deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-18842
Published: 2020-01-06
Description: A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by opening a Wi-Fi access point nearby with a malicious SSID.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.tildeho.me/theres-javascript-in-my-power-plug/; https://www.tildeho.me/theres-javascript-in-my-power-plug/
CVE: CVE-2019-20348
Published: 2020-01-06
Description: OKER G232V1 v1.03.02.20161129 devices provide a root terminal on a UART serial interface without proper access control. This allows attackers with physical access to interrupt the boot sequence in order to execute arbitrary commands with root privileges and conduct further attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://gist.github.com/tanprathan/24cab2eb02937f86961c6380b47ce385; https://gist.github.com/tanprathan/24cab2eb02937f86961c6380b47ce385
CVE: CVE-2020-5846
Published: 2020-01-06
Description: An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-encode-path HTTP header, and the content in the HTTP request body. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full system access as the configured user (e.g., Administrator) when starting from any authenticated session (e.g., a trial account). This is fixed in the 83/830122/cbs-*-hotfix-task26000 builds.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.wbsec.nl/ahsay-2/; https://www.wbsec.nl/ahsay-2/
CVE: CVE-2014-8674
Published: 2020-01-06
Description: Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html; http://seclists.org/fulldisclosure/2015/Jul/44; http://www.securityfocus.com/bid/75726
CVE: CVE-2014-9405
Published: 2020-01-06
Description: A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Jun/1; http://www.securityfocus.com/archive/1/535660/100/0/threaded
CVE: CVE-2018-7794
Published: 2020-01-06
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2019-344-01; https://www.se.com/ww/en/download/document/SEVD-2019-344-01
CVE: CVE-2019-6854
Published: 2020-01-06
Description: A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the file system of that operating system to exploit this vulnerability. Affected versions in current support includes ClearSCADA 2017 R3, ClearSCADA 2017 R2, and ClearSCADA 2017.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.se.com/ww/en/download/document/SEVD-2019-344-05/; https://www.se.com/ww/en/download/document/SEVD-2019-344-05/
CVE: CVE-2019-6855
Published: 2020-01-06
Description: Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
CVSS Score: 7.3 (HIGH)
CWE: CWE-863, CWE-863
References: https://www.se.com/ww/en/download/document/SEVD-2019-344-02/; https://www.se.com/ww/en/download/document/SEVD-2019-344-02/
CVE: CVE-2019-6856
Published: 2020-01-06
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2019-344-01; https://www.us-cert.gov/ics/advisories/icsa-20-016-01; https://www.se.com/ww/en/download/document/SEVD-2019-344-01
CVE: CVE-2019-6857
Published: 2020-01-06
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.se.com/ww/en/download/document/SEVD-2019-344-01; https://www.us-cert.gov/ics/advisories/icsa-20-016-01; https://www.se.com/ww/en/download/document/SEVD-2019-344-01
CVE: CVE-2020-5843
Published: 2020-01-07
Description: Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://codologic.com/forum/index.php?u=/category/news-and-announcements; https://vyshnavvizz.blogspot.com/2020/01/persistent-cross-site-scripting-admin.html; http://codologic.com/forum/index.php?u=/category/news-and-announcements
CVE: CVE-2013-5122
Published: 2020-01-07
Description: Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/60897; http://www.securitytracker.com/id/1029769; https://packetstormsecurity.com/files/cve/CVE-2013-5122
CVE: CVE-2013-5571
Published: 2020-01-07
Description: HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.securiteam.com/securitynews/5QP3O0UAKA.html; http://www.securiteam.com/securitynews/5QP3O0UAKA.html
CVE: CVE-2020-5393
Published: 2020-01-07
Description: In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.appspace.com/latest/release-notes/7-1-platform-release-notes/#Patch_Updates; https://sumukh30.blogspot.com/2020/01/cross-site-scripting-vulnerability-in.html; https://docs.appspace.com/latest/release-notes/7-1-platform-release-notes/#Patch_Updates
CVE: CVE-2013-5637
Published: 2020-01-07
Description: PQI AirCard has persistent XSS
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://firmware.re/vulns/acsa-2013-007.php; http://firmware.re/vulns/acsa-2013-007.php
CVE: CVE-2013-5638
Published: 2020-01-07
