deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-2252
Published: 2020-09-16
Description: Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2253
Published: 2020-09-16
Description: Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1851; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2254
Published: 2020-09-16
Description: Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2255
Published: 2020-09-16
Description: A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1961; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2256
Published: 2020-09-16
Description: Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1976; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2257
Published: 2020-09-16
Description: Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1935; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2258
Published: 2020-09-16
Description: Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1998; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2259
Published: 2020-09-16
Description: Jenkins computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1912; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2260
Published: 2020-09-16
Description: A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1979; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2261
Published: 2020-09-16
Description: Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1980; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2262
Published: 2020-09-16
Description: Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1908; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2263
Published: 2020-09-16
Description: Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1927; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2264
Published: 2020-09-16
Description: Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1914; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2265
Published: 2020-09-16
Description: Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1913; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2266
Published: 2020-09-16
Description: Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1916; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2267
Published: 2020-09-16
Description: A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2268
Published: 2020-09-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2269
Published: 2020-09-16
Description: Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to configure views.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1869; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2270
Published: 2020-09-16
Description: Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1911; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2271
Published: 2020-09-16
Description: Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files' names in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1921; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2272
Published: 2020-09-16
Description: A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1903; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2273
Published: 2020-09-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1903; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2274
Published: 2020-09-16
Description: Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-2014; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2275
Published: 2020-09-16
Description: Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1966; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2276
Published: 2020-09-16
Description: Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing attackers with Job/Configure permission to execute an arbitrary system command on the Jenkins controller as the OS user that the Jenkins process is running as.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1967; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2277
Published: 2020-09-16
Description: Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1968%20%281%29; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-2278
Published: 2020-09-16
Description: Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2020/09/16/3; https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1968%20%282%29; http://www.openwall.com/lists/oss-security/2020/09/16/3
CVE: CVE-2020-7733
Published: 2020-09-16
Description: The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/faisalman/ua-parser-js/commit/233d3bae22a795153a7e6638887ce159c63e557d; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-674666; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-674665
CVE: CVE-2020-10733
Published: 2020-09-16
Description: The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426, CWE-426
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.postgresql.org/about/news/2038/; https://www.postgresql.org/support/security/11/
CVE: CVE-2020-14382
Published: 2020-09-16
Description: A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1874712; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OJTQ4KSVCW2NMSU5WFVPOHY46WMNF4OB/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD6YSD63LLRRC4WQ7DJLSXWNUCY6FWBM/
CVE: CVE-2020-1710
Published: 2020-09-16
Description: The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
CVSS Score: 5.3 (MEDIUM)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1793970; https://bugzilla.redhat.com/show_bug.cgi?id=1793970
CVE: CVE-2020-24889
Published: 2020-09-16
Description: A buffer overflow vulnerability in LibRaw version < 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize_model.cpp may lead to context-dependent arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/LibRaw/LibRaw/issues/334; https://security.gentoo.org/glsa/202010-05; https://github.com/LibRaw/LibRaw/issues/334
CVE: CVE-2020-24890
Published: 2020-09-16
Description: libraw 20.0 has a null pointer dereference vulnerability in parse_tiff_ifd in src/metadata/tiff.cpp, which may result in context-dependent arbitrary code execution. Note: this vulnerability occurs only if you compile the software in a certain way
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/LibRaw/LibRaw/issues/335; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWHUZCRMGOC3QS6C65KWBM6ZJM25V6HI/; https://security.gentoo.org/glsa/202010-05
CVE: CVE-2020-24891
Published: 2020-09-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-25614
Published: 2020-09-16
Description: xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-119
References: https://github.com/antchfx/xmlquery/compare/v1.3.0...v1.3.1; https://github.com/antchfx/xmlquery/issues/39; https://github.com/antchfx/xmlquery/compare/v1.3.0...v1.3.1
CVE: CVE-2014-10402
Published: 2020-09-16
Description: An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-732
References: https://lists.debian.org/debian-lts-announce/2022/05/msg00046.html; https://rt.cpan.org/Public/Bug/Display.html?id=99508#txn-1911590; https://lists.debian.org/debian-lts-announce/2022/05/msg00046.html
CVE: CVE-2020-10758
Published: 2020-09-16
Description: A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=1843849; https://github.com/keycloak/keycloak/commit/bee4ca89897766c4b68856eafe14f1a3dad34251; https://bugzilla.redhat.com/show_bug.cgi?id=1843849
CVE: CVE-2020-1748
Published: 2020-09-16
Description: A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1807707; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1807707
CVE: CVE-2020-4409
Published: 2020-09-16
Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 179537.
CVSS Score: 8.2 (HIGH)
CWE: CWE-601
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/179537; https://www.ibm.com/support/pages/node/6333091; https://exchange.xforce.ibmcloud.com/vulnerabilities/179537
CVE: CVE-2020-4708
Published: 2020-09-16
Description: IBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a wildcard in the Access-Control-Allow-Origin header. IBM X-Force ID: 187371.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/187371; https://www.ibm.com/support/pages/node/6333049; https://exchange.xforce.ibmcloud.com/vulnerabilities/187371
CVE: CVE-2020-7528
Published: 2020-09-16
Description: A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://www.se.com/ww/en/download/document/SEVD-2020-252-01/; https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE: CVE-2020-7529
Published: 2020-09-16
Description: A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://www.se.com/ww/en/download/document/SEVD-2020-252-01/; https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE: CVE-2020-7530
Published: 2020-09-16
Description: A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://www.se.com/ww/en/download/document/SEVD-2020-252-01/; https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE: CVE-2020-7531
Published: 2020-09-16
Description: A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.se.com/ww/en/download/document/SEVD-2020-252-01/; https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE: CVE-2020-7532
Published: 2020-09-16
Description: A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://www.se.com/ww/en/download/document/SEVD-2020-252-01/; https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
CVE: CVE-2020-3980
Published: 2020-09-16
Description: VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.
CVSS Score: 6.7 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html
CVE: CVE-2020-3986
Published: 2020-09-16
Description: VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://www.vmware.com/security/advisories/VMSA-2020-0020.html; https://www.vmware.com/security/advisories/VMSA-2020-0020.html