deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-20358
Published: 2020-01-30
Description: Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-427, CWE-732
References: http://seclists.org/fulldisclosure/2020/Jan/50; https://seclists.org/bugtraq/2020/Jan/55; https://success.trendmicro.com/solution/000149878
CVE: CVE-2020-5222
Published: 2020-01-30
Description: Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which allow log-in using the same credentials without ever needing the credentials. This problem is fixed in Opencast 7.6 and Opencast 8.1
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://github.com/opencast/opencast/commit/1a7172c95af8d542a77ae5b153e4c834dd4788a6; https://github.com/opencast/opencast/security/advisories/GHSA-mh8g-hprg-8363; https://github.com/opencast/opencast/commit/1a7172c95af8d542a77ae5b153e4c834dd4788a6
CVE: CVE-2020-5230
Published: 2020-01-30
Description: Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directories and write files to other locations. In addition, Opencast's Id.toString(…) vs Id.compact(…) behavior, the latter trying to mitigate some of the file system problems, can cause errors due to identifier mismatch since an identifier may unintentionally change. This issue is fixed in Opencast 7.6 and 8.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-99, CWE-74
References: https://github.com/opencast/opencast/commit/bbb473f34ab95497d6c432c81285efb0c739f317; https://github.com/opencast/opencast/security/advisories/GHSA-w29m-fjp4-qhmq; https://github.com/opencast/opencast/commit/bbb473f34ab95497d6c432c81285efb0c739f317
CVE: CVE-2020-8095
Published: 2020-01-30
Description: A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59, CWE-20
References: https://www.bitdefender.com/support/security-advisories/bitdefender-total-security-link-resolution-denial-service-vulnerability-va-4021; https://www.zerodayinitiative.com/advisories/ZDI-20-198/; https://www.bitdefender.com/support/security-advisories/bitdefender-total-security-link-resolution-denial-service-vulnerability-va-4021
CVE: CVE-2020-5206
Published: 2020-01-30
Description: In Opencast before 7.6 and 8.1, using a remember-me cookie with an arbitrary username can cause Opencast to assume proper authentication for that user even if the remember-me cookie was incorrect given that the attacked endpoint also allows anonymous access. This way, an attacker can, for example, fake a remember-me token, assume the identity of the global system administrator and request non-public content from the search service without ever providing any proper authentication. This problem is fixed in Opencast 7.6 and Opencast 8.1
CVSS Score: 8.7 (HIGH)
CWE: CWE-285, CWE-287
References: https://github.com/opencast/opencast/commit/b157e1fb3b35991ca7bf59f0730329fbe7ce82e8; https://github.com/opencast/opencast/security/advisories/GHSA-vmm6-w4cf-7f3x; https://github.com/opencast/opencast/commit/b157e1fb3b35991ca7bf59f0730329fbe7ce82e8
CVE: CVE-2020-5231
Published: 2020-01-30
Description: In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither in the documentation nor in any code (except for tests) but only in the security configuration. From the name – implying an admin for a specific course – users would never expect that this role allows user creation. This issue is fixed in 7.6 and 8.1 which both ship a new default security configuration.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-285, CWE-276
References: https://github.com/opencast/opencast/commit/72fad0031d8a82c860e2bde0b27570c5042320ee; https://github.com/opencast/opencast/security/advisories/GHSA-94qw-r73x-j7hg; https://github.com/opencast/opencast/commit/72fad0031d8a82c860e2bde0b27570c5042320ee
CVE: CVE-2020-8493
Published: 2020-01-30
Description: A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fields (Login Message, Banner Message, and Password Instructions) of the com.threeis.webta.H261configMenu servlet via an authenticated administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156215/Kronos-WebTA-4.0-Privilege-Escalation-Cross-Site-Scripting.html; http://www.nolanbkennedy.com/post/stored-xss-in-kronos-web-time-and-attendance-webta; https://www.kronos.com/products/kronos-webta
CVE: CVE-2020-8494
Published: 2020-01-30
Description: In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.