Description: Transcend WiFiSD 1.8 has persistent XSS
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://firmware.re/usenixsec14/; http://firmware.re/vulns/acsa-2013-006.php; http://firmware.re/usenixsec14/
CVE: CVE-2013-5656
Published: 2020-01-07
Description: FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://realpentesting.blogspot.com.es/p/advisories.html; http://seclists.org/fulldisclosure/2013/Sep/8; http://www.exploit-db.com/exploits/25130
CVE: CVE-2013-5657
Published: 2020-01-07
Description: AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
CVSS Score: 7.5 (HIGH)
References: http://realpentesting.blogspot.com.es/p/advisories.html; http://seclists.org/fulldisclosure/2013/Sep/8; https://www.securityfocus.com/bid/62112
CVE: CVE-2013-5658
Published: 2020-01-07
Description: AultWare pwStore 2010.8.30.0 has XSS
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://realpentesting.blogspot.com.es/p/advisories.html; http://seclists.org/fulldisclosure/2013/Sep/8; https://packetstormsecurity.com/files/123049/PWStore-2010.8.30.0-Cross-Site-Scripting-Denial-Of-Service.html
CVE: CVE-2019-14834
Published: 2020-01-07
Description: A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.
CVSS Score: 3.7 (LOW)
CWE: CWE-770, CWE-770
References: http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=69bc94779c2f035a9fffdb5327a54c3aeca73ed5; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14834; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JU474LT66BHNVFG5C4GEV3VTZNAEJ3BS/
CVE: CVE-2019-14837
Published: 2020-01-07
Description: A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password and then log in. For example, for client name 'test' the email address will be 'service-account-test@placeholder.org'.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-547, CWE-798
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14837; https://github.com/keycloak/keycloak/commit/9a7c1a91a59ab85e7f8889a505be04a71580777f; https://issues.jboss.org/browse/KEYCLOAK-10780
CVE: CVE-2019-14843
Published: 2020-01-07
Description: A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app deployed on the app server to access unauthorized information and possibly conduct further attacks. Versions shipped with Red Hat Jboss EAP 7 and Red Hat SSO 7 are vulnerable to this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-592, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14843; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14843
CVE: CVE-2019-14854
Published: 2020-01-07
Description: OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-117, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14854; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14854
CVE: CVE-2019-14866
Published: 2020-01-07
Description: In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14866; https://lists.debian.org/debian-lts-announce/2023/06/msg00007.html; https://lists.gnu.org/archive/html/bug-cpio/2019-08/msg00003.html
CVE: CVE-2019-14879
Published: 2020-01-07
Description: A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264, CWE-273
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14879; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14879
CVE: CVE-2014-8673
Published: 2020-01-07
Description: Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Planning (SOPPlanning)before 1.33.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html; http://seclists.org/fulldisclosure/2015/Jul/44; http://www.securityfocus.com/bid/75726
CVE: CVE-2019-14819
Published: 2020-01-07
Description: A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivileged user to escalate their privileges to those allowed by the privileged Security Context Constraints.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266, CWE-270, CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14819; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14819
CVE: CVE-2018-10465
Published: 2020-01-07
Description: Jamf Pro 10.x before 10.3.0 has Incorrect Access Control. Jamf Pro user accounts and groups with access to log in to Jamf Pro had full access to endpoints in the Universal API (UAPI), regardless of account privileges or privilege sets. An authenticated Jamf Pro account without required privileges could be used to perform CRUD actions (GET, POST, PUT, DELETE) on UAPI endpoints, which could result in unauthorized information disclosure, compromised data integrity, and data loss. For a full listing of available UAPI endpoints and associated CRUD actions you can navigate to /uapi/doc in your instance of Jamf Pro.
