deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10656
Published: 2019-03-30
Description: Grandstream GWN7000 before 1.0.6.32 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/uci.apply update_nds_webroot_from_tmp API call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10657
Published: 2019-03-30
Description: Grandstream GWN7000 before 1.0.6.32 and GWN7610 before 1.0.8.18 devices allow remote authenticated users to discover passwords via a /ubus/uci.apply config request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10658
Published: 2019-03-30
Description: Grandstream GWN7610 before 1.0.8.18 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the filename in a /ubus/controller.icc.update_nds_webroot_from_tmp update_nds_webroot_from_tmp API call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10659
Published: 2019-03-30
Description: Grandstream GXV3370 before 1.0.1.41 and WP820 before 1.0.3.6 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in a /manager?action=getlogcat priority field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10660
Published: 2019-03-30
Description: Grandstream GXV3611IR_HD before 1.0.3.23 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the /goform/systemlog?cmd=set logserver field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10661
Published: 2019-03-30
Description: On Grandstream GXV3611IR_HD before 1.0.3.23 devices, the root account lacks a password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10662
Published: 2019-03-30
Description: Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to execute arbitrary code via shell metacharacters in the backupUCMConfig file-backup parameter to the /cgi? URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/scarvell/grandstream_exploits; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://github.com/scarvell/grandstream_exploits
CVE: CVE-2019-10663
Published: 2019-03-30
Description: Grandstream UCM6204 before 1.0.19.20 devices allow remote authenticated users to conduct SQL injection attacks via the sord parameter in a listCodeblueGroup API call to the /cgi? URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=23920&dl=1
CVE: CVE-2019-10664
Published: 2019-03-31
Description: Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html; https://github.com/domoticz/domoticz/commit/ee70db46f81afa582c96b887b73bcd2a86feda00; https://www.exploit-db.com/exploits/46773/
CVE: CVE-2019-10672
Published: 2019-03-31
Description: treeRead in hdf/btree.c in libmysofa before 0.7 does not properly validate multiplications and additions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/hoene/libmysofa/commit/d39a171e9c6a1c44dbdf43f9db6c3fbd887e38c1; https://github.com/hoene/libmysofa/compare/49aa1c7...2ed84bb; https://github.com/hoene/libmysofa/releases/tag/v0.7
CVE: CVE-2019-10675
Published: 2019-03-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-10678
Published: 2019-03-31
Description: Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.
CVSS Score: 7.5 (HIGH)
CWE: CWE-93
References: http://packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html; https://github.com/domoticz/domoticz/commit/2119afbe74ee0c914c1d5c4c859c594c08b0ad42; https://www.exploit-db.com/exploits/46773/
CVE: CVE-2014-7198
Published: 2019-04-01
Description: OMERO before 5.0.6 has multiple CSRF vulnerabilities because the framework for OMERO's web interface lacks CSRF protection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://lists.openmicroscopy.org.uk/pipermail/ome-users/2014-November/004871.html; https://www.openmicroscopy.org/security/advisories/2014-SV3-csrf/; http://lists.openmicroscopy.org.uk/pipermail/ome-users/2014-November/004871.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-01
Description: In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application/json-patch+json"`) that consumes excessive resources while processing, causing a Denial of Service on the API Server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/107290; https://access.redhat.com/errata/RHSA-2019:1851; https://access.redhat.com/errata/RHSA-2019:3239
CVE: CVE-2[PII_REDACTED]
Published: 2019-04-01
Description: The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7, v1.13.5, and v1.14.0.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2019/06/21/1; http://www.openwall.com/lists/oss-security/2019/08/05/5; http://www.securityfocus.com/bid/107652
CVE: CVE-2017-16774
Published: 2019-04-01
Description: Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_18_26; https://www.synology.com/security/advisory/Synology_SA_18_26
CVE: CVE-2017-16775
Published: 2019-04-01
Description: Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVSS Score: 7.1 (HIGH)
CWE: CWE-1021, CWE-20
References: https://www.synology.com/security/advisory/Synology_SA_18_28; https://www.synology.com/security/advisory/Synology_SA_18_28
CVE: CVE-2018-13283
Published: 2019-04-01
Description: Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the (1) command, (2) hostname, or (3) port parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-671
References: https://www.synology.com/security/advisory/Synology_SA_18_30; https://www.synology.com/security/advisory/Synology_SA_18_30
CVE: CVE-2018-13284
Published: 2019-04-01
Description: Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.synology.com/security/advisory/Synology_SA_18_33; https://www.synology.com/security/advisory/Synology_SA_18_33
CVE: CVE-2018-13285
Published: 2019-04-01
Description: Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.synology.com/security/advisory/Synology_SA_18_34; https://www.synology.com/security/advisory/Synology_SA_18_34
CVE: CVE-2018-13286
Published: 2019-04-01
Description: Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.synology.com/security/advisory/Synology_SA_18_33; https://www.synology.com/security/advisory/Synology_SA_18_33
CVE: CVE-2018-13287
Published: 2019-04-01
Description: Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.synology.com/security/advisory/Synology_SA_18_34; https://www.synology.com/security/advisory/Synology_SA_18_34
CVE: CVE-2018-13288
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_35; https://www.synology.com/security/advisory/Synology_SA_18_35
CVE: CVE-2018-13289
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the (1) folder_path or (2) real_path parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_48; https://www.synology.com/security/advisory/Synology_SA_18_48
CVE: CVE-2018-13290
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the file_path parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_48; https://www.synology.com/security/advisory/Synology_SA_18_48
CVE: CVE-2018-13291
Published: 2019-04-01
Description: Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_51; https://www.synology.com/security/advisory/Synology_SA_18_51
CVE: CVE-2018-13292
Published: 2019-04-01
Description: Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_48; https://www.synology.com/security/advisory/Synology_SA_18_48
CVE: CVE-2018-13293
Published: 2019-04-01
Description: Cross-site scripting (XSS) vulnerability in Control Panel SSO Settings in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_18_51; https://www.synology.com/security/advisory/Synology_SA_18_51
CVE: CVE-2018-13294
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_40; https://www.synology.com/security/advisory/Synology_SA_18_40
CVE: CVE-2018-13295
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_40; https://www.synology.com/security/advisory/Synology_SA_18_40
CVE: CVE-2018-13296
Published: 2019-04-01
Description: Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://www.synology.com/security/advisory/Synology_SA_18_43; https://www.synology.com/security/advisory/Synology_SA_18_43
CVE: CVE-2018-13297
Published: 2019-04-01
Description: Information exposure vulnerability in SYNO.SynologyDrive.Files in Synology Drive before 1.1.2-10562 allows remote attackers to obtain sensitive system information via the dsm_path parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_18_50; https://www.synology.com/security/advisory/Synology_SA_18_50
CVE: CVE-2018-13298
Published: 2019-04-01
Description: Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-300
References: https://www.synology.com/security/advisory/Synology_SA_18_52; https://www.synology.com/security/advisory/Synology_SA_18_52
CVE: CVE-2018-13299
Published: 2019-04-01
Description: Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_18_54; https://www.synology.com/security/advisory/Synology_SA_18_54
CVE: CVE-2018-8913
Published: 2019-04-01
Description: Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL.
