deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-7050
Published: 2020-02-15
Description: Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is opened. Because session cookies lack the HttpOnly flag, it is possible to steal authentication cookies and take over accounts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-732
References: https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845; https://www.linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity[PII_REDACTED]540054528-dDgg/; https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845
CVE: CVE-2020-8996
Published: 2020-02-16
Description: AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/codingdream/anyshare_vul; https://github.com/codingdream/anyshare_vul
CVE: CVE-2020-8997
Published: 2020-02-16
Description: Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S (announced in August 2018) and FreeStyle Libre 2 outside the U.S (announced in October 2018).
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/zeroday/FG-VD-19-112; https://fortiguard.com/zeroday/FG-VD-19-112
CVE: CVE-2019-20456
Published: 2020-02-16
Description: Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escalation via DLL hijacking.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.goverlan.com/knowledge/article/security-advisory-govsa-2019-1028-1-local-privilege-escalation-2/; https://www.goverlan.com/knowledge/article/security-advisory-govsa-2019-1028-1-local-privilege-escalation-2/
CVE: CVE-2020-9007
Published: 2020-02-16
Description: Codoforum 4.8.8 allows self-XSS via the title of a new topic.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/matuhn/Research/blob/master/codoforum/readme.md; https://github.com/matuhn/Research/blob/master/codoforum/readme.md
CVE: CVE-2020-9012
Published: 2020-02-16
Description: A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.gluu.org/other/7992/reflected-cross-site-scripting-on-import-people/; https://support.gluu.org/other/7992/reflected-cross-site-scripting-on-import-people/
CVE: CVE-2020-9013
Published: 2020-02-16
Description: Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://twitter.com/GerardFuguet/status/[PII_REDACTED]88758529; https://www.exploit-db.com/docs/48175; https://www.youtube.com/watch?v=Ok1UmRFWoLY
CVE: CVE-2020-9016
Published: 2020-02-16
Description: Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html; https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html
CVE: CVE-2020-9034
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.
CVSS Score: 7.5 (HIGH)
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver_27.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver_27.html
CVE: CVE-2020-9020
Published: 2020-02-17
Description: Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit-os.html; https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit-os.html
CVE: CVE-2020-9021
Published: 2020-02-17
Description: Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/post-oak-traffic-systems-awam-bluetooth.html; https://sku11army.blogspot.com/2020/01/post-oak-traffic-systems-awam-bluetooth.html
CVE: CVE-2020-9022
Published: 2020-02-17
Description: An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/xirrus-xirrus-wifi-xss.html; https://sku11army.blogspot.com/2020/01/xirrus-xirrus-wifi-xss.html
CVE: CVE-2020-9023
Published: 2020-02-17
Description: Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit-no.html; https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit-no.html
CVE: CVE-2020-9024
Published: 2020-02-17
Description: Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit.html; https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit.html
CVE: CVE-2020-9025
Published: 2020-02-17
Description: Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit_26.html; https://sku11army.blogspot.com/2020/01/iteris-vantage-velocity-field-unit_26.html
CVE: CVE-2020-9026
Published: 2020-02-17
Description: ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/eltex-devices-ntp-rg-1402g-ntp-2-os.html; https://sku11army.blogspot.com/2020/01/eltex-devices-ntp-rg-1402g-ntp-2-os.html
CVE: CVE-2020-9027
Published: 2020-02-17
Description: ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sku11army.blogspot.com/2020/01/eltex-devices-ntp-rg-1402g-ntp-2-os.html; https://sku11army.blogspot.com/2020/01/eltex-devices-ntp-rg-1402g-ntp-2-os.html
CVE: CVE-2020-9028
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion and Password Maintenance" screen (when creating a new user).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver_95.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver_95.html
CVE: CVE-2020-9029
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
CVE: CVE-2020-9030
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
CVE: CVE-2020-9031
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
CVE: CVE-2020-9032
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
CVE: CVE-2020-9033
Published: 2020-02-17
Description: Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html; https://sku11army.blogspot.com/2020/01/symmetricom-syncserver.html
CVE: CVE-2020-5531
Published: 2020-02-17
Description: Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/en/vu/JVNVU95424547/index.html; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2019-003_en.pdf; https://jvn.jp/en/vu/JVNVU95424547/index.html
CVE: CVE-2020-7252
Published: 2020-02-17
Description: Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-250, CWE-428
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10307; https://kc.mcafee.com/corporate/index?page=content&id=SB10307
CVE: CVE-2020-9005
Published: 2020-02-17
Description: meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code execution or denial of service by creating a gaming server with a crafted map, and inviting a victim to this server. A GetValue call is mishandled.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/bi7s/CVE/blob/master/CVE-2020-9005/README.md; https://github.com/bi7s/CVE/blob/master/CVE-2020-9005/README.md
CVE: CVE-2019-12825
Published: 2020-02-17
Description: Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922
References: https://about.gitlab.com/blog/categories/releases/; https://atomic111.github.io/article/gitlab-Unauthorized-Access-to-Container-Registry; https://about.gitlab.com/blog/categories/releases/
CVE: CVE-2020-8427
Published: 2020-02-17
Description: In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://support.unitrends.com/UnitrendsBackup/s/article/000006983; https://support.unitrends.com/UnitrendsBackup/s/article/000006983
CVE: CVE-2020-8518
Published: 2020-02-17
Description: Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/156872/Horde-5.2.22-CSV-Import-Code-Execution.html; https://lists.debian.org/debian-lts-announce/2020/04/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PRPIFQDGYPQ3F2TF2ETPIL7IYNSVVZQ/
CVE: CVE-2020-8795
Published: 2020-02-17
Description: In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.