CVSS Score: 8.8 (HIGH)
References: http://www.nolanbkennedy.com/post/privilege-escalation-2-in-kronos-web-time-and-attendance-webta; https://www.kronos.com/products/kronos-webta; http://www.nolanbkennedy.com/post/privilege-escalation-2-in-kronos-web-time-and-attendance-webta
CVE: CVE-2020-8495
Published: 2020-01-30
Description: In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and delegatorUserId parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://packetstormsecurity.com/files/156215/Kronos-WebTA-4.0-Privilege-Escalation-Cross-Site-Scripting.html; http://www.nolanbkennedy.com/post/privilege-escalation-in-kronos-web-time-and-attendance-webta; https://www.kronos.com/products/kronos-webta
CVE: CVE-2020-8496
Published: 2020-01-30
Description: In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as an authenticated administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.nolanbkennedy.com/post/stored-xss-2-in-kronos-web-time-and-attendance-webta; https://www.kronos.com/products/kronos-webta; http://www.nolanbkennedy.com/post/stored-xss-2-in-kronos-web-time-and-attendance-webta
CVE: CVE-2019-10782
Published: 2020-01-30
Description: All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611
References: https://lists.apache.org/thread.html/r8aaf4ee16bbaf6204731d4770d96ebb34b258cd79b491f9cdd7f2540%40%3Ccommits.nifi.apache.org%3E; https://lists.debian.org/debian-lts-announce/2020/02/msg00008.html; https://snyk.io/vuln/SNYK-JAVA-COMPUPPYCRAWLTOOLS-543266
CVE: CVE-2020-8498
Published: 2020-01-30
Description: XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users (e.g., ones who have the publish_posts capability).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bradyvercher/gistpress/commit/e3f260edb6673227b0471c74b7ab13c094411ef7; https://github.com/bradyvercher/gistpress/releases/tag/v3.0.2; https://wpvulndb.com/vulnerabilities/10053
CVE: CVE-2020-5232
Published: 2020-01-31
Description: A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.
CVSS Score: 8.7 (HIGH)
CWE: CWE-285
References: https://github.com/ensdomains/ens/commit/36e10e71fcddcade88646821e0a57cc6c19e1ecf; https://github.com/ensdomains/ens/security/advisories/GHSA-8f9f-pc5v-9r5h; https://github.com/ensdomains/ens/commit/36e10e71fcddcade88646821e0a57cc6c19e1ecf
CVE: CVE-2019-18913
Published: 2020-01-31
Description: A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP Intel-based Business PCs that support Microsoft Windows 10 Kernel DMA protection. Affected versions depend on platform (prior to 01.04.02; or prior to 02.04.01; or prior to 02.04.02).
