deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11428
Published: 2019-04-22
Description: I, Librarian 4.10 has XSS via the export.php export_files parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mkucej/i-librarian/issues/139; https://github.com/mkucej/i-librarian/issues/139
CVE: CVE-2019-11444
Published: 2019-04-22
Description: An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute OS commands. Commands can be executed via a [command].execute() call, as demonstrated by "def cmd =" in the ServerAdminPortlet_script value to group/control_panel/manage. Valid credentials for an application administrator user account are required. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to run groovy scripts and therefore not a design flaw
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://dev.liferay.com/discover/portal/-/knowledge_base/7-1/running-scripts-from-the-script-console; https://pentest.com.tr/exploits/Liferay-CE-Portal-Tomcat-7-1-2-ga3-Groovy-Console-Remote-Command-Execution-Metasploit.html; https://www.exploit-db.com/exploits/46525
CVE: CVE-2019-11445
Published: 2019-04-22
Description: OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site, via frontend/FileUpload and admin/repository_export.jsp. This is achieved by interfering with the Filesystem path control in the admin's Export field. As a result, attackers can gain remote code execution through the application server with root privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://pentest.com.tr/exploits/OpenKM-DM-6-3-7-Remote-Command-Execution-Metasploit.html; https://www.exploit-db.com/exploits/46526; https://pentest.com.tr/exploits/OpenKM-DM-6-3-7-Remote-Command-Execution-Metasploit.html
CVE: CVE-2019-11446
Published: 2019-04-22
Description: An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user privilege. The Upload Files section in the File Manager field contains an arbitrary file upload vulnerability via upload.php. The $IllegalExtensions value only lists lowercase (and thus .phP is a bypass), and omits .shtml and .phtml.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://pentest.com.tr/exploits/ATutor-2-2-4-file-manager-Remote-Code-Execution-Injection-Metasploit.html; https://www.exploit-db.com/exploits/46691/; http://pentest.com.tr/exploits/ATutor-2-2-4-file-manager-Remote-Code-Execution-Injection-Metasploit.html
CVE: CVE-2019-11447
Published: 2019-04-22
Description: An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/159134/CuteNews-2.1.2-Remote-Code-Execution.html; http://pentest.com.tr/exploits/CuteNews-2-1-2-Remote-Code-Execution-Metasploit.html; https://www.exploit-db.com/exploits/46698/
CVE: CVE-2019-11448
Published: 2019-04-22
Description: An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due to a Popup_SLA.jsp sid SQL injection vulnerability. For example, the attacker can subsequently write arbitrary text to a .vbs file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://pentest.com.tr/exploits/ManageEngine-App-Manager-14-SQLi-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/46725; https://www.exploit-db.com/exploits/46725/
CVE: CVE-2019-11449
Published: 2019-04-22
Description: I, Librarian 4.10 has XSS via the notes.php notes parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mkucej/i-librarian/issues/140; https://github.com/mkucej/i-librarian/issues/140
CVE: CVE-2019-11243
Published: 2019-04-22
Description: In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certificate/key data). In the affected versions, rest.AnonymousClientConfig() did not effectively clear service account credentials loaded using rest.InClusterConfig()
CVSS Score: 8.1 (HIGH)
CWE: CWE-271, CWE-212
References: http://www.securityfocus.com/bid/108053; https://github.com/kubernetes/kubernetes/issues/76797; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-11244
Published: 2019-04-22
Description: In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cache), written with world-writeable permissions (rw-rw-rw-). If --cache-dir is specified and pointed at a different location accessible to other users/groups, the written files may be modified by other users/groups and disrupt the kubectl invocation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-524, CWE-732
References: http://www.securityfocus.com/bid/108064; https://access.redhat.com/errata/RHSA-2019:3942; https://access.redhat.com/errata/RHSA-2020:0020
CVE: CVE-2019-11450
Published: 2019-04-22
Description: whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md; https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md
CVE: CVE-2019-11451
Published: 2019-04-22
Description: whatsns 4.0 allows index.php?inform/add.html qid SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md; https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md
CVE: CVE-2019-11452
Published: 2019-04-22
Description: whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md; https://github.com/kikulo/DebugOpen/blob/master/whatsns4.0/Main.md
CVE: CVE-2011-1830
Published: 2019-04-22
Description: Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-94
References: https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647; https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647
CVE: CVE-2011-3145
Published: 2019-04-22
Description: When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.
