deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-15846
Published: 2019-09-06
Description: Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash.
CVSS Score: 9.8 (CRITICAL)
References: http://exim.org/static/doc/security/CVE-2019-15846.txt; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00024.html; http://www.openwall.com/lists/oss-security/2019/09/06/2
CVE: CVE-2019-13517
Published: 2019-09-06
Description: In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account changes when the device is joined to an AD domain.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: https://www.us-cert.gov/ics/advisories/icsma-19-248-01; https://www.us-cert.gov/ics/advisories/icsma-19-248-01
CVE: CVE-2019-14813
Published: 2019-09-06
Description: A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-648, CWE-863
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=885444fcbe10dc42787ecb76686c8ee4dd33bf33; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html
CVE: CVE-2018-6240
Published: 2019-09-06
Description: NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/4804; https://nvidia.custhelp.com/app/answers/detail/a_id/4910; https://source.android.com/security/bulletin/2019-09-01
CVE: CVE-2019-13656
Published: 2019-09-06
Description: An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://packetstormsecurity.com/files/154418/CA-Common-Services-Distributed-Intelligence-Architecture-DIA-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Sep/15; https://casupport.broadcom.com/us/product-content/recommended-reading/security-notices/CA20190904-01--security-notice-for-ca-common-services-distributed-intelligence-architecture-dia.html
CVE: CVE-2019-13953
Published: 2019-09-06
Description: An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy (BLE) authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage (e.g., personal photos). An attacker can also control the camera to record or take a picture after bypassing authentication.
CVSS Score: 8.8 (HIGH)
References: https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494; https://www.cnvd.org.cn/flaw/show/CNVD-2019-23494
CVE: CVE-2018-18630
Published: 2019-09-06
Description: A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/; https://www.us-cert.gov/ics/advisories/icsma-19-241-01; https://www.hipaajournal.com/code-execution-vulnerability-identified-in-change-healthcare-cardiology-devices/
CVE: CVE-2019-14223
Published: 2019-09-06
Description: An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://community.alfresco.com/content?filterID=all~objecttype~thread%5Bquestions%5D; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-14223-Open%20Redirect%20in%20Alfresco%20Share-Alfresco%20Community; https://community.alfresco.com/content?filterID=all~objecttype~thread%5Bquestions%5D
CVE: CVE-2019-15102
Published: 2019-09-06
Description: An issue was discovered in Tyto Sahi Pro 6.x through 8.0.0. TestRunner_Non_distributed (and distributed end points) does not have any authentication mechanism. This allow an attacker to execute an arbitrary script on the remote Sahi Pro server. There is also a password-protected web interface intended for remote access to scripts. This web interface lacks server-side validation, which allows an attacker to create/modify/delete a script remotely without any password. Chaining both of these issues results in remote code execution on the Sahi Pro server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://barriersec.com/2019/08/cve-2019-15102-sahi-pro/; https://barriersec.com/2019/08/cve-2019-15102-sahi-pro/
CVE: CVE-2019-15890
Published: 2019-09-06
Description: libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html; http://www.openwall.com/lists/oss-security/2019/09/06/3; https://access.redhat.com/errata/RHSA-2020:0775
CVE: CVE-2019-16056
Published: 2019-09-06
Description: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html
CVE: CVE-2019-16058
Published: 2019-09-06
Description: An issue was discovered in the pam_p11 component 0.2.0 and 0.3.0 for OpenSC. If a smart card creates a signature with a length longer than 256 bytes, this triggers a buffer overflow. This may be the case for RSA keys with 4096 bits depending on the signature scheme.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2019/09/12/1; https://github.com/OpenSC/pam_p11/commit/d150b60e1e14c261b113f55681419ad1dfa8a76c; http://www.openwall.com/lists/oss-security/2019/09/12/1
CVE: CVE-2016-7398
Published: 2019-09-06
Description: A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: https://bugs.php.net/bug.php?id=73055; https://bugs.php.net/bug.php?id=73055&edit=1; https://github.com/m6w6/ext-http/commit/17137d4ab1ce81a2cee0fae842340a344ef3da83
CVE: CVE-2019-11925
Published: 2019-09-06
Description: Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-125
References: https://github.com/facebook/hhvm/commit/f1cd34e63c2a0d9702be3d41462db7bfd0ae7da3; https://hhvm.com/blog/2019/09/03/security-update.html; https://www.facebook.com/security/advisories/cve-2019-11925
CVE: CVE-2019-11926
Published: 2019-09-06
Description: Insufficient boundary checks when processing M_SOFx markers from JPEG headers in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between 4.9.0 and 4.15.2, and versions 4.16.0 to 4.16.3, 4.17.0 to 4.17.2, 4.18.0 to 4.18.1, 4.19.0, 4.20.0 to 4.20.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-125
References: https://github.com/facebook/hhvm/commit/f9680d21beaa9eb39d166e8810e29fbafa51ad15; https://hhvm.com/blog/2019/09/03/security-update.html; https://www.facebook.com/security/advisories/cve-2019-11926
CVE: CVE-2019-16059
Published: 2019-09-06
Description: Sentrifugo 3.2 lacks CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code at index.php/dashboard/viewprofile via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.sevenlayers.com/index.php/246-sentrifugo-3-2-csrf; https://www.sevenlayers.com/index.php/246-sentrifugo-3-2-csrf
CVE: CVE-2019-16060
Published: 2019-09-06
Description: The Airbrake Ruby notifier 4.2.3 for Airbrake mishandles the blacklist_keys configuration option and consequently may disclose passwords to unauthorized actors. This is fixed in 4.2.4 (also, 4.2.2 and earlier are unaffected).
