deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-35846
Published: 2020-12-30
Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html; https://getcockpit.com/; https://github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466
CVE: CVE-2020-35847
Published: 2020-12-30
Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html; http://packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html; https://getcockpit.com/
CVE: CVE-2020-35848
Published: 2020-12-30
Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html; https://getcockpit.com/; https://github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466
CVE: CVE-2020-35850
Published: 2020-12-30
Description: An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/cockpit-project/cockpit/issues/15077; https://github.com/passtheticket/vulnerability-research/blob/main/cockpitProject/README.md; https://github.com/cockpit-project/cockpit/issues/15077
CVE: CVE-2020-29594
Published: 2020-12-30
Description: Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/RocketChat/Rocket.Chat/compare/3.8.2...3.8.3; https://github.com/RocketChat/Rocket.Chat/releases/tag/3.9.1; https://github.com/RocketChat/Rocket.Chat/compare/3.8.2...3.8.3
CVE: CVE-2020-29233
Published: 2020-12-30
Description: WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers and attacker can steal the cookie according to the crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49085; https://www.exploit-db.com/exploits/49085
CVE: CVE-2020-29469
Published: 2020-12-30
Description: WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacker to inject the XSS payload in the Setting - Menu and each time any user will visits the website directory, the XSS triggers and attacker can steal the cookie according to the crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49164; https://www.exploit-db.com/exploits/49164
CVE: CVE-2020-29477
Published: 2020-12-30
Description: Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field. This vulnerability can allow an attacker to inject the XSS payload in Field Name and each time any user will open that, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://invision.com; https://www.exploit-db.com/exploits/49188; http://invision.com
CVE: CVE-2020-35240
Published: 2020-12-30
Description: FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://fluxbb.org/downloads/; https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-35240.md; https://github.com/hemantsolo/CVE-Reference/issues/1
CVE: CVE-2020-35241
Published: 2020-12-30
Description: FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie according to the crafted payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/alpernae/vulnerability-research/tree/main/CVE-2020-35241; https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-35241.md; https://www.exploit-db.com/exploits/48826
CVE: CVE-2020-5809
Published: 2020-12-30
Description: A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by default in Umbraco CMS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/research/tra-2020-59; https://www.tenable.com/security/research/tra-2020-59
CVE: CVE-2020-5810
Published: 2020-12-30
Description: A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/research/tra-2020-59; https://www.tenable.com/security/research/tra-2020-59
CVE: CVE-2020-5811
Published: 2020-12-30
Description: An authenticated path traversal vulnerability exists during package installation in Umbraco CMS <= 8.9.1 or current, which could result in arbitrary files being written outside of the site home and expected paths when installing an Umbraco package.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html; https://www.tenable.com/security/research/tra-2020-59; http://packetstormsecurity.com/files/163965/Umbraco-CMS-8.9.1-Traversal-Arbitrary-File-Write.html
CVE: CVE-2020-26247
Published: 2020-12-30
Description: Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default, allowing external resources to be accessed over the network, potentially enabling XXE or SSRF attacks. This behavior is counter to the security policy followed by Nokogiri maintainers, which is to treat all input as untrusted by default whenever possible. This is fixed in Nokogiri version 1.11.0.rc4.
CVSS Score: 2.6 (LOW)
CWE: CWE-611, CWE-611
References: https://github.com/sparklemotion/nokogiri/commit/9c87439d9afa14a365ff13e73adc809cb2c3d97b; https://github.com/sparklemotion/nokogiri/releases/tag/v1.11.0.rc4; https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vr8q-g5c7-m54m
CVE: CVE-2020-27848
Published: 2020-12-30
Description: dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is vulnerable to SQL injection attacks. A user must be an authenticated manager in the dotCMS system to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/dotCMS/core/compare/v5.3.8.1...v20.10.1; https://github.com/dotCMS/core/issues/19500; https://github.com/dotCMS/core/compare/v5.3.8.1...v20.10.1
CVE: CVE-2020-28365
Published: 2020-12-30
Description: Sentrifugo 3.2 allows Stored Cross-Site Scripting (XSS) vulnerability by inserting a payload within the X-Forwarded-For HTTP header during the login process. When an administrator looks at logs, the payload is executed. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/sapplica/sentrifugo/commits/master; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-055; https://github.com/sapplica/sentrifugo/commits/master
CVE: CVE-2020-28734
Published: 2020-12-30
Description: Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt; https://github.com/plone/Products.CMFPlone/issues/3209; https://www.misakikata.com/codes/plone/python-en.html
CVE: CVE-2020-28735
Published: 2020-12-30
Description: Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role).