CVSS Score: 7.1 (HIGH)
CWE: CWE-756, CWE-601
References: https://www.synology.com/security/advisory/Synology_SA_18_29; https://www.synology.com/security/advisory/Synology_SA_18_29
CVE: CVE-2019-3836
Published: 2019-04-01
Description: It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-456, CWE-824
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html; https://access.redhat.com/errata/RHSA-2019:3600; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836
CVE: CVE-2019-3876
Published: 2019-04-01
Description: A flaw was found in the /oauth/token/request custom endpoint of the OpenShift OAuth server allowing for XSS generation of CLI tokens due to missing X-Frame-Options and CSRF protections. If not otherwise prevented, a separate XSS vulnerability via JavaScript could further allow for the extraction of these tokens.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/107664; https://access.redhat.com/errata/RHSA-2019:1851; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3876
CVE: CVE-2019-10684
Published: 2019-04-01
Description: Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit site_domain parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/kyrie403/Vuln/blob/master/74cms/74cms%20v5.0.1%20remote%20code%20execution.md; https://github.com/kyrie403/Vuln/blob/master/74cms/74cms%20v5.0.1%20remote%20code%20execution.md
CVE: CVE-2019-5888
Published: 2019-04-01
Description: Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/
CVE: CVE-2019-5889
Published: 2019-04-01
Description: An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/
CVE: CVE-2019-5890
Published: 2019-04-01
Description: An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/
CVE: CVE-2019-5891
Published: 2019-04-01
Description: An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application.
CVSS Score: 9.8 (CRITICAL)
References: https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/; https://web.archive.org/web/[PII_REDACTED]2627/https://www.quantumleap.it/geocall-v-6-3-multiple-vulnerabilities/
CVE: CVE-2018-5757
Published: 2019-04-01
Description: An issue was discovered on AudioCodes 450HD IP Phone devices with firmware 3.0.0.535.106. The traceroute and ping functionality, which uses a parameter in a request to command.cgi from the Monitoring page in the web UI, unsafely puts user-alterable data directly into an OS command, leading to Remote Code Execution via shell metacharacters in the query string.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-5757; https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-5757
CVE: CVE-2019-10686
Published: 2019-04-01
Description: An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://github.com/ctripcorp/apollo/issues/2103; https://github.com/ctripcorp/apollo/issues/2103
CVE: CVE-2019-9132
Published: 2019-04-01
Description: Remote code execution vulnerability exists in KaKaoTalk PC messenger when user clicks specially crafted link in the message window. This affects KaKaoTalk windows version 2.7.5.2024 or lower.
CVSS Score: 8.8 (HIGH)
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=34981; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=34981
CVE: CVE-2019-5523
Published: 2019-04-01
Description: VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider Portals. Successful exploitation of this issue may allow a malicious actor to access the Tenant or Provider Portals by impersonating a currently logged in session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: http://packetstormsecurity.com/files/152289/VMware-Security-Advisory-2019-0004.html; http://www.securityfocus.com/bid/107638; https://www.vmware.com/security/advisories/VMSA-2019-0004.html
CVE: CVE-2018-4050
Published: 2019-04-01
Description: An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0724; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0724
CVE: CVE-2019-8956
Published: 2019-04-01
Description: In the Linux Kernel before versions 4.20.8 and 4.19.21 a use-after-free error in the "sctp_sendmsg()" function (net/sctp/socket.c) when handling SCTP_SENDALL flag can be exploited to corrupt memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.8; https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=ba59fb[PII_REDACTED]f0add4311faa990a5eec27c0
CVE: CVE-2019-3489
Published: 2019-04-01
Description: An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://softwaresupport.softwaregrp.com/doc/KM03359911; https://softwaresupport.softwaregrp.com/doc/KM03359911
CVE: CVE-2019-6715
Published: 2019-04-01
Description: pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Directory-Traversal.html; https://vinhjaxt.github.io/2019/03/cve-2019-6715; http://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Directory-Traversal.html