deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10807
Published: 2020-03-22
Description: auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://github.com/mitre/caldera/compare/2.6.4...2.6.5; https://github.com/mitre/caldera/issues/1405; https://github.com/mitre/caldera/pull/1407
CVE: CVE-2020-10808
Published: 2020-03-22
Description: Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bash_logout to a .bash_logout' substring followed by shell metacharacters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/157111/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html; http://packetstormsecurity.com/files/157219/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html; https://forum.vestacp.com/viewforum.php?f=25
CVE: CVE-2020-10809
Published: 2020-03-22
Description: An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 binary. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt; https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_1; https://research.loginsoft.com/bugs/heap-overflow-in-decompress-c-hdf5-1-13-0/
CVE: CVE-2020-10810
Published: 2020-03-22
Description: An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt; https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_3; https://research.loginsoft.com/bugs/null-pointer-dereference-in-h5ac-c-hdf5-1-13-0/
CVE: CVE-2020-10811
Published: 2020-03-22
Description: An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt; https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_2; https://research.loginsoft.com/bugs/heap-buffer-overflow-in-h5olayout-c-hdf5-1-13-0/
CVE: CVE-2020-10812
Published: 2020-03-22
Description: An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bitbucket.hdfgroup.org/projects/HDFFV/repos/hdf5/browse/release_docs/RELEASE.txt; https://github.com/Loginsoft-Research/hdf5-reports/tree/master/Vuln_4; https://research.loginsoft.com/bugs/null-pointer-dereference-in-h5fquery-c-hdf5-1-13-0/
CVE: CVE-2020-10818
Published: 2020-03-22
Description: Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://code610.blogspot.com/2020/03/rce-in-artica-426.html; https://code610.blogspot.com/2020/03/rce-in-artica-426.html
CVE: CVE-2020-10819
Published: 2020-03-22
Description: Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://code610.blogspot.com/2020/03/nagios-5611-xssd.html; https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE: CVE-2020-10820
Published: 2020-03-22
Description: Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://code610.blogspot.com/2020/03/nagios-5611-xssd.html; https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE: CVE-2020-10821
Published: 2020-03-22
Description: Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://code610.blogspot.com/2020/03/nagios-5611-xssd.html; https://code610.blogspot.com/2020/03/nagios-5611-xssd.html
CVE: CVE-2020-9752
Published: 2020-03-23
Description: Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-73, CWE-610
References: https://cve.naver.com/detail/cve-2020-9752; https://cve.naver.com/detail/cve-2020-9752
CVE: CVE-2020-10592
Published: 2020-03-23
Description: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.html; https://security.gentoo.org/glsa/202003-50
CVE: CVE-2020-10593
Published: 2020-03-23
Description: Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_circ because a circuit-padding machine can be negotiated twice on the same circuit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00052.html; https://security.gentoo.org/glsa/202003-50
CVE: CVE-2020-10660
Published: 2020-03-23
Description: HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#134-march-19th-2020; https://www.hashicorp.com/blog/category/vault/; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#134-march-19th-2020
CVE: CVE-2020-10661
Published: 2020-03-23
Description: HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#134-march-19th-2020; https://www.hashicorp.com/blog/category/vault/; https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#134-march-19th-2020
CVE: CVE-2019-15510
Published: 2020-03-23
Description: ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-15510-manageengine-desktopcentral-v-10-vulnerable-to-html-injection/; https://www.manageengine.com/products/desktop-central/html-injection.html; https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-15510-manageengine-desktopcentral-v-10-vulnerable-to-html-injection/
CVE: CVE-2019-19964
Published: 2020-03-23
Description: On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration panel can access part of the web panel, bypassing authentication.
CVSS Score: 2.7 (LOW)
References: https://kb.netgear.com/000061738/Security-Advisory-for-Missing-Function-Level-Access-Control-on-GS728TPS-PSV-2020-0012; https://kb.netgear.com/000061738/Security-Advisory-for-Missing-Function-Level-Access-Control-on-GS728TPS-PSV-2020-0012
CVE: CVE-2019-5184
Published: 2020-03-23
Description: An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0965; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0965
CVE: CVE-2019-5185
Published: 2020-03-23
Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=<contents of state node> using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any state values that are greater than 512-len("/etc/config-tools/config_interfaces interface=X1 state=") in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An state value of length 0x3c9 will cause the service to crash.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966
CVE: CVE-2019-5186
Published: 2020-03-23
Description: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=<contents of interface element> using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any interface values that are greater than 512-len("/etc/config-tools/config_interfaces interface=") in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An interface value of length 0x3c4 will cause the service to crash.
CVSS Score: 7.0 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0966
CVE: CVE-2020-1950
Published: 2020-03-23
Description: A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://lists.apache.org/thread.html/r463b1a67817ae55fe022536edd6db34e8f[PII_REDACTED]430cbcf8a8dd%40%3Cdev.tika.apache.org%3E; https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html; https://usn.ubuntu.com/4564-1/
CVE: CVE-2020-1951
Published: 2020-03-23
Description: A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://lists.apache.org/thread.html/rd8c1b42bd0e31870d804890b3f00b13d837c528f7ebaf[PII_REDACTED]2%40%3Cdev.tika.apache.org%3E; https://lists.debian.org/debian-lts-announce/2020/03/msg00035.html; https://usn.ubuntu.com/4564-1/
CVE: CVE-2020-6650
Published: 2020-03-23
Description: UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed.
