deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-15050
Published: 2020-07-13
Description: An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/158576/Bio-Star-2.8.2-Local-File-Inclusion.html; https://www.supremainc.com/en/support/biostar-2-pakage.asp; http://packetstormsecurity.com/files/158576/Bio-Star-2.8.2-Local-File-Inclusion.html
CVE: CVE-2020-14300
Published: 2020-07-13
Description: The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in that update was the fix for CVE-2016-9962, that was previously corrected in the docker packages in Red Hat Enterprise Linux 7 Extras via RHSA-2017:0116 (https://access.redhat.com/errata/RHSA-2017:0116). The CVE-2020-14300 was assigned to this security regression and it is specific to the docker packages produced by Red Hat. The original issue - CVE-2016-9962 - could possibly allow a process inside container to compromise a process entering container namespace and execute arbitrary code outside of the container. This could lead to compromise of the container host or other containers running on the same container host. This issue only affects a single version of Docker, 1.13.1-108.git4ef4b30, shipped in Red Hat Enterprise Linux 7. Both earlier and later versions are not affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-273
References: https://access.redhat.com/errata/RHBA-2020:0427; https://access.redhat.com/security/cve/CVE-2016-9962; https://access.redhat.com/security/vulnerabilities/cve-2016-9962
CVE: CVE-2020-11951
Published: 2020-07-14
Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/; https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE: CVE-2020-11952
Published: 2020-07-14
Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu.
CVSS Score: 6.2 (MEDIUM)
References: https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/; https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE: CVE-2020-12025
Published: 2020-07-14
Description: Rockwell Automation Logix Designer Studio 5000 Versions 32.00, 32.01, and 32.02 vulnerable to an xml external entity (XXE) vulnerability, which may allow an attacker to view hostnames or other resources from the program.
CVSS Score: 3.3 (LOW)
CWE: CWE-611, CWE-611
References: https://us-cert.cisa.gov/ics/advisories/icsa-20-191-02; https://us-cert.cisa.gov/ics/advisories/icsa-20-191-02
CVE: CVE-2020-13925
Published: 2020-07-14
Description: Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E; https://lists.apache.org/thread.html/r250a867961cfd6e0506240a9c7eaee782d84c6ab0091c7c4bc45f3eb%40%3Cuser.kylin.apache.org%3E; https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
CVE: CVE-2020-13926
Published: 2020-07-14
Description: Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be overwritten by certain rest api, which makes SQL injection attack is possible. Users of all previous versions after 2.0 should upgrade to 3.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E; https://lists.apache.org/thread.html/r63d5663169e866d44ff[PII_REDACTED]337cff7d9cf61cc3839e86163fd%40%3Cuser.kylin.apache.org%3E; https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf%40%3Ccommits.kylin.apache.org%3E
CVE: CVE-2020-15711
Published: 2020-07-14
Description: In MISP before 2.4.129, setting a favourite homepage was not CSRF protected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8; https://github.com/MISP/MISP/compare/v2.4.128...v2.4.129; https://github.com/MISP/MISP/commit/bf4610c947c7dc372c4078f363d2dff6ae0703a8
CVE: CVE-2020-4364
Published: 2020-07-14
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178961.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178961; https://www.ibm.com/support/pages/node/6246139; https://exchange.xforce.ibmcloud.com/vulnerabilities/178961
CVE: CVE-2020-4510
Published: 2020-07-14
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 182365.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182365; https://www.ibm.com/support/pages/node/6246133; https://exchange.xforce.ibmcloud.com/vulnerabilities/182365
CVE: CVE-2020-4511
Published: 2020-07-14
Description: IBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflow command. IBM X-Force ID: 182366.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182366; https://www.ibm.com/support/pages/node/6246135; https://exchange.xforce.ibmcloud.com/vulnerabilities/182366
CVE: CVE-2020-4512
Published: 2020-07-14
Description: IBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182367; https://www.ibm.com/support/pages/node/6246229; https://exchange.xforce.ibmcloud.com/vulnerabilities/182367
CVE: CVE-2020-4513
Published: 2020-07-14
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182368.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182368; https://www.ibm.com/support/pages/node/6246131; https://exchange.xforce.ibmcloud.com/vulnerabilities/182368
CVE: CVE-2020-6267
Published: 2020-07-14
Description: Some sensitive cookies in SAP Disclosure Management, version 10.1, are missing HttpOnly flag, leading to sensitive cookie without Http Only flag.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1004, CWE-732
References: https://launchpad.support.sap.com/#/notes/2758000; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2758000
CVE: CVE-2020-6276
Published: 2020-07-14
Description: SAP Business Objects Business Intelligence Platform (bipodata), version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2849967; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2849967
CVE: CVE-2020-6278
Published: 2020-07-14
Description: SAP Business Objects Business Intelligence Platform (BI Launchpad and CMC), versions 4.1, 4.2, allows to an attacker to embed malicious scripts in the application while uploading images, which gets executed when the victim opens these files, leading to Stored Cross Site Scripting
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2912708; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2912708
CVE: CVE-2020-6280
Published: 2020-07-14
Description: SAP NetWeaver (ABAP Server) and ABAP Platform, versions 731, 740, 750, allows an attacker with admin privileges to access certain files which should otherwise be restricted, leading to Information Disclosure.
