deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10021
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274; https://usn.ubuntu.com/4042-1/; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE: CVE-2019-10022
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is a NULL pointer dereference in the function Gfx::opSetExtGState in Gfx.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41273; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41273
CVE: CVE-2019-10023
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276; https://usn.ubuntu.com/4042-1/; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276
CVE: CVE-2019-10024
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE: CVE-2019-10025
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41274
CVE: CVE-2019-10026
Published: 2019-03-25
Description: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276
CVE: CVE-2019-10027
Published: 2019-03-25
Description: PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/sharemice/phpcms_xss/blob/master/index.html; https://sharemice.github.io/phpcms_xss/; https://github.com/sharemice/phpcms_xss/blob/master/index.html
CVE: CVE-2019-10016
Published: 2019-03-25
Description: GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ctrsec.io/index.php/2019/03/24/gforge-advanced-server-xss-commonsearch-php/; https://ctrsec.io/index.php/2019/03/24/gforge-advanced-server-xss-commonsearch-php/
CVE: CVE-2015-3952
Published: 2019-03-25
Description: Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01
CVE: CVE-2017-9362
Published: 2019-03-25
Description: ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://labs.integrity.pt/advisories/cve-2017-9362; https://labs.integrity.pt/advisories/cve-2017-9362
CVE: CVE-2017-9376
Published: 2019-03-25
Description: ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/107558; https://labs.integrity.pt/advisories/cve-2017-9376/; http://www.securityfocus.com/bid/107558
CVE: CVE-2015-3953
Published: 2019-03-25
Description: Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01
CVE: CVE-2015-3954
Published: 2019-03-25
Description: Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285, CWE-285
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01
CVE: CVE-2019-3476
Published: 2019-03-25
Description: Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://softwaresupport.softwaregrp.com/doc/KM03337614; https://softwaresupport.softwaregrp.com/doc/KM03337614
CVE: CVE-2019-3479
Published: 2019-03-25
Description: Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 9.8 (CRITICAL)
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-3480
Published: 2019-03-25
Description: Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-3481
Published: 2019-03-25
Description: Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-3482
Published: 2019-03-25
Description: Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-3483
Published: 2019-03-25
Description: Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 6.5 (MEDIUM)
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-3484
Published: 2019-03-25
Description: Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7.
CVSS Score: 7.8 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03355866; https://softwaresupport.softwaregrp.com/doc/KM03355866
CVE: CVE-2019-6240
Published: 2019-03-25
Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://about.gitlab.com/2019/01/16/critical-security-release-gitlab-11-dot-6-dot-4-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/01/16/critical-security-release-gitlab-11-dot-6-dot-4-released/
CVE: CVE-2015-3956
Published: 2019-03-25
Description: Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345, CWE-345
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01
CVE: CVE-2017-7510
Published: 2019-03-25
Description: In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200, CWE-522
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7510; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7510
CVE: CVE-2018-16838
Published: 2019-03-25
Description: A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284, CWE-269
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00042.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00051.html; https://access.redhat.com/errata/RHSA-2019:2177
CVE: CVE-2018-16858
Published: 2019-03-25
Description: It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
CVSS Score: 7.8 (HIGH)
CWE: CWE-356, CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00059.html; http://packetstormsecurity.com/files/152560/LibreOffice-Macro-Code-Execution.html; http://www.rapid7.com/db/modules/exploit/multi/fileformat/libreoffice_macro_exec
CVE: CVE-2019-3808
Published: 2019-03-25
Description: A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64395; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3808; https://moodle.org/mod/forum/discuss.php?d=381228#p1536765
CVE: CVE-2019-3809
Published: 2019-03-25
Description: A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-918
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3809; https://moodle.org/mod/forum/discuss.php?d=381229#p1536766
CVE: CVE-2019-3810
Published: 2019-03-25
Description: A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64372; http://packetstormsecurity.com/files/162399/Moodle-3.6.1-Cross-Site-Scripting.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3810
CVE: CVE-2019-3827
Published: 2019-03-25
Description: An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users belonging to the wheel group to further escalate its privileges by modifying system files without user's knowledge. Successful exploitation requires uncommon system configuration.
