f00d730b584a53b; https://github.com/w3c/css-validator/security/advisories/GHSA-wf36-7w73-rh8c; https://github.com/w3c/css-validator/commit/e5c09a9119167d3064db786d5f00d730b584a53b
CVE: CVE-2020-6644
Published: 2020-06-22
Description: An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID via other, hypothetical attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-613
References: https://fortiguard.com/advisory/FG-IR-20-006; https://fortiguard.com/advisory/FG-IR-20-006
CVE: CVE-2020-9288
Published: 2020-06-22
Description: An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the ESS profile or the Radius Profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-016; https://fortiguard.com/advisory/FG-IR-20-016
CVE: CVE-2019-14894
Published: 2020-06-22
Description: A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-78, CWE-78
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14894; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14894
CVE: CVE-2020-10736
Published: 2020-06-22
Description: An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks.
CVSS Score: 8.0 (HIGH)
CWE: CWE-285
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10736; https://ceph.io/releases/v15-2-2-octopus-released/; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10736
CVE: CVE-2020-10740
Published: 2020-06-22
Description: A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10740; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10740
CVE: CVE-2020-11519
Published: 2020-06-22
Description: The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle. Exploiting this vulnerability results in privileged code execution.
CVSS Score: 7.8 (HIGH)
References: https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1; https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/; https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1
CVE: CVE-2020-11520
Published: 2020-06-22
Description: The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1; https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2/; https://www.winmagic.com/support/release-notes/securedoc-v8-5-sr2-hf1
CVE: CVE-2020-13158
Published: 2020-06-22
Description: Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/InfoSec4Fun/CVE-2020-13158; https://github.com/InfoSec4Fun/CVE-2020-13158
CVE: CVE-2020-13159
Published: 2020-06-22
Description: Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/InfoSec4Fun/CVE-2020-13159; https://sourceforge.net/projects/artica-squid/files/; https://github.com/InfoSec4Fun/CVE-2020-13159
CVE: CVE-2020-13426
Published: 2020-06-22
Description: The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://0day.today/exploit/34496; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://infayer.com/archivos/448
CVE: CVE-2020-13427
Published: 2020-06-22
Description: Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/VictorAlagwu/CMSsite/commits/master; https://www.exploit-db.com/exploits/48511; https://github.com/VictorAlagwu/CMSsite/commits/master
CVE: CVE-2020-13480
Published: 2020-06-22
Description: Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://cvewalkthrough.com/cve-2020-13480html-injection; https://tejaspingulkar.blogspot.com/2020/06/cve-2020-13480-verint-html-injection.html; https://www.youtube.com/watch?v=11ghigOu-K0
CVE: CVE-2020-14049
Published: 2020-06-22
Description: Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication request, and either relay the request or capture the hash for offline password cracking. NOTE: this issue exists because of an incomplete fix for CVE-2019-12569.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://jeffs.sh/CVEs/CVE-2020-14049.txt; https://www.viber.com/en/security/; https://jeffs.sh/CVEs/CVE-2020-14049.txt
CVE: CVE-2020-14972
Published: 2020-06-22
Description: Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution (RCE) via the user_email, user_pass, and id parameters on the admin login-portal and the edit-lessons webpages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48439; https://www.sourcecodester.com; https://www.exploit-db.com/exploits/48439
CVE: CVE-2020-14973
Published: 2020-06-22
Description: The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/157608/WebTareas-2.0p8-Cross-Site-Scripting.html; https://sourceforge.net/p/webtareas/blog/; https://packetstormsecurity.com/files/157608/WebTareas-2.0p8-Cross-Site-Scripting.html
CVE: CVE-2020-14980
Published: 2020-06-22
Description: The Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate Validation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html; https://www.info-sec.ca/advisories/Sophos-Secure-Email.html; http://packetstormsecurity.com/files/158322/Sophos-Secure-Email-Android-Application-3.9.4-Man-In-The-Middle.html
CVE: CVE-2020-14981
Published: 2020-06-22
Description: The ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate Validation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/158323/VIPRE-Password-Vault-1.100.1090-Man-In-The-Middle.html; https://www.info-sec.ca/advisories/Vipre-Password-Vault.html; http://packetstormsecurity.com/files/158323/VIPRE-Password-Vault-1.100.1090-Man-In-The-Middle.html
CVE: CVE-2019-3865
Published: 2020-06-22
Description: A vulnerability was found in quay-2, where a stored XSS vulnerability has been found in the super user function of quay. Attackers are able to use the name field of service key to inject scripts and make it run when admin users try to change the name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3865; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3865