CVSS Score: 3.8 (LOW)
CWE: CWE-254
References: http://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/558; http://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/558
CVE: CVE-2011-3147
Published: 2019-04-22
Description: Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604; http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/revision/1604
CVE: CVE-2011-3151
Published: 2019-04-22
Description: The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-693
References: https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff; https://launchpadlibrarian.net/88098106/selinux_0.10~10.04.1.debdiff
CVE: CVE-2014-1426
Published: 2019-04-22
Description: A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://launchpad.net/maas/+milestone/1.9.2; https://launchpad.net/maas/+milestone/1.9.2
CVE: CVE-2014-1427
Published: 2019-04-22
Description: A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://launchpad.net/maas/+milestone/1.9.2; https://launchpad.net/maas/+milestone/1.9.2
CVE: CVE-2014-1428
Published: 2019-04-22
Description: A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.
CVSS Score: 2.0 (LOW)
CWE: CWE-254
References: https://launchpad.net/maas/+milestone/1.9.2; https://launchpad.net/maas/+milestone/1.9.2
CVE: CVE-2015-1316
Published: 2019-04-22
Description: Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-320
References: http://bazaar.launchpad.net/~juju-core/juju-core/trunk/revision/4119; http://bazaar.launchpad.net/~juju-core/juju-core/trunk/revision/4119
CVE: CVE-2015-1320
Published: 2019-04-22
Description: The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-255
References: https://launchpad.net/maas/+milestone/1.9.2; https://launchpad.net/maas/+milestone/1.9.2
CVE: CVE-2015-1326
Published: 2019-04-22
Description: python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093; https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
CVE: CVE-2015-1327
Published: 2019-04-22
Description: Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.
CVSS Score: 3.9 (LOW)
CWE: CWE-264
References: https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212; https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212
CVE: CVE-2015-1340
Published: 2019-04-22
Description: LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4; https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4
CVE: CVE-2015-1341
Published: 2019-04-22
Description: Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function _python_module_path.
CVSS Score: 7.4 (HIGH)
CWE: CWE-264
References: https://launchpad.net/apport/trunk/2.19.2; https://usn.ubuntu.com/2782-1/; https://launchpad.net/apport/trunk/2.19.2
CVE: CVE-2015-1343
Published: 2019-04-22
Description: All versions of unity-scope-gdrive logs search terms to syslog.
CVSS Score: 2.0 (LOW)
CWE: CWE-532
References: https://bugs.launchpad.net/ubuntu/+source/unity-scope-gdrive/+bug/1509076; https://bugs.launchpad.net/ubuntu/+source/unity-scope-gdrive/+bug/1509076
CVE: CVE-2016-1573
Published: 2019-04-22
Description: Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138; https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138
CVE: CVE-2016-1579
Published: 2019-04-22
Description: UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: https://bazaar.launchpad.net/~phablet-team/ubuntu-download-manager/trunk/revision/359; https://bazaar.launchpad.net/~phablet-team/ubuntu-download-manager/trunk/revision/359
CVE: CVE-2016-1584
Published: 2019-04-22
Description: In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.
CVSS Score: 1.6 (LOW)
CWE: CWE-399
References: https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521; https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521
CVE: CVE-2016-1585
Published: 2019-04-22
Description: In all versions of AppArmor mount rules are accidentally widened when compiled.
