deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-5539
Published: 2020-03-02
Description: GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://jvn.jp/en/jp/JVN73472345/index.html; https://www.grandit.jp/etc/20200228_letter.pdf; https://jvn.jp/en/jp/JVN73472345/index.html
CVE: CVE-2018-17058
Published: 2020-03-02
Description: An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs in FileUploader.aspx by using empty w and h parameters. This file may contain arbitrary aspx code that may be executed by accessing /Jec/ProductImages/<number>/<filename>. Accessing the file once uploaded does not require authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://cyber-crime.ru/cve/CVE-2018-17058.html; http://cyber-crime.ru/cve/CVE-2018-17058.html
CVE: CVE-2020-4283
Published: 2020-03-02
Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 176206.
CVSS Score: 8.6 (HIGH)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176206; https://www.ibm.com/support/pages/node/5383395; https://exchange.xforce.ibmcloud.com/vulnerabilities/176206
CVE: CVE-2020-4292
Published: 2020-03-02
Description: IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176335; https://www.ibm.com/support/pages/node/5390193; https://exchange.xforce.ibmcloud.com/vulnerabilities/176335
CVE: CVE-2015-1583
Published: 2020-03-02
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/130598/ATutor-LCMS-2.2-Cross-Site-Request-Forgery.html; http://www.securityfocus.com/bid/72845; https://edricteo.com/cve-2015-1583-atutor-lcms-csrf-vulnerability/
CVE: CVE-2017-12580
Published: 2020-03-02
Description: An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable (for example, "ntmarta.dll"). When the installer EXE is executed by the user, the DLL located in the EXE's current directory will be loaded instead of the Windows DLL, allowing the attacker to run arbitrary code on the affected system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://support.microsoft.com/en-us/help/2389418/secure-loading-of-libraries-to-prevent-dll-preloading-attacks; https://www.fortiguard.com/zeroday/FG-VD-17-089; https://support.microsoft.com/en-us/help/2389418/secure-loading-of-libraries-to-prevent-dll-preloading-attacks
CVE: CVE-2019-12183
Published: 2020-03-02
Description: Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://github.com/ProCheckUp/SafeScan; https://procheckup.com/blogs/posts/2020/february/remote-code-execution-on-biometric-iot-devices/; https://support.timemoto.com/en/s/safescan-time-clock-systems/a/firmware-update-7-dot-03-dot-100-ta8000-14
CVE: CVE-2019-18897
Published: 2020-03-02
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Factory allows local attackers to escalate privileges from user salt to root. This issue affects: SUSE Linux Enterprise Server 12 salt-master version 2019.2.0-46.83.1 and prior versions. SUSE Linux Enterprise Server 15 salt-master version 2019.2.0-6.21.1 and prior versions. openSUSE Factory salt-master version 2019.2.2-3.1 and prior versions.
CVSS Score: 8.4 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html; https://bugzilla.suse.com/show_bug.cgi?id=1157465; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00026.html
CVE: CVE-2019-18901
Published: 2020-03-02
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html; https://bugzilla.suse.com/show_bug.cgi?id=1160895; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00007.html
CVE: CVE-2019-20486
Published: 2020-03-02
Description: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and adv_index.htm) within the web management console are vulnerable to stored XSS, as demonstrated by the configuration of the UI language.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/; https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/
CVE: CVE-2019-20487
Published: 2020-03-02
Description: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request (exploitable directly or through CSRF), as demonstrated by the setup.cgi?todo=save_htp_account URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/; https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/
CVE: CVE-2019-20488
Published: 2020-03-02
Description: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface (setup.cgi) are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/; https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/
CVE: CVE-2019-20489
Published: 2020-03-02
Description: An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface (setup.cgi) has an authentication bypass and other problems that ultimately allow an attacker to remotely compromise the device from a malicious webpage. The attacker sends an FW_remote.htm&todo=cfg_init request without a cookie, reads the Set-Cookie header in the 401 Unauthorized response, and then repeats the FW_remote.htm&todo=cfg_init request with the specified cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/; https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/august/the-netgear-wnr1000v4-round-2/
CVE: CVE-2020-5249
Published: 2020-03-02
Description: In Puma (RubyGem) before 4.3.3 and 3.12.4, if an application using Puma allows untrusted input in an early-hints header, an attacker can use a carriage return character to end the header and inject malicious content, such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself, response splitting is a vector for several other attacks, such as cross-site scripting (XSS). This is related to CVE-2020-5247, which fixed this vulnerability but only for regular responses. This has been fixed in 4.3.3 and 3.12.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-113, CWE-74
References: https://github.com/puma/puma/commit/c22712fc93284a45a93f9ad7023888f3a65524f3; https://github.com/puma/puma/security/advisories/GHSA-33vf-4xgg-9r58; https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
CVE: CVE-2020-6764
Published: 2020-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-8500
Published: 2020-03-02
Description: In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://k4m1ll0.com/cve-2020-8500.html; https://pandorafms.com/downloads/extension-uploader-feature-explained.mp4; https://k4m1ll0.com/cve-2020-8500.html
CVE: CVE-2018-11675
Published: 2020-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-14384
Published: 2020-03-02
Description: The Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability, allowing remote authenticated attackers to inject arbitrary web script or HTML via the websites.php name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-005; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-005
CVE: CVE-2019-14892
Published: 2020-03-02
Description: A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-502, CWE-502
References: https://access.redhat.com/errata/RHSA-2020:0729; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892; https://github.com/FasterXML/jackson-databind/issues/2462
CVE: CVE-2019-18902
Published: 2020-03-02
Description: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.suse.com/show_bug.cgi?id=1160903; https://bugzilla.suse.com/show_bug.cgi?id=1160903
CVE: CVE-2019-18903
Published: 2020-03-02
Description: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-2.18.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-28.26.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.9.1. openSUSE Factory wicked versions prior to 0.6.62.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.suse.com/show_bug.cgi?id=1160904; https://bugzilla.suse.com/show_bug.cgi?id=1160904
CVE: CVE-2020-1731
Published: 2020-03-02
Description: A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator generates a random admin password when installing Keycloak, however the password remains the same when deployed to the same OpenShift namespace.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-341, CWE-330
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1731; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1731
CVE: CVE-2020-8013
Published: 2020-03-02
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be controlled by attackers on default systems, so exploitation is difficult. This issue affects: SUSE Linux Enterprise Server 12 permissions versions prior to 2015.09.28.1626-17.27.1. SUSE Linux Enterprise Server 15 permissions versions prior to 20181116-9.23.1. SUSE Linux Enterprise Server 11 permissions versions prior to 2013.1.7-0.6.12.1.