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt; https://github.com/plone/Products.CMFPlone/issues/3209; https://www.misakikata.com/codes/plone/python-en.html
CVE: CVE-2020-28736
Published: 2020-12-30
Description: Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata (therefore, only available to the Manager role).
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://dist.plone.org/release/5.2.3/RELEASE-NOTES.txt; https://github.com/plone/Products.CMFPlone/issues/3209; https://www.misakikata.com/codes/plone/python-en.html
CVE: CVE-2020-28925
Published: 2020-12-30
Description: Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/bolt/bolt/commit/c0cd530e78c2a8c6d71ceb75b10c251b39fb923a; https://github.com/bolt/bolt/compare/3.7.1...3.7.2; https://github.com/bolt/bolt/commit/c0cd530e78c2a8c6d71ceb75b10c251b39fb923a
CVE: CVE-2020-29228
Published: 2020-12-30
Description: EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://egavilanmedia.com; https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-29228.md; http://egavilanmedia.com
CVE: CVE-2020-29230
Published: 2020-12-30
Description: EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each time admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie according to the crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://egavilanmedia.com; https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-29230.md; http://egavilanmedia.com
CVE: CVE-2020-29231
Published: 2020-12-30
Description: EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the XSS triggers.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://egavilanmedia.com; https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-29231.md; http://egavilanmedia.com
CVE: CVE-2020-35849
Published: 2020-12-30
Description: An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnote_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://mantisbt.org/bugs/view.php?id=27370; https://mantisbt.org/bugs/view.php?id=27370
CVE: CVE-2019-12768
Published: 2020-12-30
Description: An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf
CVE: CVE-2019-12953
Published: 2020-12-30
Description: Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://matt.ucc.asn.au/dropbear/CHANGES; https://matt.ucc.asn.au/dropbear/CHANGES
CVE: CVE-2019-15078
Published: 2020-12-30
Description: An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contract and obtain cryptocurrency for free.
CVSS Score: 7.5 (HIGH)
References: https://github.com/smsecgroup/SM-VUL/tree/master/typo-vul-00; https://github.com/smsecgroup/SM-VUL/tree/master/typo-vul-00
CVE: CVE-2019-15079
Published: 2020-12-30
Description: A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free.
CVSS Score: 7.5 (HIGH)
References: https://github.com/smsecgroup/SM-VUL/tree/master/typo-vul-01; https://github.com/smsecgroup/SM-VUL/tree/master/typo-vul-01
CVE: CVE-2019-15080
Published: 2020-12-30
Description: An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract (which is inherited by MORPH Token) allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for free and can perform a DoS attack.
CVSS Score: 7.5 (HIGH)
References: https://etherscan.io/address/0x2ef27bf41236bd859a95209e17a43fbd26851f92#contracts; https://github.com/smsecgroup/SM-VUL/tree/master/typo-vul-02; https://etherscan.io/address/0x2ef27bf41236bd859a95209e17a43fbd26851f92#contracts
CVE: CVE-2020-26288
Published: 2020-12-30
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. It is an npm package "parse-server". In Parse Server before version 4.5.0, user passwords involved in LDAP authentication are stored in cleartext. This is fixed in version 4.5.0 by stripping password after authentication to prevent cleartext password storage.
CVSS Score: 7.7 (HIGH)
CWE: CWE-312
References: https://github.com/parse-community/parse-server/commit/da905a357d062ab4fea727a21eac231acc2ed92a; https://github.com/parse-community/parse-server/releases/tag/4.5.0; https://github.com/parse-community/parse-server/security/advisories/GHSA-4w46-w44m-3jq3
CVE: CVE-2020-35173
Published: 2020-12-30
Description: The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.ftpservice.FTPReceiver.ACTION_START_FTPSERVER and services.ftpservice.FTPReceiver.ACTION_STOP_FTPSERVER).
