deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-9458
Published: 2019-10-10
Description: The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html; https://wordpress.org/plugins/searchterms-tagging-2/#developers; http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html
CVE: CVE-2015-9459
Published: 2019-10-10
Description: The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html; https://wordpress.org/plugins/searchterms-tagging-2/#developers; http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html
CVE: CVE-2015-9460
Published: 2019-10-10
Description: The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html; https://wordpress.org/plugins/booking-system/#developers; https://wpvulndb.com/vulnerabilities/8339
CVE: CVE-2015-9461
Published: 2019-10-10
Description: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html; https://wordpress.org/plugins/awesome-filterable-portfolio/#developers; https://wpvulndb.com/vulnerabilities/8311
CVE: CVE-2015-9462
Published: 2019-10-10
Description: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html; https://wordpress.org/plugins/awesome-filterable-portfolio/#developers; https://wpvulndb.com/vulnerabilities/8311
CVE: CVE-2015-9464
Published: 2019-10-10
Description: The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://wordpress.org/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/#developers; https://www.exploit-db.com/exploits/37494; https://wordpress.org/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/#developers
CVE: CVE-2019-17449
Published: 2019-10-10
Description: Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-426
References: https://safebreach.com/Post/Avira-Antivirus-2019-4-Services-DLL-Preloading-and-Potential-Abuses-CVE-2019-17449; https://support.avira.com/hc/en-us/articles/[PII_REDACTED]57-Avira-Software-Updater; https://safebreach.com/Post/Avira-Antivirus-2019-4-Services-DLL-Preloading-and-Potential-Abuses-CVE-2019-17449
CVE: CVE-2015-9463
Published: 2019-10-10
Description: The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/132578/; https://wordpress.org/plugins/s3bubble-amazon-s3-audio-streaming/#developers; http://packetstormsecurity.com/files/132578/
CVE: CVE-2015-9465
Published: 2019-10-10
Description: The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_041b796c7533880df03a43895fed5f00.html; https://wordpress.org/plugins/yet-another-stars-rating/#developers; https://wpvulndb.com/vulnerabilities/8309
CVE: CVE-2015-9466
Published: 2019-10-10
Description: The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html; https://wordpress.org/plugins/wti-like-post/#developers; https://wpvulndb.com/vulnerabilities/8318
CVE: CVE-2015-9467
Published: 2019-10-10
Description: The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html; https://wordpress.org/plugins/broken-link-manager/#developers; https://wpvulndb.com/vulnerabilities/8320
CVE: CVE-2015-9468
Published: 2019-10-10
Description: The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html; https://wordpress.org/plugins/broken-link-manager/#developers; http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html
CVE: CVE-2015-9469
Published: 2019-10-10
Description: The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/132910/; https://wordpress.org/plugins/content-grabber/#developers; https://packetstormsecurity.com/files/132910/
CVE: CVE-2015-9470
Published: 2019-10-10
Description: The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/132279/; https://wordpress.org/plugins/history-collection/#developers; https://packetstormsecurity.com/files/132279/
CVE: CVE-2015-9471
Published: 2019-10-10
Description: The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://packetstormsecurity.com/files/132124/; https://wordpress.org/plugins/dzs-zoomsounds/#developers; https://wpvulndb.com/vulnerabilities/8019
CVE: CVE-2015-9472
Published: 2019-10-10
Description: The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/1080044/incoming-links; https://wordpress.org/plugins/incoming-links/#developers; https://wpvulndb.com/vulnerabilities/8015
CVE: CVE-2015-9473
Published: 2019-10-10
Description: The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/132042/; https://packetstormsecurity.com/files/132042/
CVE: CVE-2015-9474
Published: 2019-10-10
Description: The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://wpvulndb.com/vulnerabilities/8061; https://wpvulndb.com/vulnerabilities/8061
CVE: CVE-2015-9475
Published: 2019-10-10
Description: The Pont theme 1.5 for WordPress has insufficient restrictions on option updates.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://wpvulndb.com/vulnerabilities/8061; https://wpvulndb.com/vulnerabilities/8061
CVE: CVE-2015-9476
Published: 2019-10-10
Description: The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://wpvulndb.com/vulnerabilities/8061; https://wpvulndb.com/vulnerabilities/8061
CVE: CVE-2015-9477
Published: 2019-10-10
Description: The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://wpvulndb.com/vulnerabilities/8061; https://wpvulndb.com/vulnerabilities/8061
CVE: CVE-2015-9478
Published: 2019-10-10
Description: prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/scaron/prettyphoto/issues/149; https://github.com/scaron/prettyphoto/releases/tag/3.1.6; https://github.com/scaron/prettyphoto/issues/149
CVE: CVE-2015-9479
Published: 2019-10-10
Description: The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://packetstormsecurity.com/files/132590/; https://packetstormsecurity.com/files/132590/
CVE: CVE-2015-9480
Published: 2019-10-10
Description: The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/37252; https://www.exploit-db.com/exploits/37252