CVSS Score: 7.5 (HIGH)
References: https://about.gitlab.com/releases/2020/02/13/critical-security-release-gitlab-12-dot-7-dot-6-released/; https://about.gitlab.com/releases/categories/releases/; https://about.gitlab.com/releases/2020/02/13/critical-security-release-gitlab-12-dot-7-dot-6-released/
CVE: CVE-2020-9006
Published: 2020-02-17
Description: The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in the sgImportPopups function in sg_popup_ajax.php) via PHP Deserialization on attacker-controlled data with the attachmentUrl POST variable. This allows creation of an arbitrary WordPress Administrator account, leading to possible Remote Code Execution because Administrators can run PHP code on Wordpress instances. (This issue has been fixed in the 3.x branch of popup-builder.)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-502
References: https://plugins.trac.wordpress.org/browser/popup-builder/tags/2.2.8/files/sg_popup_ajax.php#L69; https://wordpress.org/plugins/popup-builder/#developers; https://wpvulndb.com/vulnerabilities/10073
CVE: CVE-2013-3738
Published: 2020-02-17
Description: A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://support.zabbix.com/browse/ZBX-6652; http://support.zabbix.com/browse/ZBX-6652
CVE: CVE-2020-1692
Published: 2020-02-17
Description: Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692
CVE: CVE-2020-6850
Published: 2020-02-17
Description: Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/#developers; https://zeroauth.ltd/blog/; https://zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-before-4-8-84-is-vulnerable-to-xss-via-a-specially-crafted-saml-xml-response/
CVE: CVE-2020-9038
Published: 2020-02-17
Description: Joplin through 1.0.184 allows Arbitrary File Read via XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156582/Joplin-Desktop-1.0.184-Cross-Site-Scripting.html; https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283baa2c065df0d0bc; https://github.com/laurent22/joplin/compare/clipper-1.0.19...clipper-1.0.20
CVE: CVE-2013-3722
Published: 2020-02-17
Description: A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://github.com/OpenSIPS/opensips/commit/54e027adfa486cfcf993828512b2e273aeb163c2; http://github.com/OpenSIPS/opensips/commit/54e027adfa486cfcf993828512b2e273aeb163c2
CVE: CVE-2015-1387
Published: 2020-02-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1454. Reason: This candidate is a reservation duplicate of CVE-2015-1454. Notes: All CVE users should reference CVE-2015-1454 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-12954
Published: 2020-02-17
Description: SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.esecforte.com/cve-2019-12954-solarwinds-network-performance-monitor-orion-platform-2018-npm-12-3-netpath-1-1-3-vulnerable-for-stored-xss/; https://www.esecforte.com/cve-2019-12954-solarwinds-network-performance-monitor-orion-platform-2018-npm-12-3-netpath-1-1-3-vulnerable-for-stored-xss/
CVE: CVE-2020-1704
Published: 2020-02-17
Description: An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-266, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1704; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1704
CVE: CVE-2020-9043
Published: 2020-02-17
Description: The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?&old=2244363%40wp-central&new=2244363%40wp-central; https://wordpress.org/plugins/wp-central/#developers; https://wpvulndb.com/vulnerabilities/10074
CVE: CVE-2015-0258
Published: 2020-02-17
Description: Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/133736/Collabtive-2.0-Shell-Upload.html; https://github.com/philippK-de/Collabtive/commit/9ce[PII_REDACTED]d0a8ecb4d23fb56e34b68511335; https://lists.debian.org/debian-lts-announce/2020/02/msg00031.html
CVE: CVE-2015-6922
Published: 2020-02-17
Description: Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html; http://www.zerodayinitiative.com/advisories/ZDI-15-448; http://www.zerodayinitiative.com/advisories/ZDI-15-449
CVE: CVE-2013-7324
Published: 2020-02-17
Description: Webkit-GTK 2.x (any version with HTML5 audio/video support based on GStreamer) allows remote attackers to trigger unexpectedly high sound volume via malicious javascript. NOTE: this WebKit-GTK behavior complies with existing W3C standards and existing practices for GNOME desktop integration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: http://www.openwall.com/lists/oss-security/2014/02/10/13; https://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-7324.html; https://www.openwall.com/lists/oss-security/2013/10/08/4
CVE: CVE-2014-9404
Published: 2020-02-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5005. Reason: This candidate is a reservation duplicate of CVE-2014-5005. Notes: All CVE users should reference CVE-2014-5005 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2015-4715
Published: 2020-02-17
Description: The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ (at sign) character in unspecified POST values.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-552
References: http://www.securityfocus.com/bid/76158; https://github.com/owncloud/core/commit/bf0f1a50926a75a26a42a3da4d62e84a489ee77a; https://owncloud.org/security/advisories/mounted-dropbox-storage-allows-dropbox-com-access-file/
CVE: CVE-2015-5215
Published: 2020-02-17
Description: The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via template variables. NOTE: This may be a duplicate of CVE-2015-5216. Moreover, the Jinja development team does not enable auto-escape by default for performance issues as explained in https://jinja.palletsprojects.com/en/master/faq/#why-is-autoescaping-not-the-default.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/10/23/10; https://bugzilla.redhat.com/show_bug.cgi?id=1255168; https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1
CVE: CVE-2015-5216
Published: 2020-02-17
Description: The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via an HTTP response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/10/27/8; https://bugzilla.redhat.com/show_bug.cgi?id=1255170; https://pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16
CVE: CVE-2019-18998
Published: 2020-02-17
Description: Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource's URL can access the resource directly.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284, CWE-639
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9962&LanguageCode=en&DocumentPartId=&Action=Launch; https://www.us-cert.gov/ics/advisories/icsa-20-072-02; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9962&LanguageCode=en&DocumentPartId=&Action=Launch