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TeamAmaze/AmazeFileManager/compare/v3.4.1...v3.4.2; https://github.com/TeamAmaze/AmazeFileManager/pull/1815; https://play.google.com/store/apps/details?id=com.amaze.filemanager&hl=en_US&gl=US
CVE: CVE-2020-35737
Published: 2020-12-30
Description: In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/160826/Newgen-Correspondence-Management-System-eGov-12.0-Insecure-Direct-Object-Reference.html; https://gist.github.com/AliAlsinan/0323e57d2345ef0b4e73c803dba93486; https://www.exploit-db.com/exploits/49378
CVE: CVE-2019-15523
Published: 2020-12-30
Description: An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-252
References: https://github.com/LINBIT/csync2/pull/13/commits/92742544a56bcbcd9ec99ca15f898b31797e39e2; https://lists.debian.org/debian-lts-announce/2021/01/msg00003.html; https://github.com/LINBIT/csync2/pull/13/commits/92742544a56bcbcd9ec99ca15f898b31797e39e2
CVE: CVE-2019-16281
Published: 2020-12-30
Description: Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/nayutaco/ptarmigan/commit/37fd8f9da3bab9d323ddd77f2fd20b6dde8bcf6c; https://github.com/nayutaco/ptarmigan/compare/v0.2.2...v0.2.3; https://github.com/nayutaco/ptarmigan/releases/tag/v0.2.3
CVE: CVE-2019-16747
Published: 2020-12-30
Description: In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/matrixssl/matrixssl/blob/4-2-2-open/doc/CHANGES_v4.x.md; https://github.com/matrixssl/matrixssl/issues/33; https://github.com/matrixssl/matrixssl/releases/tag/4-2-2-open
CVE: CVE-2020-11103
Published: 2020-12-30
Description: JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-code; https://www.webswing.org/docs/2.6/discover/release_notes.html#release-notes-2-6-12; https://bitbucket.org/meszarv/webswing/issues/375/webswing-jslink-mechanism-remote-code
CVE: CVE-2020-28095
Published: 2020-12-30
Description: On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md; https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md
CVE: CVE-2020-28413
Published: 2020-12-30
Description: In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/160750/Mantis-Bug-Tracker-2.24.3-SQL-Injection.html; https://ethicalhcop.medium.com/cve-2020-28413-blind-sql-injection-en-mantis-bug-tracker-2-24-3-api-soap-54238f8e046d; http://packetstormsecurity.com/files/160750/Mantis-Bug-Tracker-2.24.3-SQL-Injection.html
CVE: CVE-2020-26296
Published: 2020-12-30
Description: Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially crafted Vega expression, an attacker could execute arbitrary javascript on a victim's machine. This is fixed in version 5.17.3
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://github.com/vega/vega/issues/3018; https://github.com/vega/vega/pull/3019; https://github.com/vega/vega/releases/tag/v5.17.3
CVE: CVE-2020-27534
Published: 2020-12-30
Description: util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://web.archive.org/web/[PII_REDACTED]4359/https://docs.docker.com/engine/release-notes/; https://github.com/moby/buildkit/pull/1462; https://github.com/moby/moby/pull/40877
CVE: CVE-2020-26291
Published: 2020-12-31
Description: URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`\`) character followed by an at (`@`) character. If the hostname is used in security decisions, the decision may be incorrect. Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior. For example the URL `https://expected-example.com\@observed-example.com` will incorrectly return `observed-example.com` if using an affected version. Patched versions correctly return `expected-example.com`. Patched versions match the behavior of other parsers which implement the WHATWG URL specification, including web browsers and Node's built-in URL class. Version 1.19.4 is patched against all known payload variants. Version 1.19.3 has a partial patch but is still vulnerable to a payload variant.]
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/medialize/URI.js/commit/b02bf037c99ac9316b77ff8bfd840e90becf1155; https://github.com/medialize/URI.js/releases/tag/v1.19.4; https://github.com/medialize/URI.js/security/advisories/GHSA-3329-pjwv-fjpg
CVE: CVE-2019-20808
Published: 2020-12-31
Description: In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1841136; https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=aab0e2a661b2b6bf7915c0aefe807fb60d6d9d13; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-11947
Published: 2020-12-31
Description: iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.
CVSS Score: 3.8 (LOW)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/01/13/4; https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-12658
Published: 2020-12-31
Description: gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when running the code in question, so a DoS there doesn't make any sense, and there has been no additional information provided us (as upstream) to indicate why this would be a problem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-667
References: https://github.com/gssapi/gssproxy/commit/cb761412e299ef907f22cd7c4146d50c8a792003; https://github.com/gssapi/gssproxy/compare/v0.8.2...v0.8.3; https://lists.debian.org/debian-lts-announce/2021/01/msg00004.html
CVE: CVE-2020-13654
Published: 2020-12-31
Description: XWiki Platform before 12.8 mishandles escaping in the property displayer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116, CWE-116
References: https://cve.nstsec.com/cve-2020-13654; https://github.com/xwiki/xwiki-platform/compare/xwiki-platform-12.7.1...xwiki-platform-12.8; https://github.com/xwiki/xwiki-platform/pull/1315
CVE: CVE-2020-16132
Published: 2020-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-24240. Reason: This candidate is a reservation duplicate of CVE-2020-24240. Notes: All CVE users should reference CVE-2020-24240 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage