deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-11280
Published: 2021-02-22
Description: Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11281
Published: 2021-02-22
Description: Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11282
Published: 2021-02-22
Description: Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11283
Published: 2021-02-22
Description: A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11286
Published: 2021-02-22
Description: An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11287
Published: 2021-02-22
Description: Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11296
Published: 2021-02-22
Description: Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-11297
Published: 2021-02-22
Description: Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 7.5 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-3664
Published: 2021-02-22
Description: Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/february-2021-bulletin
CVE: CVE-2020-19762
Published: 2021-02-22
Description: Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ismailerkek/CVEs/blob/main/CVE-2020-19762-RESERVED.md; https://github.com/ismailerkek/CVEs/blob/main/CVE-2020-19762-RESERVED.md
CVE: CVE-2020-21224
Published: 2021-02-22
Description: A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: https://github.com/NS-Sp4ce/Inspur/; https://github.com/NS-Sp4ce/Inspur/tree/master/ClusterEngineV4.0%20Vul; https://github.com/NS-Sp4ce/Inspur/
CVE: CVE-2021-27368
Published: 2021-02-22
Description: The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/monicahq/monica/issues/4888; https://github.com/monicahq/monica/pull/4543; https://github.com/monicahq/monica/issues/4888
CVE: CVE-2021-27369
Published: 2021-02-22
Description: The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/monicahq/monica/issues/4888; https://github.com/monicahq/monica/pull/4543; https://github.com/monicahq/monica/issues/4888
CVE: CVE-2021-27370
Published: 2021-02-22
Description: The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html; https://github.com/monicahq/monica/issues/4888; https://github.com/monicahq/monica/pull/4543
CVE: CVE-2021-27371
Published: 2021-02-22
Description: The Contact page in Monica 2.19.1 allows stored XSS via the Description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/monicahq/monica/issues/4888; https://github.com/monicahq/monica/pull/4543; https://github.com/monicahq/monica/issues/4888
CVE: CVE-2021-27559
Published: 2021-02-22
Description: The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/monicahq/monica/issues/4888; https://github.com/monicahq/monica/pull/4543; https://github.com/monicahq/monica/issues/4888
CVE: CVE-2021-3120
Published: 2021-02-22
Description: An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must be able to place a valid Gift Card product into the shopping cart. An uploaded file is placed at a predetermined path on the web server with a user-specified filename and extension. This occurs because the ywgc-upload-picture parameter can have a .php value even though the intention was to only allow uploads of Gift Card images.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/guy-liu/yith-giftdrop; https://yithemes.com/themes/plugins/yith-woocommerce-gift-cards/; https://github.com/guy-liu/yith-giftdrop
CVE: CVE-2020-24175
Published: 2021-02-22
Description: Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://yz1.com; https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1; https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4
CVE: CVE-2020-22474
Published: 2021-02-22
Description: In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-829
References: https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/; https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/
CVE: CVE-2020-22475
Published: 2021-02-22
Description: "Tasks" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-276
References: https://lyhinslab.org/index.php/2020/07/18/how-the-white-box-hacking-works-ok-google-i-wanna-pwn-this-app/; https://www.exploit-db.com/exploits/49563; https://lyhinslab.org/index.php/2020/07/18/how-the-white-box-hacking-works-ok-google-i-wanna-pwn-this-app/
CVE: CVE-2021-27228
Published: 2021-02-22
Description: An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names (such as constructor or hasOwnProperty) to convince the System that the supplied API Key exists in the underlying JS object, and consequently achieve complete access to User/Admin/Super API functions, as demonstrated by a /super/constructor/accounts/list URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gitlab.com/Shinobi-Systems/Shinobi/-/merge_requests/286; https://gitlab.com/Shinobi-Systems/Shinobi/-/tags; https://shinobi.video/
CVE: CVE-2021-27549
Published: 2021-02-22
Description: Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings > Device screen
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312
References: https://docs.genymotion.com/desktop/latest/02_Application.html; https://github.com/eybisi/misc/tree/main/clipwatch; https://twitter.com/0xabc0/status/[PII_REDACTED]56185090
CVE: CVE-2021-27564
Published: 2021-02-22