CVSS Score: 6.8 (MEDIUM)
References: https://support.hp.com/us-en/document/c06549501; https://support.hp.com/us-en/document/c06549501
CVE: CVE-2020-5526
Published: 2020-01-31
Description: The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN00014057/index.html; http://onlinesupport.fujixerox.com/processDriverForm.do?ctry_code=SG&lang_code=en&d_lang=en&corp_pid=AWMS2&rts=null&model=ApeosWare+Management+Suite+2&type_id=7&oslist=Windows+10+64bit&lang_list=en; http://jvn.jp/en/jp/JVN00014057/index.html
CVE: CVE-2020-7218
Published: 2020-01-31
Description: HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/hashicorp/nomad/issues/7002; https://www.hashicorp.com/blog/category/nomad/; https://github.com/hashicorp/nomad/issues/7002
CVE: CVE-2020-7219
Published: 2020-01-31
Description: HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/hashicorp/consul/issues/7159; https://www.hashicorp.com/blog/category/consul/; https://github.com/hashicorp/consul/issues/7159
CVE: CVE-2020-7914
Published: 2020-01-31
Description: In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com; https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/; https://blog.jetbrains.com
CVE: CVE-2020-7955
Published: 2020-01-31
Description: HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/hashicorp/consul/issues/7160; https://www.hashicorp.com/blog/category/consul/; https://github.com/hashicorp/consul/issues/7160
CVE: CVE-2020-7956
Published: 2020-01-31
Description: HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://github.com/hashicorp/nomad/issues/7003; https://www.hashicorp.com/blog/category/nomad/; https://github.com/hashicorp/nomad/issues/7003
CVE: CVE-2013-3322
Published: 2020-01-31
Description: NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/84063; https://www.securityfocus.com/archive/1/526552; https://exchange.xforce.ibmcloud.com/vulnerabilities/84063
CVE: CVE-2013-5112
Published: 2020-01-31
Description: Evernote before 5.5.1 has insecure PIN storage
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://blog.c22.cc/advisories/cve-2013-5112-evernote-android-insecure-storage-of-pin-data-bypass-of-pin-protection/; https://exchange.xforce.ibmcloud.com/vulnerabilities/89735; https://blog.c22.cc/advisories/cve-2013-5112-evernote-android-insecure-storage-of-pin-data-bypass-of-pin-protection/
CVE: CVE-2019-19550
Published: 2020-01-31
Description: Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/underprotection/CVE-2019-19550/; https://github.com/underprotection/CVE-2019-19550/
CVE: CVE-2020-8440
Published: 2020-01-31
Description: controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/niteosoft/simplejobscript/issues/10; https://github.com/niteosoft/simplejobscript/issues/10
CVE: CVE-2013-5113
Published: 2020-01-31
Description: LastPass prior to 2.5.1 has an insecure PIN implementation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-522
References: http://blog.c22.cc/2013/09/05/a-sneak-peak-into-android-secure-containers-2/; https://blog.c22.cc/advisories/cve-2[PII_REDACTED]4-lastpass-android-container-pin-and-auto-wipe-security-feature-bypass/; https://www.securityfocus.com/archive/1/529783
CVE: CVE-2013-5114
Published: 2020-01-31
Description: LastPass prior to 2.5.1 allows secure wipe bypass.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-287
References: http://blog.c22.cc/2013/09/05/a-sneak-peak-into-android-secure-containers-2/; https://blog.c22.cc/advisories/cve-2[PII_REDACTED]4-lastpass-android-container-pin-and-auto-wipe-security-feature-bypass/; https://www.securityfocus.com/archive/1/529783
CVE: CVE-2013-5116
Published: 2020-01-31
Description: Evernote prior to 5.5.1 has insecure password change
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/89734; https://packetstormsecurity.com/files/author/8433/; https://www.securityfocus.com/bid/64320/info
CVE: CVE-2014-4859
Published: 2020-01-31
Description: Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restrictions via crafted data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://www.kb.cert.org/vuls/id/552286; http://www.kb.cert.org/vuls/id/552286
CVE: CVE-2014-4860
Published: 2020-01-31
Description: Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended access restrictions by providing crafted data that is not properly handled during the coalescing phase.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: http://www.kb.cert.org/vuls/id/552286; http://www.kb.cert.org/vuls/id/552286
CVE: CVE-2019-4720
Published: 2020-01-31
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM X-Force ID: 172125.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172125; https://www.ibm.com/support/pages/node/1285372; https://exchange.xforce.ibmcloud.com/vulnerabilities/172125
CVE: CVE-2020-8422
Published: 2020-01-31
Description: An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined credentials of remote machines: the credential name, credential type, user name, domain/workgroup name, and description (but not the password).
