deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-9783
Published: 2020-04-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/HT211101; https://support.apple.com/HT211102; https://support.apple.com/HT211104
CVE: CVE-2020-9784
Published: 2020-04-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/HT211104; https://support.apple.com/HT211104
CVE: CVE-2020-9785
Published: 2020-04-01
Description: Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT211100; https://support.apple.com/HT211101; https://support.apple.com/HT211102
CVE: CVE-2020-10199
Published: 2020-04-01
Description: Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
CVSS Score: 8.8 (HIGH)
CWE: CWE-917, CWE-917
References: http://packetstormsecurity.com/files/157261/Nexus-Repository-Manager-3.21.1-01-Remote-Code-Execution.html; http://packetstormsecurity.com/files/160835/Sonatype-Nexus-3.21.1-Remote-Code-Execution.html; https://cwe.mitre.org/data/definitions/917.html
CVE: CVE-2020-10203
Published: 2020-04-01
Description: Sonatype Nexus Repository before 3.21.2 allows XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]94; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]94
CVE: CVE-2020-10204
Published: 2020-04-01
Description: Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]94; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]94
CVE: CVE-2020-1943
Published: 2020-04-01
Description: Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.apache.org/thread.html/r034123f[PII_REDACTED]fd04c922afb22d2389de6e2faf3a083207202bc%40%3Ccommits.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r8efd5b62604d849ae2f93b2eb9ce0ce0356a4cf5812deed14030a757%40%3Cdev.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/ra6c011af63d8a8cd8c0b8f72b2b0c392af4d5ed040ba59be344d13fa%40%3Cdev.ofbiz.apache.org%3E
CVE: CVE-2020-1949
Published: 2020-04-01
Description: Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://s.apache.org/CVE-2020-1949; https://s.apache.org/CVE-2020-1949
CVE: CVE-2020-3847
Published: 2020-04-01
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-125
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-3848
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-3849
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-3850
Published: 2020-04-01
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-787
References: https://support.apple.com/HT210919; https://support.apple.com/HT210919
CVE: CVE-2020-1934
Published: 2020-04-01
Description: In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-908
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E
CVE: CVE-2020-5290
Published: 2020-04-01
Description: In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint. An attacker team could potentially steal flags by, for example, exploiting a stored XSS payload in a CTF challenge so that victim teams who solve the challenge are unknowingly (and against their will) signed into the attacker team&#39;s account. Then, the attacker can gain points / value off the backs of the victims. This is patched in version 2.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://github.com/redpwn/rctf/issues/147; https://github.com/redpwn/rctf/security/advisories/GHSA-p5fh-2vhw-fvpq; https://github.com/redpwn/rctf/issues/147
CVE: CVE-2019-11254
Published: 2020-04-01
Description: The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1050
References: https://github.com/kubernetes/kubernetes/issues/89535; https://groups.google.com/d/msg/kubernetes-announce/ALL9s73E5ck/4yHe8J-PBAAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-9163
Published: 2020-04-01
Description: The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.marchnetworks.com/cve-2019-9163/; https://www.marchnetworks.com/cve-2019-9163/
CVE: CVE-2020-10598
Published: 2020-04-01
Description: In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in access to sensitive data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-693
References: https://www.us-cert.gov/ics/advisories/icsma-20-091-01; https://www.us-cert.gov/ics/advisories/icsma-20-091-01
CVE: CVE-2020-10948
Published: 2020-04-01
Description: Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/fireeye/Vulnerability-Disclosures/tree/master/FEYE-2020-0004; https://github.com/fireeye/Vulnerability-Disclosures/tree/master/FEYE-2020-0004
CVE: CVE-2020-11463
Published: 2020-04-01
Description: An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoing email credentials. This enables an attacker to get full access to all emails sent or received by the system including password reset emails, making it possible to reset any user's password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/; https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09; https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update
CVE: CVE-2020-11464
Published: 2020-04-01
Description: An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/; https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09; https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update
CVE: CVE-2020-11465
Published: 2020-04-01
Description: An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including applications used as user sources (used for authentication). This enables an attacker to forge valid authentication models that resembles any user on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/; https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09; https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update
CVE: CVE-2020-11466
Published: 2020-04-01
Description: An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthorized parties. Additionally, it leaked ticket authentication code, making it possible to make changes to a ticket.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/; https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09; https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update
CVE: CVE-2020-11467
Published: 2020-04-01
Description: An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, and uses TWIG as its template engine. While direct access to self and _self variables was not permitted, one could abuse the accessible variables in one's context to reach a native unserialize function via the code parameter. There, on could pass a crafted payload to trigger a set of POP gadgets in order to achieve remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://blog.redforce.io/attacking-helpdesks-part-1-rce-chain-on-deskpro/; https://support.deskpro.com/en/news/posts/deskpro-security-update-2019-09; https://support.deskpro.com/en/news/posts/deskpro-v2019-8-0-released-security-update
CVE: CVE-2020-1954
Published: 2020-04-01
Description: Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-middle (MITM) style attack. An attacker on the same host can connect to the registry and rebind the entry to another server, thus acting as a proxy to the original. They are then able to gain access to all of the information that is sent and received over JMX.
