deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-10565
Published: 2019-11-06
Description: Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
CVE: CVE-2019-2246
Published: 2019-11-06
Description: Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2249
Published: 2019-11-06
Description: Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2258
Published: 2019-11-06
Description: Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129, CWE-787
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2275
Published: 2019-11-06
Description: While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends on CVE-2018-13907) in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2019-2283
Published: 2019-11-06
Description: Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2285
Published: 2019-11-06
Description: Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2302
Published: 2019-11-06
Description: While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8976, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM8150
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin; https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
CVE: CVE-2019-2323
Published: 2019-11-06
Description: Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1187
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2324
Published: 2019-11-06
Description: When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2325
Published: 2019-11-06
Description: Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2331
Published: 2019-11-06
Description: Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2019-2332
Published: 2019-11-06
Description: Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/; https://source.android.com/security/bulletin/
CVE: CVE-2010-2471
Published: 2019-11-06
Description: Drupal versions 5.x and 6.x has open redirection
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.openwall.com/lists/oss-security/2014/02/12/8; https://access.redhat.com/security/cve/cve-2010-2471; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=592716
CVE: CVE-2019-6120
Published: 2019-11-06
Description: An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a wallet via Email address allows remote attackers to submit a large number of email addresses to identify valid ones. By exploiting this vulnerability with CVE-2019-6122 (Username Enumeration) an adversary can enumerate a large number of valid users' Email addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/; https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit; https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
CVE: CVE-2019-6121
Published: 2019-11-06
Description: An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.
CVSS Score: 3.7 (LOW)
CWE: CWE-862
References: https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/; https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit; https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
CVE: CVE-2019-6122
Published: 2019-11-06
Description: A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address.
CVSS Score: 3.1 (LOW)
CWE: CWE-209
References: https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/; https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit; https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
CVE: CVE-2009-5048
Published: 2019-11-06
Description: Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt; https://security-tracker.debian.org/tracker/CVE-2009-5048; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2009-5049
Published: 2019-11-06
Description: WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt; https://security-tracker.debian.org/tracker/CVE-2009-5049; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2009-5050
Published: 2019-11-06
Description: konversation before 1.2.3 allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugs.kde.org/show_bug.cgi?id=219985; https://security-tracker.debian.org/tracker/CVE-2009-5050; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2010-4178
Published: 2019-11-06
Description: MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.securityfocus.com/bid/97960; https://access.redhat.com/security/cve/cve-2010-4178; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4178
CVE: CVE-2011-1298
Published: 2019-11-06
Description: An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://trac.webkit.org/changeset/80579; http://trac.webkit.org/changeset/81431; https://bugs.chromium.org/p/chromium/issues/detail?id=75155
CVE: CVE-2[PII_REDACTED]
Published: 2019-11-06
Description: Pagure: XSS possible in file attachment endpoint
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2[PII_REDACTED]; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7EHB2WQ46M737B2STHQTOPTBSSQJDSS/; https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2[PII_REDACTED].json
CVE: CVE-2019-5617
Published: 2019-11-06
Description: Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may change the password of any administrator-level user.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284, CWE-306
References: https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/; https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/
CVE: CVE-2019-5642
Published: 2019-11-06
Description: Rapid7 Metasploit Pro version 4.16.0[PII_REDACTED] and prior suffers from an instance of CWE-732, wherein the unique server.key is written to the file system during installation with world-readable permissions. This can allow other users of the same system where Metasploit Pro is installed to intercept otherwise private communications to the Metasploit Pro web interface.