Description: A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-Xss; https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-Xss
CVE: CVE-2021-27279
Published: 2021-02-22
Description: MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a; https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w; https://mybb.com/versions/1.8.25/
CVE: CVE-2020-29448
Published: 2021-02-22
Description: The ConfluenceResourceDownloadRewriteRule class in Confluence Server and Confluence Data Center before version 6.13.18, from 6.14.0 before 7.4.6, and from 7.5.0 before 7.8.3 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
CVSS Score: 5.3 (MEDIUM)
References: https://jira.atlassian.com/browse/CONFSERVER-60469; https://jira.atlassian.com/browse/CONFSERVER-60469
CVE: CVE-2020-29453
Published: 2021-02-22
Description: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://jira.atlassian.com/browse/JRASERVER-72014; https://jira.atlassian.com/browse/JRASERVER-72014
CVE: CVE-2020-36232
Published: 2021-02-22
Description: The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it incorrectly obtained application base url information from the executing http request which could be attacker controlled.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918
References: https://jira.atlassian.com/browse/JRASERVER-72025; https://jira.atlassian.com/browse/JRASERVER-72025
CVE: CVE-2021-26068
Published: 2021-02-22
Description: An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template injection vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://confluence.atlassian.com/jira/jira-server-for-slack-security-advisory-17th-february-2[PII_REDACTED]690.html; https://confluence.atlassian.com/jira/jira-server-for-slack-security-advisory-17th-february-2[PII_REDACTED]690.html
CVE: CVE-2021-26724
Published: 2021-02-22
Description: OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.nozominetworks.com/NN-2021:1-01; https://security.nozominetworks.com/NN-2021:1-01
CVE: CVE-2021-26725
Published: 2021-02-22
Description: Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-24, CWE-22
References: https://security.nozominetworks.com/NN-2021:2-01; https://security.nozominetworks.com/NN-2021:2-01
CVE: CVE-2021-21149
Published: 2021-02-22
Description: Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1138143; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21150
Published: 2021-02-22
Description: Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1172192; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21151
Published: 2021-02-22
Description: Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1165624; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21152
Published: 2021-02-22
Description: Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1166504; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21153
Published: 2021-02-22
Description: Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1155974; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21154
Published: 2021-02-22
Description: Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1173269; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21155
Published: 2021-02-22
Description: Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1175500; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-21156
Published: 2021-02-22
Description: Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html; https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1177341
CVE: CVE-2021-21157
Published: 2021-02-22
Description: Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html; https://crbug.com/1170657; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/
CVE: CVE-2021-23827
Published: 2021-02-23
Description: Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://github.com/keybase/client/releases; https://hackerone.com/reports/1074930; https://johnjhacking.com/blog/cve-2021-23827/
CVE: CVE-2021-27189
Published: 2021-02-23
Description: The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/161507/CIRA-Canadian-Shield-Man-In-The-Middle.html; http://seclists.org/fulldisclosure/2021/Feb/72; https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html
CVE: CVE-2020-35852
Published: 2021-02-23
Description: Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://getgist.com; https://getgist.com/chatbot-software/; https://github.com/riteshgohil/My_CVE/blob/main/CVE-2020-35852.md
CVE: CVE-2021-27568
Published: 2021-02-23
Description: An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-754
References: https://github.com/netplex/json-smart-v1/issues/7; https://github.com/netplex/json-smart-v2/issues/60; https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2020-25690
Published: 2021-02-23
Description: An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1893188; https://bugzilla.redhat.com/show_bug.cgi?id=1893188
CVE: CVE-2020-27768
Published: 2021-02-23
Description: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1894689; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-27819
Published: 2021-02-23
Description: An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service via crafted XLS file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1903296; https://bugzilla.redhat.com/show_bug.cgi?id=1903296