CVSS Score: 5.3 (MEDIUM)
References: http://cxf.apache.org/security-advisories.data/CVE-2020-1954.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E; https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
CVE: CVE-2020-8966
Published: 2020-04-01
Description: There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments (scripts) into a legitimate web page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://sourceforge.net/p/tikiwiki/code/75455; https://www.incibe-cert.es/en/early-warning/security-advisories/cross-site-scripting-xss-flaws-found-tiki-wiki-cms-software; https://sourceforge.net/p/tikiwiki/code/75455
CVE: CVE-2018-11802
Published: 2020-04-01
Description: In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all authorization settings for such requests. This affects all Solr versions prior to 7.7 that use the default authorization mechanism of Solr (RuleBasedAuthorizationPlugin).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://www.openwall.com/lists/oss-security/2019/04/24/1; https://www.openwall.com/lists/oss-security/2019/04/24/1
CVE: CVE-2019-17564
Published: 2020-04-01
Description: Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue affected Apache Dubbo 2.7.0 to 2.7.4, 2.6.0 to 2.6.7, and all 2.5.x versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://advisory.checkmarx.net/advisory/CX-2020-4275; https://lists.apache.org/thread.html/r13f7a58fa5d61d729e538a378687118e00c3e229903ba1e7b3a807a2%40%3Cdev.dubbo.apache.org%3E; https://advisory.checkmarx.net/advisory/CX-2020-4275
CVE: CVE-2020-11469
Published: 2020-04-01
Description: Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot.
CVSS Score: 7.8 (HIGH)
CWE: CWE-552
References: https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/; https://objective-see.com/blog/blog_0x56.html; https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/
CVE: CVE-2020-11470
Published: 2020-04-01
Description: Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access.
CVSS Score: 3.3 (LOW)
CWE: CWE-345
References: https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/; https://objective-see.com/blog/blog_0x56.html; https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/
CVE: CVE-2020-1958
Published: 2020-04-01
Description: When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. They are still subject to role-based authorization checks, if configured. Callers of Druid APIs can also retrieve any LDAP attribute values of users that exist on the LDAP server, so long as that information is visible to the Druid server. This information disclosure does not require the caller itself to be a valid LDAP user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: https://lists.apache.org/thread.html/r026540c617d334007810cd8f0068f617b5c78444be00a31fc1b03390%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r1526dbce98a138629a41daa06c13393146ddcaf8f9d273cc49d57681%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r1c32c95543d44559b8d7fd89b0a85f728c80e8b715685bbf788a15a4%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2020-6009
Published: 2020-04-01
Description: LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://learndash.releasenotes.io/release/YBfaq-version-316; https://learndash.releasenotes.io/release/YBfaq-version-316
CVE: CVE-2020-6096
Published: 2020-04-01
Description: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-195, CWE-191, CWE-681
References: https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPYXTDOOB4PQGTYAMZAZNJIB3FF6YQXI/
CVE: CVE-2020-8144
Published: 2020-04-01
Description: The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, does not validate firmware download destinations to ensure they are within the intended destination directory tree. It accepts a request with a URL to firmware update information. If the version field contains ..\ character sequences, the destination file path to save the firmware can be manipulated to be outside the intended destination directory tree. Fixed in UniFi Video Controller v3.10.3 and newer.
CVSS Score: 8.4 (HIGH)
CWE: CWE-22, CWE-22
References: https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e; https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e
CVE: CVE-2020-8145
Published: 2020-04-01
Description: The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLIC_GROUP or CUSTOM_GROUP groups, can access these endpoints and overwrite the current application configuration. This can be abused for various purposes, including adding new administrative users. Affected Products: UniFi Video Controller v3.9.3 (for Windows 7/8/10 x64) and prior. Fixed in UniFi Video Controller v3.9.6 and newer.
CVSS Score: 6.5 (MEDIUM)
References: https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e; https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e
CVE: CVE-2020-8146
Published: 2020-04-01
Description: In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the windows registry when installing UniFi-Video controller. Affected Products: UniFi Video Controller v3.10.2 (for Windows 7/8/10 x64) and prior. Fixed in UniFi Video Controller v3.10.3 and newer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e; https://community.ui.com/releases/Security-advisory-bulletin-006-006/3cf6264e-e0e6-4e26-a331-1d271f84673e
CVE: CVE-2020-1927
Published: 2020-04-02
Description: In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00002.html; http://www.openwall.com/lists/oss-security/2020/04/03/1; http://www.openwall.com/lists/oss-security/2020/04/04/1
CVE: CVE-2020-8015
Published: 2020-04-02
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.
CVSS Score: 8.4 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00010.html; https://bugzilla.suse.com/show_bug.cgi?id=1154183; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00010.html
CVE: CVE-2020-11458
Published: 2020-04-02
Description: app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a leaks of strings that match certain patterns. Among the data that can leak are passwords from database.php or GPG key passphrases from config.php.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/MISP/MISP/commit/30ff4b6451549dae7b526d4fb3a49061311ed477; https://matthias.sdfeu.org/misp-poc.py; https://github.com/MISP/MISP/commit/30ff4b6451549dae7b526d4fb3a49061311ed477
CVE: CVE-2018-13371
Published: 2020-04-02
Description: An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://fortiguard.com/advisory/FG-IR-18-230; https://fortiguard.com/advisory/FG-IR-18-230
CVE: CVE-2019-6999
Published: 2020-04-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-7008
Published: 2020-04-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-7009
Published: 2020-04-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-7010
Published: 2020-04-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none
CVE: CVE-2019-7011
Published: 2020-04-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none