CVSS Score: 8.8 (HIGH)
References: https://docs.jamf.com/10.3.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html; https://docs.jamf.com/10.3.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html
CVE: CVE-2019-10776
Published: 2020-01-07
Description: In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/kellyselden/git-diff-apply/commit/106d61d3ae723b4257c2a13e67b95eb40a27e0b5; https://snyk.io/vuln/SNYK-JS-GITDIFFAPPLY-540774%2C; https://snyk.io/vuln/SNYK-JS-GITDIFFAPPLY-540774
CVE: CVE-2019-16154
Published: 2020-01-07
Description: An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-19-104; https://fortiguard.com/advisory/FG-IR-19-104
CVE: CVE-2019-18386
Published: 2020-01-07
Description: Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems management communication channel
CVSS Score: 8.7 (HIGH)
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=53; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=53
CVE: CVE-2019-6700
Published: 2020-01-07
Description: An information exposure vulnerability in the external authentication profile form of FortiSIEM 5.2.2 and earlier may allow an authenticated attacker to retrieve the external authentication password via the HTML source code.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-522
References: https://fortiguard.com/advisory/FG-IR-19-100; https://fortiguard.com/advisory/FG-IR-19-100
CVE: CVE-2019-9465
Published: 2020-01-07
Description: In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root cause. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-10 Android ID: A-133258003
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2019-12-01; https://source.android.com/security/bulletin/pixel/2019-12-01
CVE: CVE-2020-5307
Published: 2020-01-07
Description: PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in add-product.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://cinzinga.github.io/CVE-2020-5307-5308/; https://www.exploit-db.com/exploits/47846; https://cinzinga.github.io/CVE-2020-5307-5308/
CVE: CVE-2020-5842
Published: 2020-01-07
Description: Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40prasanthc41m/cve-2020-5842-stored-xss-vulnerability-in-codoforum-4-8-3-b2e1133c6a91; https://www.exploit-db.com/exploits/47876; https://medium.com/%40prasanthc41m/cve-2020-5842-stored-xss-vulnerability-in-codoforum-4-8-3-b2e1133c6a91
CVE: CVE-2019-14906
Published: 2020-01-07
Description: A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to make the application crash or execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14906; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14906
CVE: CVE-2019-6529
Published: 2020-01-07
Description: An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05; https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05
CVE: CVE-2020-5841
Published: 2020-01-07
Description: An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://medium.com/%40ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1; https://medium.com/%40ph0rensic/sql-injection-opmon-9-3-1-1-770bd7e7ad1
CVE: CVE-2019-18652
Published: 2020-01-07
Description: A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and Microsoft Edge 44.18362.387.0 (Microsoft EdgeHTML 18.18362).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/crypt0crc/cve-2019-18652; https://gitlab.com/crypt0crc/cve-2019-18652
CVE: CVE-2019-17146
Published: 2020-01-07
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP port 80 by default. When parsing the SOAPAction request header, the process does not properly validate the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8458.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-306
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10142; https://www.zerodayinitiative.com/advisories/ZDI-19-1031/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10142
CVE: CVE-2019-17147
Published: 2020-01-07
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Host request header, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length static buffer. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-8457.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.tp-link.com/us/support/download/tl-wr841n/#Firmware; https://www.zerodayinitiative.com/advisories/ZDI-19-992/; https://www.tp-link.com/us/support/download/tl-wr841n/#Firmware
CVE: CVE-2019-17148
Published: 2020-01-07
Description: This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485). An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Parallels Service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root. Was ZDI-CAN-8685.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-19-1028/; https://www.zerodayinitiative.com/advisories/ZDI-19-1028/
CVE: CVE-2019-17151
Published: 2020-01-07
Description: This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw exists within the parsing of a users profile. The issue lies in the failure to properly validate a users name. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9302.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-356, CWE-601
References: https://www.zerodayinitiative.com/advisories/ZDI-19-1035/; https://www.zerodayinitiative.com/advisories/ZDI-19-1035/
CVE: CVE-2014-5209
Published: 2020-01-08
Description: An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/95841; https://support.f5.com/csp/article/K44942017; https://support.f5.com/csp/article/K44942017
CVE: CVE-2020-6163
Published: 2020-01-08
Description: The WikibaseMediaInfo extension 1.35 for MediaWiki allows XSS because of improper template syntax within the PropertySuggestionsWidget template (in the templates/search/PropertySuggestionsWidget.mustache+dom file).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/558203; https://phabricator.wikimedia.org/T240773; https://gerrit.wikimedia.org/r/558203