deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25044
Published: 2020-09-02
Description: Kaspersky Virus Removal Tool (KVRT) prior to 15.0.23.0 was vulnerable to arbitrary file corruption that could provide an attacker with the opportunity to eliminate content of any file in the system.
CVSS Score: 7.1 (HIGH)
References: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720; https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE: CVE-2020-25045
Published: 2020-09-02
Description: Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720; https://support.kaspersky.com/general/vulnerability.aspx?el=12430#290720
CVE: CVE-2020-5778
Published: 2020-09-02
Description: A flaw exists in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate ttmd.exe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-119
References: https://www.tenable.com/security/research/tra-2020-52; https://www.tenable.com/security/research/tra-2020-52
CVE: CVE-2020-5779
Published: 2020-09-02
Description: A flaw in Trading Technologies Messaging 7.1.28.3 (ttmd.exe) relates to invalid parameter handling when calling strcpy_s() with an invalid parameter (i.e., a long src string parameter) as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe terminates as a result.
CVSS Score: 7.5 (HIGH)
References: https://www.tenable.com/security/research/tra-2020-52; https://www.tenable.com/security/research/tra-2020-52
CVE: CVE-2020-7830
Published: 2020-09-02
Description: RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download paths. This issue affects: RAONWIZ RAON KUpload 2018.0.2.50 versions and earlier.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35582; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35582
CVE: CVE-2020-8576
Published: 2020-09-02
Description: Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure of sensitive information.
CVSS Score: 5.4 (MEDIUM)
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2020-5369
Published: 2020-09-02
Description: Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.dell.com/support/security/en-us/details/546160/DSA-2020-142-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-OneFS-Security-Update-for-SyncIQ-Privi; https://www.dell.com/support/security/en-us/details/546160/DSA-2020-142-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-OneFS-Security-Update-for-SyncIQ-Privi
CVE: CVE-2020-5376
Published: 2020-09-02
Description: Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.dell.com/support/article/SLN322616; https://www.dell.com/support/article/SLN322616
CVE: CVE-2020-5378
Published: 2020-09-02
Description: Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.dell.com/support/article/SLN322616; https://www.dell.com/support/article/SLN322616
CVE: CVE-2020-5379
Published: 2020-09-02
Description: Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://www.dell.com/support/article/SLN322616; https://www.dell.com/support/article/SLN322616
CVE: CVE-2020-5386
Published: 2020-09-02
Description: Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668, CWE-668
References: https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability; https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability
CVE: CVE-2020-5418
Published: 2020-09-03
Description: Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.cloudfoundry.org/blog/cve-2020-5418; https://www.cloudfoundry.org/blog/cve-2020-5418
CVE: CVE-2020-5420
Published: 2020-09-03
Description: Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
CVSS Score: 7.7 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.cloudfoundry.org/blog/cve-2020-5420; https://www.cloudfoundry.org/blog/cve-2020-5420
CVE: CVE-2020-25086
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/adminUsers.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25087
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advanced_settings/languages.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25088
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/blog/blogpublish.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25089
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25090
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25091
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/add_product.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25092
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in _parts/header.php, within application/views/templates/clothesshop, application/views/templates/greenlabel, and application/views/templates/redlabel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-25093
Published: 2020-09-03
Description: Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application/views/templates/clothesshop, application/views/templates/onepage, and application/views/templates/redlabel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/7c3c32d6526268b1c78d6d5741361e79292e9c22
CVE: CVE-2020-7729
Published: 2020-09-03
Description: The package grunt before 1.3.0 are vulnerable to Arbitrary Code Execution due to the default usage of the function load() instead of its secure replacement safeLoad() of the package js-yaml inside grunt.file.readYAML.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1188
References: https://github.com/gruntjs/grunt/blob/master/lib/grunt/file.js%23L249; https://github.com/gruntjs/grunt/commit/e350cea1724eb[PII_REDACTED]a380fb6a64e61e4e7; https://lists.debian.org/debian-lts-announce/2020/09/msg00008.html
CVE: CVE-2020-12058
Published: 2020-09-03
Description: Several XSS vulnerabilities in osCommerce CE Phoenix before 1.0.6.0 allow an attacker to inject and execute arbitrary JavaScript code. The malicious code can be injected as follows: the page parameter to catalog/admin/order_status.php, catalog/admin/tax_rates.php, catalog/admin/languages.php, catalog/admin/countries.php, catalog/admin/tax_classes.php, catalog/admin/reviews.php, or catalog/admin/zones.php; or the zpage or spage parameter to catalog/admin/geo_zones.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gburton/CE-Phoenix/commit/8d0fb97810bc28880415a3a31607f473bfc5fec8; https://sisl.lab.uic.edu/projects/chess/cross-site-scripting-in-cephoenix/; https://www.oscommerce.com/Us&News=155
CVE: CVE-2020-24949
Published: 2020-09-03
Description: Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the server and perform remote command execution (RCE).