CVSS Score: 7.0 (HIGH)
CWE: CWE-863, CWE-863
References: https://access.redhat.com/errata/RHSA-2019:1517; https://access.redhat.com/errata/RHSA-2019:2145; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3827
CVE: CVE-2019-3831
Published: 2019-03-25
Description: A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3831; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3831
CVE: CVE-2019-3841
Published: 2019-03-25
Description: Kubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS certificate validation when importing data into PVCs from container registries. This could enable man-in-the-middle attacks between a container registry and the virt-cdi-component, leading to possible undetected tampering of trusted container image content.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3841; https://github.com/kubevirt/containerized-data-importer/issues/678; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3841
CVE: CVE-2019-3863
Published: 2019-03-25
Description: A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-787, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; https://access.redhat.com/errata/RHSA-2019:0679
CVE: CVE-2015-1007
Published: 2019-03-25
Description: A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe, which may allow remote code execution on Opto 22 PAC Project Professional versions prior to R9.4008, PAC Project Basic versions prior to R9.4008, PAC Display Basic versions prior to R9.4g, PAC Display Professional versions prior to R9.4g, OptoOPCServer version R9.4c and prior that were installed by PAC Project installer, versions prior to R9.4008, and OptoDataLink version R9.4d and prior that were installed by PAC Project installer, versions prior to R9.4008. Opto 22 suggests upgrading to the new product version as soon as possible.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-120-01
CVE: CVE-2015-1012
Published: 2019-03-25
Description: Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01
CVE: CVE-2015-1014
Published: 2019-03-25
Description: A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3.5 with version v7.20 of Vijeo Citect/CitectSCADA.. If the application attempts to open that file, the application could crash or allow the attacker to execute arbitrary code. Schneider Electric recommends vulnerable users upgrade the OFS to V3.5 and install the latest service pack (SP 6 or newer) for their associated version.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-141-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-141-01
CVE: CVE-2018-12652
Published: 2019-03-25
Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the LeaveEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html; https://www.securethy.com/2019/02/CVE-2018-12652-reflected-XSS.html; https://www.knowcybersec.com/2019/02/CVE-2018-12652-reflected-XSS.html
CVE: CVE-2018-12653
Published: 2019-03-25
Description: A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html; https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html; https://www.securethy.com/2019/02/CVE-2018-12653-reflected-XSS.html
CVE: CVE-2019-10011
Published: 2019-03-25
Description: ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://medium.com/%40mdavis332/higher-ed-erp-portal-vulnerability-create-your-own-accounts-d865bd22cdd8; https://medium.com/%40mdavis332/higher-ed-erp-portal-vulnerability-create-your-own-accounts-d865bd22cdd8
CVE: CVE-2019-10012
Published: 2019-03-25
Description: Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the moxiemanager directory within the installation folder ICS\ICS.NET\ICSFileServer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://medium.com/%40mdavis332/critical-vulnerability-in-higher-ed-erp-55580f8880c; https://www.sjoerdlangkemper.nl/2016/09/15/uploading-webshells-with-moxiemanager/; https://medium.com/%40mdavis332/critical-vulnerability-in-higher-ed-erp-55580f8880c
CVE: CVE-2019-10039
Published: 2019-03-25
Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_web_and_sys_account/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_web_and_sys_account/README.md
CVE: CVE-2019-10040
Published: 2019-03-25
Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/remote_cmd_exec_0/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/remote_cmd_exec_0/README.md
CVE: CVE-2019-10041
Published: 2019-03-25
Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_sys_account/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/edit_sys_account/README.md
CVE: CVE-2019-10042
Published: 2019-03-25
Description: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/reset_router/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-816/reset_router/README.md
CVE: CVE-2019-3395
Published: 2019-03-25
Description: The WebDAV endpoint in Atlassian Confluence Server and Data Center before version 6.6.7 (the fixed version for 6.6.x), from version 6.7.0 before 6.8.5 (the fixed version for 6.8.x), and from version 6.9.0 before 6.9.3 (the fixed version for 6.9.x) allows remote attackers to send arbitrary HTTP and WebDAV requests from a Confluence Server or Data Center instance via Server-Side Request Forgery.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://jira.atlassian.com/browse/CONFSERVER-57971; https://jira.atlassian.com/browse/CONFSERVER-57971
CVE: CVE-2019-3396
Published: 2019-03-25
Description: The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/152568/Atlassian-Confluence-Widget-Connector-Macro-Velocity-Template-Injection.html; http://packetstormsecurity.com/files/161065/Atlassian-Confluence-6.12.1-Template-Injection.html; http://www.rapid7.com/db/modules/exploit/multi/http/confluence_widget_connector
CVE: CVE-2019-3835
Published: 2019-03-25
Description: It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-648, CWE-862
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html; http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html