CVSS Score: 2.2 (LOW)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html; https://bugzilla.suse.com/show_bug.cgi?id=1163922; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
CVE: CVE-2019-18863
Published: 2020-03-02
Description: A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0006; https://www.mitel.com/support/security-advisories
CVE: CVE-2019-19370
Published: 2020-03-02
Description: A cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel MiCollab application before 9.0.15 for Android could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the file upload interface. A successful exploit could allow an attacker to execute arbitrary scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0008; https://www.mitel.com/support/security-advisories
CVE: CVE-2019-19371
Published: 2020-03-02
Description: A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007; https://www.mitel.com/support/security-advisories
CVE: CVE-2019-19607
Published: 2020-03-02
Description: A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007; https://www.mitel.com/support/security-advisories
CVE: CVE-2019-19608
Published: 2020-03-02
Description: A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-19-0007; https://www.mitel.com/support/security-advisories
CVE: CVE-2018-15819
Published: 2020-03-02
Description: EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html; https://seclists.org/fulldisclosure/2019/Apr/13; https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html
CVE: CVE-2018-15820
Published: 2020-03-02
Description: EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html; https://seclists.org/fulldisclosure/2019/Apr/13; https://packetstormsecurity.com/files/152454/EasyIO-30P-Authentication-Bypass-Cross-Site-Scripting.html
CVE: CVE-2020-8437
Published: 2020-03-02
Description: The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html; https://forum.utorrent.com/forum/13-announcements/; https://twitter.com/va_start
CVE: CVE-2020-8776
Published: 2020-03-02
Description: Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html; https://gitlab.com/snippets/1937042; https://issues.alfresco.com/jira/browse/ALF-22110
CVE: CVE-2020-8777
Published: 2020-03-02
Description: Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html; https://gitlab.com/snippets/1937042; https://issues.alfresco.com/jira/browse/ALF-22110
CVE: CVE-2020-8778
Published: 2020-03-02
Description: Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html; https://gitlab.com/snippets/1937042; https://issues.alfresco.com/jira/browse/ALF-22110
CVE: CVE-2018-16356
Published: 2020-03-02
Description: An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/escape_wang/CVE-2018-16356; https://gitee.com/escape_wang/CVE-2018-16356
CVE: CVE-2018-16357
Published: 2020-03-02
Description: An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/escape_wang/CVE-2018-16357; https://gitee.com/escape_wang/CVE-2018-16357
CVE: CVE-2018-17572
Published: 2020-03-02
Description: InfluxDB 0.9.5 has Reflected XSS in the Write Data module.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Raghavrao29/1cb84f1f2d8ce993fd7b2d1366d35f48; https://github.com/influxdata/influxdb/releases/tag/v0.9.6; https://gist.github.com/Raghavrao29/1cb84f1f2d8ce993fd7b2d1366d35f48
CVE: CVE-2018-18479
Published: 2020-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-19284
Published: 2020-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-19599
Published: 2020-03-02
Description: Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://anh.im/image/lG1; https://github.com/monstra-cms/monstra/issues/467; https://github.com/security-provensec/CVE-2018-19599/blob/master/monstra-dev_svg.pdf
CVE: CVE-2018-19658
Published: 2020-03-02
Description: The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://yinxiang.com/security/updates/; https://yinxiang.com/security/updates/
CVE: CVE-2018-19798
Published: 2020-03-02
Description: Fleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php" file with the application/x-php Content-Type to the accidents_add.php?submit=1 URI, as demonstrated by the value_Images_1 field, which leads to remote command execution on the remote server. Any authenticated user can exploit this.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://exploit-db.com/exploits/45927; https://exploit-db.com/exploits/45927
CVE: CVE-2018-20343
Published: 2020-03-02
Description: Multiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An attacker could craft a special map file to execute arbitrary code when the map file is loaded.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/Alexandre-Bartel/CVE-2018-20343; https://github.com/Alexandre-Bartel/CVE-2018-20343
CVE: CVE-2019-14893
Published: 2020-03-02
Description: A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-502, CWE-502
References: https://access.redhat.com/errata/RHSA-2020:0729; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893; https://github.com/FasterXML/jackson-databind/issues/2469
CVE: CVE-2018-20347
Published: 2020-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-5951
Published: 2020-03-02
Description: An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Nat-Lab/CVE-2018-5951; https://github.com/Nat-Lab/CVE-2018-5951