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/162852/PHPFusion-9.03.50-Remote-Code-Execution.html; https://github.com/php-fusion/PHP-Fusion/issues/2312; http://packetstormsecurity.com/files/162852/PHPFusion-9.03.50-Remote-Code-Execution.html
CVE: CVE-2020-4337
Published: 2020-09-03
Description: IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the server to generate user registration emails that contain malicious URLs. IBM X-Force ID: 177933.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/177933; https://www.ibm.com/support/pages/node/6324763; https://exchange.xforce.ibmcloud.com/vulnerabilities/177933
CVE: CVE-2020-4638
Published: 2020-09-03
Description: IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/185508; https://www.ibm.com/support/pages/node/6324751; https://exchange.xforce.ibmcloud.com/vulnerabilities/185508
CVE: CVE-2020-7381
Published: 2020-09-03
Description: In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Security Console installation and any arbitrary code executable using the same file name.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40; https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40
CVE: CVE-2020-7382
Published: 2020-09-03
Description: Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-428, CWE-428
References: https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40; https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40
CVE: CVE-2019-10679
Published: 2020-09-03
Description: Thomson Reuters Eikon 4.0.42144 allows all local users to modify the service executable file because of weak %PROGRAMFILES(X86)%\Thomson Reuters\Eikon permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: http://packetstormsecurity.com/files/158989/Eikon-Thomson-Reuters-4.0.42144-File-Permissions.html; http://seclists.org/fulldisclosure/2020/Aug/19; https://sec-consult.com/en/blog/advisories/extensive-file-permissions-on-service-executable-in-eikon-thomson-reuters-cve-2019-10679/
CVE: CVE-2020-13972
Published: 2020-09-03
Description: Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://burninatorsec.blogspot.com/2020/09/cve-2020-13972-xss-via-ssrf-in.html; http://burninatorsec.blogspot.com/2020/09/cve-2020-13972-xss-via-ssrf-in.html
CVE: CVE-2020-16149
Published: 2020-09-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its requestor. Notes: none
CVE: CVE-2020-24385
Published: 2020-09-03
Description: In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the running kernel. During binary interaction, td->td_emuldata in sys/compat/linux/linux_emul.h is not getting initialized and returns NULL from em_find().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:02.txt; https://www.midnightbsd.org/notes/; http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:02.txt
CVE: CVE-2020-24863
Published: 2020-09-03
Description: A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:01.txt; https://github.com/MidnightBSD/src/blob/1691c07ff4f27b97220a5d65e217341e477f4014/sys/kern/vfs_syscalls.c; https://www.freebsd.org/security/advisories/FreeBSD-EN-20:18.getfsstat.asc
CVE: CVE-2020-24948
Published: 2020-09-03
Description: The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege users to upload arbitrary files, such as PHP, leading to remote command execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/160850/WordPress-Autoptimize-Shell-Upload.html; https://wpvulndb.com/vulnerabilities/10372; http://packetstormsecurity.com/files/160850/WordPress-Autoptimize-Shell-Upload.html
CVE: CVE-2020-25042
Published: 2020-09-03
Description: An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenticated (admin/manager) session and make a codebase/dir.php?type=filenew request to upload PHP code to codebase/handler.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/159304/MaraCMS-7.5-Remote-Code-Execution.html; https://sourceforge.net/projects/maracms/; https://www.exploit-db.com/exploits/48780