CVSS Score: 8.3 (HIGH)
CWE: CWE-95, CWE-94
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-vulnerability-advisory-UPS-companion-software.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-vulnerability-advisory-UPS-companion-software.pdf
CVE: CVE-2016-11022
Published: 2020-03-23
Description: NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://firmware.re/vulns/acsa-2015-002.php; https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/netgear/prosafe_rce.py; https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/
CVE: CVE-2020-10793
Published: 2020-03-23
Description: CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page. NOTE: A contributor to the CodeIgniter framework argues that the issue should not be attributed to CodeIgniter. Furthermore, the blog post reference shows an unknown website built with the CodeIgniter framework but that CodeIgniter is not responsible for introducing this issue because the framework has never provided a login screen, nor any kind of login or user management facilities beyond a Session library. Also, another reporter indicates the issue is with a custom module/plugin to CodeIgniter, not CodeIgniter itself.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://codeigniter4.github.io/userguide/extending/authentication.html; https://medium.com/%40vbharad/account-takeover-via-modifying-email-id-codeigniter-framework-ca30741ad297; https://codeigniter4.github.io/userguide/extending/authentication.html
CVE: CVE-2020-8497
Published: 2020-03-23
Description: In Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The file is in JSON format and it contains user names, user IDs, private messages, and timestamps.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://k4m1ll0.com/cve-2020-8497.html; https://k4m1ll0.com/cve-2020-8497.html
CVE: CVE-2019-4718
Published: 2020-03-23
Description: IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172123; https://www.ibm.com/support/pages/node/6113470; https://exchange.xforce.ibmcloud.com/vulnerabilities/172123
CVE: CVE-2020-10364
Published: 2020-03-23
Description: The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.html; https://www.exploit-db.com/exploits/48228; https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.html
CVE: CVE-2020-6420
Published: 2020-03-23
Description: Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop.html; https://crbug.com/1050996; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57/
CVE: CVE-2020-6422
Published: 2020-03-23
Description: Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6424
Published: 2020-03-23
Description: Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6425
Published: 2020-03-23
Description: Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html; https://crbug.com/1031670
CVE: CVE-2020-6426
Published: 2020-03-23
Description: Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6427
Published: 2020-03-23
Description: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6428
Published: 2020-03-23
Description: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6429
Published: 2020-03-23
Description: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.html
CVE: CVE-2020-6449
Published: 2020-03-23
Description: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.html; http://packetstormsecurity.com/files/172843/Chrome-WebAudio-Use-After-Free.html
CVE: CVE-2020-7935
Published: 2020-03-23
Description: Artica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an Unrestricted Upload Of A File With A Dangerous Type issue in the File Manager. An attacker can create a (or use an existing) directory that is externally accessible to store PHP files. The filename and the exact path is known by the attacker, so it is possible to execute PHP code in the context of the application. The vulnerability is exploitable only with Administrator access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://k4m1ll0.com/cve-2020-7935.html; https://k4m1ll0.com/cve-2020-7935.html
CVE: CVE-2020-8511
Published: 2020-03-23
Description: In Artica Pandora FMS through 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the File Repository component, a different issue than CVE-2020-7935 and CVE-2020-8500.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://k4m1ll0.com/cve-2020-8511.html; https://k4m1ll0.com/cve-2020-8511.html
CVE: CVE-2020-9759
Published: 2020-03-23
Description: A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-494
References: https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html; https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html; https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html
CVE: CVE-2020-9760
Published: 2020-03-23
Description: An issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/weechat/weechat/commit/40ccacb4330a64802b1f1e28ed9a6b6d3ca9197f; https://lists.debian.org/debian-lts-announce/2020/03/msg00031.html; https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html
CVE: CVE-2019-19034
Published: 2020-03-23
Description: Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/157731/ManageEngine-AssetExplorer-Authenticated-Command-Execution.html; http://seclists.org/fulldisclosure/2020/May/36; https://www.manageengine.com/products/asset-explorer/sp-readme.html
CVE: CVE-2019-20626
Published: 2020-03-23
Description: The remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open request, which might allow a replay attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-294
References: https://github.com/HackingIntoYourHeart/Unoriginal-Rice-Patty; https://medium.com/%40victor_14768/replay-attacks-en-autos-206481dcfee1; https://github.com/HackingIntoYourHeart/Unoriginal-Rice-Patty
CVE: CVE-2019-20627
Published: 2020-03-23
Description: AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/ravibpatel/AutoUpdater.NET/commit/1dc25f2bea6ea522dbac1512b5563c4746d539c3; https://github.com/ravibpatel/AutoUpdater.NET/releases/tag/v1.5.8; https://www.doyler.net/security-not-included/autoupdater-net-vulnerability