CVE: CVE-2019-17450
Published: 2019-10-10
Description: find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; https://security.gentoo.org/glsa/202007-39
CVE: CVE-2019-17451
Published: 2019-10-10
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; https://security.gentoo.org/glsa/202007-39
CVE: CVE-2019-17452
Published: 2019-10-10
Description: Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListInspector::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::InspectFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4dump.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/434; https://github.com/axiomatic-systems/Bento4/issues/434
CVE: CVE-2019-17453
Published: 2019-10-10
Description: Bento4 1.5.1.0 has a NULL pointer dereference in AP4_DescriptorListWriter::Action in Core/Ap4Descriptor.h, related to AP4_IodsAtom::WriteFields in Core/Ap4IodsAtom.cpp, as demonstrated by mp4encrypt or mp4compact.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/436; https://github.com/axiomatic-systems/Bento4/issues/437; https://github.com/axiomatic-systems/Bento4/issues/436
CVE: CVE-2019-17454
Published: 2019-10-10
Description: Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descriptor::GetTag in Core/Ap4Descriptor.h, related to AP4_StsdAtom::GetSampleDescription in Core/Ap4StsdAtom.cpp, as demonstrated by mp4info.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/435; https://github.com/axiomatic-systems/Bento4/issues/435
CVE: CVE-2019-5527
Published: 2019-10-10
Description: ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://www.vmware.com/security/advisories/VMSA-2019-0014.html; https://www.vmware.com/security/advisories/VMSA-2019-0014.html
CVE: CVE-2019-5535
Published: 2019-10-10
Description: VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7.
CVSS Score: 4.7 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2019-0014.html; https://www.vmware.com/security/advisories/VMSA-2019-0014.html
CVE: CVE-2019-17455
Published: 2019-10-10
Description: Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write operations, as demonstrated by a stack-based buffer over-read in buildSmbNtlmAuthRequest in smbutil.c for a crafted NTLM request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00032.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942145
CVE: CVE-2019-11526
Published: 2019-10-10
Description: An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://security.mioso.com/CVE-2019-11526-en.html; https://security.mioso.com/CVE-2019-11526-en.html
CVE: CVE-2019-14810
Published: 2019-10-10
Description: A vulnerability has been found in the implementation of the Label Distribution Protocol (LDP) protocol in EOS. Under race conditions, the LDP agent can establish an LDP session with a malicious peer potentially allowing the possibility of a Denial of Service (DoS) attack on route updates and in turn potentially leading to an Out of Memory (OOM) condition that is disruptive to traffic forwarding. Affected EOS versions include: 4.22 release train: 4.22.1F and earlier releases 4.21 release train: 4.21.0F - 4.21.2.3F, 4.21.3F - 4.21.7.1M 4.20 release train: 4.20.14M and earlier releases 4.19 release train: 4.19.12M and earlier releases End of support release trains (4.18 and 4.17)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://www.arista.com/en/support/advisories-notices; https://www.arista.com/en/support/advisories-notices/security-advisories/8321-security-advisory-42; https://www.arista.com/en/support/advisories-notices
CVE: CVE-2019-11527
Published: 2019-10-10
Description: An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://security.mioso.com/CVE-2019-11527-en.html; https://security.mioso.com/CVE-2019-11527-en.html
CVE: CVE-2019-11528
Published: 2019-10-10
Description: An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://security.mioso.com/CVE-2019-11528-en.html; https://security.mioso.com/CVE-2019-11528-en.html
CVE: CVE-2019-15051
Published: 2019-10-10
Description: An issue was discovered in Softing uaGate (SI, MB, 840D) firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://security.mioso.com/CVE-2019-15051-en.html; https://security.mioso.com/CVE-2019-15051-en.html
CVE: CVE-2019-9529
Published: 2019-10-10
Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, has no authentication by default. This could allow an unauthenticated, local attacker connected to the device to access the portal and to make any change to the device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284, CWE-306
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-9530
Published: 2019-10-10
Description: The web root directory of the Cobham EXPLORER 710, firmware version 1.07, has no access restrictions on downloading and reading all files. This could allow an unauthenticated, local attacker connected to the device to access and download any file found in the web root directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-9531
Published: 2019-10-10
Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, allows unauthenticated access to port 5454. This could allow an unauthenticated, remote attacker to connect to this port via Telnet and execute 86 Attention (AT) commands, including some that provide unauthenticated, shell-like access to the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-287
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-9532
Published: 2019-10-10
Description: The web application portal of the Cobham EXPLORER 710, firmware version 1.07, sends the login password in cleartext. This could allow an unauthenticated, local attacker to intercept the password and gain access to the portal.