CVSS Score: 3.3 (LOW)
CWE: CWE-732, CWE-732
References: https://help.rapid7.com/metasploit/release-notes/?rid=4.16.0[PII_REDACTED]; https://help.rapid7.com/metasploit/release-notes/?rid=4.16.0[PII_REDACTED]
CVE: CVE-2019-5643
Published: 2019-11-06
Description: Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-306
References: https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/; https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/
CVE: CVE-2019-5644
Published: 2019-11-06
Description: Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284, CWE-306
References: https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/; https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/
CVE: CVE-2009-5045
Published: 2019-11-06
Description: Dump Servlet information leak in jetty before 6.1.22.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt; https://security-tracker.debian.org/tracker/CVE-2009-5045; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2009-5046
Published: 2019-11-06
Description: JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ush.it/team/ush/hack-jetty6x7x/jetty-adv.txt; https://security-tracker.debian.org/tracker/CVE-2009-5046; https://www.openwall.com/lists/oss-security/2011/01/14/2
CVE: CVE-2014-3180
Published: 2019-11-06
Description: In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_syscall uses uninitialized data when restarting compat_sys_nanosleep. NOTE: this is disputed because the code path is unreachable
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://bugs.chromium.org/p/chromium/issues/detail?id=408827; https://lkml.org/lkml/2014/9/7/29; https://bugs.chromium.org/p/chromium/issues/detail?id=408827
CVE: CVE-2018-20853
Published: 2019-11-06
Description: An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
CVSS Score: 5.3 (MEDIUM)
References: https://wordpress.org/plugins/wysija-newsletters/#developers; https://wordpress.org/plugins/wysija-newsletters/#developers
CVE: CVE-2019-5084
Published: 2019-11-06
Description: An exploitable heap out-of-bounds write vulnerability exists in the TIF-parsing functionality of LEADTOOLS 20. A specially crafted TIF image can cause an offset beyond the bounds of a heap allocation to be written, potentially resulting in code execution. An attacker can specially craft a TIF image to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0876; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0876
CVE: CVE-2019-5099
Published: 2019-11-06
Description: An exploitable integer underflow vulnerability exists in the CMP-parsing functionality of LEADTOOLS 20. A specially crafted CMP image file can cause an integer underflow, potentially resulting in code execution. An attacker can specially craft a CMP image to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191, CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0891; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0891
CVE: CVE-2019-5100
Published: 2019-11-06
Description: An exploitable integer overflow vulnerability exists in the BMP header parsing functionality of LEADTOOLS 20. A specially crafted BMP image file can cause an integer overflow, potentially resulting in code execution. An attacker can specially craft a BMP image to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0892; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0892
CVE: CVE-2019-5125
Published: 2019-11-06
Description: An exploitable heap overflow vulnerability exists in the JPEG2000 parsing functionality of LEADTOOLS 20. A specially crafted J2K image file can cause an out of bounds write of a heap buffer, potentially resulting in code execution. An attack can specially craft a J2K image to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0916; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0916
CVE: CVE-2011-2808
Published: 2019-11-06
Description: A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=82063; http://trac.webkit.org/browser/trunk/Source/WebCore/rendering/RenderObject.h?rev=86705#L1044; http://trac.webkit.org/changeset/86976
CVE: CVE-2014-9013
Published: 2019-11-06
Description: The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmp_pp_ajax_call with an execution target of wp_insert_user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/36490/; https://www.exploit-db.com/exploits/36490/
CVE: CVE-2014-9014
Published: 2019-11-06
Description: Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://security.szurek.pl/wp-marketplace-240-arbitrary-file-download.html; https://www.exploit-db.com/exploits/36466/; https://security.szurek.pl/wp-marketplace-240-arbitrary-file-download.html
CVE: CVE-2019-12406
Published: 2019-11-06
Description: Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments. From the 3.3.4 and 3.2.11 releases, a default limit of 50 message attachments is enforced. This is configurable via the message property "attachment-max-count".
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://cxf.apache.org/security-advisories.data/CVE-2019-12406.txt.asc; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E; https://lists.apache.org/thread.html/r92238967ba2783d3ab5a483f2e17f5fdaa8ace98990f69f9e8e15de0%40%3Cissues.cxf.apache.org%3E