CVE: CVE-2020-25068
Published: 2020-09-03
Description: Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/file_to_disclose Directory Traversal URI. NOTE: The manufacturer indicated that the affected version does not exist. Furthermore, they indicated that they detected this problem in an internal audit more than 3 years ago and fixed it in 2017.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://setelsa-security.es/productos/control-de-acceso/; https://github.com/bryanroma/CVE-2020-25068; https://www.youtube.com/watch?v=CLAHE0qUHXs
CVE: CVE-2020-25104
Published: 2020-09-03
Description: eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://discussions.eramba.org/t/bug-security-vulnerabilities-not-serious/1650; https://gitlab.com/gitlab-com/gl-security/disclosures/-/blob/master/005_eramba/eramba_persistent_xss.md; https://discussions.eramba.org/t/bug-security-vulnerabilities-not-serious/1650
CVE: CVE-2020-25105
Published: 2020-09-03
Description: eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://discussions.eramba.org/t/bug-security-vulnerabilities-not-serious/1650/2; https://gitlab.com/gitlab-com/gl-security/disclosures/-/blob/master/005_eramba/eramba_weak_password_reset.md; https://discussions.eramba.org/t/bug-security-vulnerabilities-not-serious/1650/2
CVE: CVE-2020-23811
Published: 2020-09-03
Description: xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java.
CVSS Score: 7.5 (HIGH)
References: https://www.ccsq8.com/issues.html; https://www.ccsq8.com/issues.html
CVE: CVE-2020-23814
Published: 2020-09-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xuxueli/xxl-job/issues/1866; https://www.ccsq8.com/issues.html; https://github.com/xuxueli/xxl-job/issues/1866
CVE: CVE-2020-24158
Published: 2020-09-03
Description: 360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cnvd.org.cn/flaw/show/2105401; https://www.cnvd.org.cn/flaw/show/2105401
CVE: CVE-2020-24159
Published: 2020-09-03
Description: NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cnvd.org.cn/flaw/show/2104833; https://www.cnvd.org.cn/flaw/show/2104833
CVE: CVE-2020-24160
Published: 2020-09-03
Description: Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cnvd.org.cn/flaw/show/2105395; https://www.cnvd.org.cn/flaw/show/2105395
CVE: CVE-2020-24161
Published: 2020-09-03
Description: Guangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cnvd.org.cn/flaw/show/2105403; https://www.cnvd.org.cn/flaw/show/2105403
CVE: CVE-2020-24162
Published: 2020-09-03
Description: The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cnvd.org.cn/flaw/show/2105399; https://www.cnvd.org.cn/flaw/show/2105399
CVE: CVE-2020-24876
Published: 2020-09-03
Description: Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.pancakeapp.com/blog/entry/pancake-4.13.29-released; https://www.vaadata.com/blog/hardcoded-secret-leads-to-account-takeover/; https://www.pancakeapp.com/blog/entry/pancake-4.13.29-released
CVE: CVE-2020-25102
Published: 2020-09-03
Description: silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item (aka report preview) when an SVG document is provided in the Description parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/ahpaleus/c3bd2d41d306544ca[PII_REDACTED]d12f2; https://github.com/nyeholt/silverstripe-advancedreports/releases; https://gist.github.com/ahpaleus/c3bd2d41d306544ca[PII_REDACTED]d12f2
CVE: CVE-2020-10720
Published: 2020-09-03
Description: A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1781204; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4270d6795b[PII_REDACTED]ea55974d948393e66ef; https://bugzilla.redhat.com/show_bug.cgi?id=1781204