CVE: CVE-2020-11989
Published: 2020-06-22
Description: Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.apache.org/thread.html/r2d2612c034ab21a3a19d2132d47d3e4aa70105008dd58af62b653040%40%3Ccommits.shiro.apache.org%3E; https://lists.apache.org/thread.html/r408fe60bc8fdfd7c74135249d646d7abadb807ebf90f6fd2b014df21%40%3Cdev.geode.apache.org%3E; https://lists.apache.org/thread.html/r72815a124a119c450b86189767d06848e0d380b1795c6c511d54a675%40%3Cdev.shiro.apache.org%3E
CVE: CVE-2020-1727
Published: 2020-06-22
Description: A vulnerability was found in Keycloak before 9.0.2, where every Authorization URL that points to an IDP server lacks proper input validation as it allows a wide range of characters. This flaw allows a malicious to craft deep links that introduce further attack scenarios on affected clients.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1727; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1727
CVE: CVE-2020-12053
Published: 2020-06-22
Description: In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=54; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=54
CVE: CVE-2020-14983
Published: 2020-06-22
Description: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00007.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00012.html
CVE: CVE-2020-14990
Published: 2020-06-22
Description: IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html; https://github.com/Daniel-itsec/AdvancedSystemCare; https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html
CVE: CVE-2020-11095
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/733ee3208306b1ea32697b356c0215180fc3f049
CVE: CVE-2020-11096
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/b8beb[PII_REDACTED]2f92770c90c372139d78c16c0
CVE: CVE-2020-11097
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/58a3122250d54de3a944c487776bcd4d1da4721e
CVE: CVE-2020-11098
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/c0fd449ec0870b050d350d6d844b1ea6dad4bc7d
CVE: CVE-2020-11099
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/6ade7b4cbfd71c54b3d724e8f2d6ac76a58e879a
CVE: CVE-2020-14943
Published: 2020-06-22
Description: The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158217/BSA-Radar-1.6.7234.24750-Cross-Site-Scripting.html; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14943%20-%20Stored%20XSS.md
CVE: CVE-2020-14944
Published: 2020-06-22
Description: Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: http://packetstormsecurity.com/files/158372/BSA-Radar-1.6.7234.24750-Cross-Site-Request-Forgery.html; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14944%20-%20Access%20Control%20Vulnerabilities.md
CVE: CVE-2020-14945
Published: 2020-06-22
Description: A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data.
CVSS Score: 8.8 (HIGH)
References: https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14945%20-%20Privilege%20Escalation.md; https://www.exploit-db.com/exploits/48649
CVE: CVE-2020-14946
Published: 2020-06-22
Description: downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/158420/BSA-Radar-1.6.7234.24750-Local-File-Inclusion.html; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities; https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14946%20-%20Local%20File%20Inclusion.md
CVE: CVE-2020-4030
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-125, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/05cd9ea2290d23931f615c1b004d4b2e69074e27
CVE: CVE-2020-4031
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.
CVSS Score: 3.5 (LOW)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/6d86e20e1e7caaab4f0c7f89e36d32914dbccc52
CVE: CVE-2020-4032
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.
CVSS Score: 3.1 (LOW)
CWE: CWE-681, CWE-681
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/e7bffa64ef5ed70bac94f823e2b95262642f5296
CVE: CVE-2020-4033
Published: 2020-06-22
Description: In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.
CVSS Score: 3.1 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html; http://www.freerdp.com/2020/06/22/2_1_2-released; https://github.com/FreeRDP/FreeRDP/commit/0a98c450c58ec150e44781c89aa6f8e7e0f571f5
CVE: CVE-2019-20409
Published: 2020-06-23
Description: The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://jira.atlassian.com/browse/JRASERVER-70944; https://jira.atlassian.com/browse/JRASERVER-70944
CVE: CVE-2020-12782
Published: 2020-06-23
Description: Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.twcert.org.tw/tw/cp-132-3688-271ea-1.html; https://www.twcert.org.tw/tw/cp-132-3688-271ea-1.html
CVE: CVE-2020-5594
Published: 2020-06-23
Description: Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: https://jvn.jp/en/vu/JVNVU91424496/index.html; https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2020-003.pdf; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-003_en.pdf
CVE: CVE-2020-14938
Published: 2020-06-23
Description: An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugs.freedroid.org/b/issue951; https://logicaltrust.net/blog/2020/02/freedroid.html; https://bugs.freedroid.org/b/issue951
CVE: CVE-2020-14939
Published: 2020-06-23
Description: An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://bugs.freedroid.org/b/issue953; https://logicaltrust.net/blog/2020/02/freedroid.html; https://bugs.freedroid.org/b/issue953