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/airbrake/airbrake-ruby/issues/468; https://github.com/airbrake/airbrake-ruby/issues/468
CVE: CVE-2019-9854
Published: 2019-09-06
Description: LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc. Access is intended to be restricted to scripts under the share/Scripts/python, user/Scripts/python sub-directories of the LibreOffice install. Protection was added, to address CVE-2019-9852, to avoid a directory traversal attack where scripts in arbitrary locations on the file system could be executed by employing a URL encoding attack to defeat the path verification step. However this protection could be bypassed by taking advantage of a flaw in how LibreOffice assembled the final script URL location directly from components of the passed in path as opposed to solely from the sanitized output of the path verification step. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00005.html
CVE: CVE-2019-9855
Published: 2019-09-06
Description: LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added to block calling LibreLogo from script event handers. However a Windows 8.3 path equivalence handling flaw left LibreOffice vulnerable under Windows that a document could trigger executing LibreLogo via a Windows filename pseudonym. This issue affects: Document Foundation LibreOffice 6.2 versions prior to 6.2.7; 6.3 versions prior to 6.3.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-417
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00055.html; https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9855/
CVE: CVE-2019-10891
Published: 2019-09-06
Description: An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/Kirin-say/Vulnerabilities/blob/master/DIR-806_Code_Injection.md; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282; https://github.com/Kirin-say/Vulnerabilities/blob/master/DIR-806_Code_Injection.md
CVE: CVE-2019-10892
Published: 2019-09-06
Description: An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users. And it finally leads to a stack-based buffer overflow via a special HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Kirin-say/Vulnerabilities/blob/master/DIR-806_Stack_Overflow_to_Run_Shellcode.md; https://github.com/Kirin-say/Vulnerabilities/blob/master/DIR-806_Stack_Overflow_to_Run_Shellcode.md
CVE: CVE-2018-11198
Published: 2019-09-06
Description: An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mautic/mautic/releases; https://github.com/mautic/mautic/releases/tag/2.14.0; https://github.com/mautic/mautic/releases
CVE: CVE-2019-15128
Published: 2019-09-06
Description: iF.SVNAdmin through 1.6.2 allows svnadmin/usercreate.php CSRF to create a user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/; https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user/
CVE: CVE-2019-16088
Published: 2019-09-06
Description: Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://gist.github.com/RootUp/3d9e90ea5ae0799305b4c7ec66e19387; https://gist.github.com/RootUp/3d9e90ea5ae0799305b4c7ec66e19387
CVE: CVE-2019-2182
Published: 2019-09-06
Description: In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html; https://source.android.com/security/bulletin/pixel/2019-09-01; https://www.debian.org/security/2020/dsa-4698
CVE: CVE-2019-9245
Published: 2019-09-06
Description: In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9248
Published: 2019-09-06
Description: In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9270
Published: 2019-09-06
Description: In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9271
Published: 2019-09-06
Description: In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9273
Published: 2019-09-06
Description: In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9274
Published: 2019-09-06
Description: In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9275
Published: 2019-09-06
Description: In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9276
Published: 2019-09-06
Description: In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9345
Published: 2019-09-06
Description: In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9426
Published: 2019-09-06
Description: In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9436
Published: 2019-09-06
Description: In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9441
Published: 2019-09-06
Description: In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9442
Published: 2019-09-06
Description: In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System privileges required. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9443
Published: 2019-09-06
Description: In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9444
Published: 2019-09-06
Description: In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9445
Published: 2019-09-06
Description: In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html; https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9446
Published: 2019-09-06
Description: In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01
CVE: CVE-2019-9447
Published: 2019-09-06
Description: In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/pixel/2019-09-01; https://source.android.com/security/bulletin/pixel/2019-09-01