CVSS Score: 7.8 (HIGH)
CWE: CWE-319, CWE-319
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-9533
Published: 2019-10-10
Description: The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-798
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-9534
Published: 2019-10-10
Description: The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local attacker to upload their own firmware that could be used to intercept or modify traffic, spoof or intercept GPS traffic, exfiltrate private data, hide a backdoor, or cause a denial-of-service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-494, CWE-494
References: https://kb.cert.org/vuls/id/719689/; https://kb.cert.org/vuls/id/719689/
CVE: CVE-2019-17386
Published: 2019-10-10
Description: The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?old_path=%2Fanimate-it%2Ftags%2F2.3.6%2Fedsanimate.php&old=2129363&new_path=%2Fanimate-it%2Ftags%2F2.3.5%2Fedsanimate.php; https://wordpress.org/plugins/animate-it/#developers; https://wpvulndb.com/vulnerabilities/9900
CVE: CVE-2019-17488
Published: 2019-10-10
Description: b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/b3log/symphony/issues/970; https://github.com/b3log/symphony/issues/970
CVE: CVE-2019-17489
Published: 2019-10-10
Description: Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shi-yang/jnoj/issues/51; https://github.com/shi-yang/jnoj/issues/51
CVE: CVE-2019-17490
Published: 2019-10-10
Description: app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polygon/problem/tests URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/shi-yang/jnoj/issues/51; https://github.com/shi-yang/jnoj/issues/51
CVE: CVE-2019-17491
Published: 2019-10-10
Description: Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shi-yang/jnoj/issues/51; https://github.com/shi-yang/jnoj/issues/51
CVE: CVE-2019-17493
Published: 2019-10-10
Description: Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shi-yang/jnoj/issues/51; https://github.com/shi-yang/jnoj/issues/51
CVE: CVE-2019-17494
Published: 2019-10-10
Description: laravel-bjyblog 6.1.1 has XSS via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/baijunyao/laravel-bjyblog/issues/118; https://github.com/baijunyao/laravel-bjyblog/issues/118
CVE: CVE-2019-17495
Published: 2019-10-10
Description: A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352
References: https://github.com/swagger-api/swagger-ui/releases/tag/v3.23.11; https://github.com/tarantula-team/CSS-injection-in-Swagger-UI; https://lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91%40%3Ccommits.airflow.apache.org%3E
CVE: CVE-2019-17496
Published: 2019-10-11
Description: Craft CMS before 3.3.8 has stored XSS via a name field. This field is mishandled during site deletion.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/craftcms/cms/blob/develop/CHANGELOG-v3.md#338---2019-10-09; https://github.com/craftcms/cms/commit/0ee66d29281af2b6c4f866e1437842c61983a672; https://github.com/craftcms/cms/blob/develop/CHANGELOG-v3.md#338---2019-10-09
CVE: CVE-2019-17497
Published: 2019-10-11
Description: Tracker PDF-XChange Editor before 8.0.330.0 has an NTLM SSO hash theft vulnerability using crafted FDF or XFDF files (a related issue to CVE-2018-4993). For example, an NTLM hash is sent for a link to \\192.168.0.2\C$\file.pdf without user interaction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/ponypot/cve/raw/master/pdfXChangeEditor_FDFInclusions.pdf; https://github.com/ponypot/cve/raw/master/pdfXChangeEditor_FDFInclusions.pdf
CVE: CVE-2010-5334
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (_c to basic/index.html) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://vuldb.com/?id.142994; https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142994
CVE: CVE-2010-5335
Published: 2019-10-11
Description: IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating system. Input passed via a certain parameter (script to basic/minimizer/index.php) is not properly sanitised and can therefore be exploited to browse the partition where IceWarp is installed (or the whole system) and read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://vuldb.com/?id.142994; https://www.gosecurity.ch/fachartikel/168-gosecurity-advisory[PII_REDACTED]; https://vuldb.com/?id.142994