CVSS Score: 9.8 (CRITICAL)
References: https://bugs.launchpad.net/apparmor/+bug/1597017; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://bugs.launchpad.net/apparmor/+bug/1597017
CVE: CVE-2016-1586
Published: 2019-04-22
Description: A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
CVSS Score: 1.8 (LOW)
CWE: CWE-20
References: https://git.launchpad.net/oxide/commit/?id=29014da83e5fc358d6bff0f574e9ed45e61a35ac; https://git.launchpad.net/oxide/commit/?id=29014da83e5fc358d6bff0f574e9ed45e61a35ac
CVE: CVE-2016-1587
Published: 2019-04-22
Description: The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store, potentially using system resources without permission from the legitimate administrator of the system.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://github.com/snapcore/snapweb/commit/3f4cf9403f7687fbc8e27c0e01b2cf6aa5e7e0d5; https://github.com/snapcore/snapweb/commit/3f4cf9403f7687fbc8e27c0e01b2cf6aa5e7e0d5
CVE: CVE-2019-11454
Published: 2019-04-22
Description: Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an _viewlog operation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/tildeslash/monit/commits/1a8295eab6815072a18019b668fe084945b751f3; https://bitbucket.org/tildeslash/monit/commits/328f[PII_REDACTED]1c4b2075fab9820145e95b728c; https://github.com/dzflack/exploits/blob/master/unix/monit_xss.py
CVE: CVE-2019-11455
Published: 2019-04-22
Description: A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service (application outage).
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://bitbucket.org/tildeslash/monit/commits/f12d0cdb42d4e74dffe1525d4062c815c48ac57a; https://github.com/dzflack/exploits/blob/master/macos/monit_dos.py; https://github.com/dzflack/exploits/blob/master/unix/monit_buffer_overread.py
CVE: CVE-2019-11456
Published: 2019-04-22
Description: Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cisk123456.blogspot.com/2019/04/gila-cms-1101-csrf.html; https://cisk123456.blogspot.com/2019/04/gila-cms-1101-csrf.html
CVE: CVE-2019-3899
Published: 2019-04-22
Description: It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-592, CWE-306
References: https://access.redhat.com/errata/RHSA-2019:3255; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3899; https://access.redhat.com/errata/RHSA-2019:3255
CVE: CVE-2019-3901
Published: 2019-04-22
Description: A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-667, CWE-667
References: http://www.securityfocus.com/bid/89937; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3901; https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html
CVE: CVE-2019-3902
Published: 2019-04-22
Description: A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22, CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3902; https://lists.debian.org/debian-lts-announce/2019/04/msg00024.html; https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html
CVE: CVE-2019-6155
Published: 2019-04-22
Description: A potential vulnerability was found in an SMI handler in various BIOS versions of certain legacy IBM System x and IBM BladeCenter systems that could lead to denial of service.
CVSS Score: 4.1 (MEDIUM)
References: https://support.lenovo.com/solutions/LEN-25165; https://support.lenovo.com/solutions/LEN-25165
CVE: CVE-2019-6157
Published: 2019-04-22
Description: In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://support.lenovo.com/solutions/LEN-25667; https://support.lenovo.com/solutions/LEN-25667
CVE: CVE-2019-10241
Published: 2019-04-22
Description: In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=546121; https://lists.apache.org/thread.html/01e004c3f7c7365863a27e7038b7f32dae56ccf3a496b277c9b7f7b6%40%3Cjira.kafka.apache.org%3E; https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f[PII_REDACTED]b74d1e4272%40%3Cissues.activemq.apache.org%3E
CVE: CVE-2019-10246
Published: 2019-04-22
Description: In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-213, CWE-200
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=546576; https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E; https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E
CVE: CVE-2019-10247
Published: 2019-04-22
Description: In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-213, CWE-200
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=546577; https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f[PII_REDACTED]b74d1e4272%40%3Cissues.activemq.apache.org%3E; https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
CVE: CVE-2019-9955
Published: 2019-04-22
Description: On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Apr/22; https://www.exploit-db.com/exploits/46706/
CVE: CVE-2019-10248
Published: 2019-04-22
Description: Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of Vorto might be infected.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-829, CWE-669
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=546622; https://bugs.eclipse.org/bugs/show_bug.cgi?id=546622
CVE: CVE-2019-11384
Published: 2019-04-22
Description: The Zalora application 6.15.1 for Android stores confidential information insecurely on the system (i.e. plain text), which allows a non-root user to find out the username/password of a valid user via /data/data/com.zalora.android/shared_prefs/login_data.xml.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: https://pastebin.com/c90h9WfB; https://pastebin.com/c90h9WfB
CVE: CVE-2019-11461
Published: 2019-04-22
Description: An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.html; https://gitlab.gnome.org/GNOME/nautilus/issues/987; https://security.gentoo.org/glsa/201908-27