CVSS Score: 4.3 (MEDIUM)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2020-8422; https://excellium-services.com/cert-xlm-advisory/CVE-2020-8422; https://excellium-services.com/cert-xlm-advisory/cve-2020-8422/
CVE: CVE-2011-4088
Published: 2020-01-31
Description: ABRT might allow attackers to obtain sensitive information from crash reports.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071027.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/71871; http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071027.html
CVE: CVE-2011-4115
Published: 2020-01-31
Description: Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2011/11/04/2; http://www.openwall.com/lists/oss-security/2011/11/04/4; https://rt.cpan.org/Public/Bug/Display.html?id=68298
CVE: CVE-2011-4116
Published: 2020-01-31
Description: _is_safe in the File::Temp module for Perl does not properly handle symlinks.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2011/11/04/2; http://www.openwall.com/lists/oss-security/2011/11/04/4; https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14
CVE: CVE-2011-4117
Published: 2020-01-31
Description: The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2011/11/04/2; http://www.openwall.com/lists/oss-security/2011/11/04/4; https://rt.cpan.org/Public/Bug/Display.html?id=69594
CVE: CVE-2013-3488
Published: 2020-01-31
Description: Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to execute arbitrary code via a crafted MPEG-2 Transport Stream (M2TS) file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://mpc-hc.org/2013/09/29/1.7.0-released; https://exchange.xforce.ibmcloud.com/vulnerabilities/87695; http://mpc-hc.org/2013/09/29/1.7.0-released
CVE: CVE-2013-3489
Published: 2020-01-31
Description: Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://mpc-hc.org/2013/09/29/1.7.0-released; https://exchange.xforce.ibmcloud.com/vulnerabilities/87695; http://mpc-hc.org/2013/09/29/1.7.0-released
CVE: CVE-2014-2843
Published: 2020-01-31
Description: Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://iw.mapandroute.de/MapAPI-1.0/releaseHistory.jsp; http://iw.mapandroute.de/MapAPI-1.1/releaseHistory.jsp; http://www.christian-schneider.net/advisories/CVE-2014-2843.txt
CVE: CVE-2020-5234
Published: 2020-01-31
Description: MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://github.com/neuecc/MessagePack-CSharp/commit/56fa86219d01d0a183babbbbcb34abbdea588a02; https://github.com/neuecc/MessagePack-CSharp/commit/f[PII_REDACTED]8386df02204f13faeff098a61f007; https://github.com/neuecc/MessagePack-CSharp/issues/810
CVE: CVE-2016-2031
Published: 2020-01-31
Description: Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html; http://seclists.org/fulldisclosure/2016/May/19; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt
CVE: CVE-2016-2032
Published: 2020-01-31
Description: A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html; http://seclists.org/fulldisclosure/2016/May/19; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-005.txt
CVE: CVE-2019-12998
Published: 2020-01-31
Description: c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "It can be used for testing, but it should not be used for real funds."
CVSS Score: 7.5 (HIGH)
References: https://github.com/ElementsProject/lightning/commits/master; https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.html; https://github.com/ElementsProject/lightning/commits/master
CVE: CVE-2019-12999
Published: 2020-01-31
Description: Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.
CVSS Score: 7.5 (HIGH)
References: https://github.com/lightningnetwork/lnd/commits/master; https://github.com/lightningnetwork/lnd/releases/tag/v0.7.0-beta; https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.html
CVE: CVE-2019-13000
Published: 2020-01-31
Description: Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md states "it is beta-quality software and don't put too much money in it."
CVSS Score: 7.5 (HIGH)
References: https://github.com/ACINQ/eclair/commits/master; https://github.com/ACINQ/eclair/releases; https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-September/002174.html
CVE: CVE-2019-3016
Published: 2020-01-31
Description: In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200, CWE-362, CWE-362
References: http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html; http://www.openwall.com/lists/oss-security/2020/01/30/4; https://bugzilla.redhat.com/show_bug.cgi?id=1792167
CVE: CVE-2020-8503
Published: 2020-01-31
Description: Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://cve.biscom.com/bis-sft-cv-0008; https://cve.biscom.com/bis-sft-cv-0008