CVSS Score: 2.7 (LOW)
References: https://launchpad.support.sap.com/#/notes/2927373; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2927373
CVE: CVE-2020-6281
Published: 2020-07-14
Description: SAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not sufficiently encode user-controlled inputs, resulting reflected in Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/2917743; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2917743
CVE: CVE-2020-6282
Published: 2020-07-14
Description: SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: https://launchpad.support.sap.com/#/notes/2896025; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2896025
CVE: CVE-2020-6285
Published: 2020-07-14
Description: SAP NetWeaver - XML Toolkit for JAVA (ENGINEAPI) (versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50), under certain conditions allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/2932473; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2932473
CVE: CVE-2020-6286
Published: 2020-07-14
Description: The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://launchpad.support.sap.com/#/notes/2934135; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2934135
CVE: CVE-2020-6287
Published: 2020-07-14
Description: SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system, leading to Missing Authentication Check.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://packetstormsecurity.com/files/162085/SAP-JAVA-Configuration-Task-Execution.html; http://seclists.org/fulldisclosure/2021/Apr/6; https://launchpad.support.sap.com/#/notes/2934135
CVE: CVE-2020-6289
Published: 2020-07-14
Description: SAP Disclosure Management, version 10.1, had insufficient protection against Cross-Site Request Forgery, which could be used to trick user in to browsing malicious site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://launchpad.support.sap.com/#/notes/2758000; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2758000
CVE: CVE-2020-6290
Published: 2020-07-14
Description: SAP Disclosure Management, version 10.1, is vulnerable to Session Fixation attacks wherein the attacker tricks the user into using a specific session ID.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-384
References: https://launchpad.support.sap.com/#/notes/2758000; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2758000
CVE: CVE-2020-6291
Published: 2020-07-14
Description: SAP Disclosure Management, version 10.1, session mechanism does not have expiration data set therefore allows unlimited access after authenticating once, leading to Insufficient Session Expiration
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://launchpad.support.sap.com/#/notes/2758000; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2758000
CVE: CVE-2020-6292
Published: 2020-07-14
Description: Logout mechanism in SAP Disclosure Management, version 10.1, does not invalidate one of the session cookies, leading to Insufficient Session Expiration.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613, CWE-613
References: https://launchpad.support.sap.com/#/notes/2758000; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675; https://launchpad.support.sap.com/#/notes/2758000
CVE: CVE-2020-10037
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10038
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the device's web server might be able to execute administrative commands without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10039
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to the transmitted data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-311
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10040
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to retrieve some passwords in clear text.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-916, CWE-916
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10041
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in different locations of the web application. An attacker might be able to take over a session of a legitimate user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10042
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might enable an attacker with access to the web application to execute arbitrary code over the network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10043
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10044
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install specially crafted firmware to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-10045
Published: 2020-07-14
Description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-294, CWE-294
References: https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf
CVE: CVE-2020-11953
Published: 2020-07-14
Description: An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices. Attackers can execute code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/; https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE: CVE-2020-11955
Published: 2020-07-14
Description: An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/; https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE: CVE-2020-11956
Published: 2020-07-14
Description: An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/; https://sec-consult.com/en/blog/advisories/multiple-critical-vulnerabilities-in-multiple-rittal-products-based-on-same-software/
CVE: CVE-2020-13753
Published: 2020-07-14
Description: The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute commands outside the sandbox by writing to the controlling terminal's input buffer, similar to CVE-2017-5226.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00074.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GER2ATKZXDHM7FFYJH67ZPNZZX5VOUVM/; https://security.gentoo.org/glsa/202007-11
CVE: CVE-2020-15719
Published: 2020-07-14
Description: libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html; https://access.redhat.com/errata/RHBA-2019:3674
CVE: CVE-2020-15720
Published: 2020-07-14
Description: In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter was hard-coded in all request functions, it was not possible to override the setting. As a result, tools making use of this class, such as the pki-server command, may have been vulnerable to Person-in-the-Middle attacks in certain non-localhost use cases. This is fixed in 10.9.0-b1.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=1855273; https://github.com/dogtagpki/pki/commit/50c23ec146ee9abf28c9de87a5f7787d495f0b72; https://github.com/dogtagpki/pki/compare/v10.9.0-a2...v10.9.0-b1
CVE: CVE-2020-1948
Published: 2020-07-14
Description: This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://lists.apache.org/thread.html/rbaa41711b3e7a8cd20e[PII_REDACTED]ddd079ddc12f90180f86e76523c%40%3Csecurity.dubbo.apache.org%3E; https://nsfocusglobal.com/apache-dubbo-remote-code-execution-vulnerability-cve-2020-1948-threat-alert/; https://lists.apache.org/thread.html/rbaa41711b3e7a8cd20e[PII_REDACTED]ddd079ddc12f90180f86e76523c%40%3Csecurity.dubbo.apache.org%3E
CVE: CVE-2020-7576
Published: 2020-07-14
Description: A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf