deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2228
Published: 2019-12-06
Description: In array_find of array.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure in the printer spooler with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-111210196
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://lists.debian.org/debian-lts-announce/2019/12/msg00030.html; https://source.android.com/security/bulletin/2019-12-01; https://usn.ubuntu.com/4340-1/
CVE: CVE-2019-2229
Published: 2019-12-06
Description: In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139803872
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2230
Published: 2019-12-06
Description: In nfcManager_routeAid and nfcManager_unrouteAid of NativeNfcManager.cpp, there is possible memory reuse due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141170038
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2231
Published: 2019-12-06
Description: In Blob::Blob of blob.cpp, there is a possible unencrypted master key due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-141955555
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-311
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-2232
Published: 2019-12-06
Description: In handleRun of TextLine.java, there is a possible application crash due to improper input validation. This could lead to remote denial of service when processing Unicode with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140632678
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-682
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-9464
Published: 2019-12-06
Description: In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-141028068
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2019-12-01; https://source.android.com/security/bulletin/2019-12-01
CVE: CVE-2019-16772
Published: 2019-12-07
Description: The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.
CVSS Score: 3.1 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/commenthol/serialize-to-js/commit/181d7d583ae5293cd47cc99b14ad13352875f3e3; https://github.com/commenthol/serialize-to-js/security/advisories/GHSA-3fjq-93xj-3f3f; https://github.com/commenthol/serialize-to-js/commit/181d7d583ae5293cd47cc99b14ad13352875f3e3
CVE: CVE-2019-19447
Published: 2019-12-08
Description: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447; https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE: CVE-2019-19448
Published: 2019-12-08
Description: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19448; https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html; https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html
CVE: CVE-2019-19449
Published: 2019-12-08
Description: In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449
CVE: CVE-2019-19630
Published: 2019-12-08
Description: HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/michaelrsweet/htmldoc/issues/370; https://lists.debian.org/debian-lts-announce/2019/12/msg00008.html; https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html
CVE: CVE-2019-19635
Published: 2019-12-08
Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixel_decode_raw_impl at fromsixel.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/saitoha/libsixel/issues/103; https://github.com/saitoha/libsixel/issues/103
CVE: CVE-2019-19636
Published: 2019-12-08
Description: An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_encode_body at tosixel.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/saitoha/libsixel/issues/104; https://github.com/saitoha/libsixel/issues/104
CVE: CVE-2019-19637
Published: 2019-12-08
Description: An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixel_decode_raw_impl at fromsixel.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/saitoha/libsixel/issues/105; https://github.com/saitoha/libsixel/issues/105
CVE: CVE-2019-19638
Published: 2019-12-08
Description: An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function load_pnm at frompnm.c, due to an integer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://github.com/saitoha/libsixel/issues/102; https://github.com/saitoha/libsixel/issues/102
CVE: CVE-2019-19642
Published: 2019-12-08
Description: On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.dark-sec.net/2019/12/supermicro-ipmi-exploitation.html; https://www.dark-sec.net/2019/12/supermicro-ipmi-exploitation.html
CVE: CVE-2019-19647
Published: 2019-12-09
Description: radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://github.com/radareorg/radare2/issues/15545; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/
CVE: CVE-2019-19648
Published: 2019-12-09
Description: In the macho_parse_file functionality in macho/macho.c of YARA 3.11.0, command_size may be inconsistent with the real size. A specially crafted MachO file can cause an out-of-bounds memory access, resulting in Denial of Service (application crash) or potential code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/VirusTotal/yara/issues/1178; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/
CVE: CVE-2019-19645
Published: 2019-12-09
Description: alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19678
Published: 2019-12-09
Description: In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.xpand-it.com/browse/XRAY-4692; https://jira.xpand-it.com/browse/XRAY-4692
CVE: CVE-2019-19679
Published: 2019-12-09
Description: In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.xpand-it.com/browse/XRAY-4692; https://jira.xpand-it.com/browse/XRAY-4692
CVE: CVE-2019-14251
Published: 2019-12-09
Description: An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage downloadDocServer() to traverse the file system and access files or directories that are outside of the restricted directory because WealthT24/GetImage is used with the docDownloadPath and uploadLocation parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/kmkz/exploit/blob/master/CVE-2019-14251-TEMENOS-T24.txt; https://github.com/kmkz/exploit/blob/master/CVE-2019-14251-TEMENOS-T24.txt
CVE: CVE-2019-19682
Published: 2019-12-09
Description: nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogController.cs via Body or Full to Admin/News/NewsItemEdit/[id] Admin/Blog/BlogPostEdit/[id]. NOTE: the vendor reportedly considers this a "feature" because the affected components are an HTML content editor.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Scripting; https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Scripting
CVE: CVE-2019-19683
Published: 2019-12-09
Description: RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFilemanService.cs.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Path%20Traversal; https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Path%20Traversal
CVE: CVE-2019-19684
Published: 2019-12-09
Description: nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Plugin%20Upload; https://github.com/klezVirus/cves/tree/master/NopCommerce/Privilege%20Escalation%20via%20Plugin%20Upload
CVE: CVE-2019-19685
Published: 2019-12-09
Description: RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to CSRF because GET requests can be used for renames and deletions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Request-Forgery; https://github.com/klezVirus/cves/tree/master/NopCommerce/Cross-Site-Request-Forgery
CVE: CVE-2018-17185
Published: 2019-12-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-12424
Published: 2019-12-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-18380
Published: 2019-12-09
Description: Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://support.symantec.com/us/en/article.SYMSA1500.html; https://support.symantec.com/us/en/article.SYMSA1500.html
CVE: CVE-2019-19687
Published: 2019-12-09
Description: OpenStack Keystone 15.0.0 and 16.0.0 is affected by Data Leakage in the list credentials API. Any user with a role on a project is able to list any credentials with the /v3/credentials API when enforce_scope is false. Users with a role on a project are able to view any other users' credentials, which could (for example) leak sign-on information for Time-based One Time Passwords (TOTP). Deployments with enforce_scope set to false are affected. (There will be a slight performance impact for the list credentials API once this issue is fixed.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/12/11/8; https://access.redhat.com/errata/RHSA-2019:4358; https://bugs.launchpad.net/keystone/+bug/1855080
CVE: CVE-2015-0841
Published: 2019-12-09
Description: Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service (crash) via a long line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193
References: http://gtkatlantic.gradator.net/oldnews.html; http://www.openwall.com/lists/oss-security/2015/03/23/20; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781043
CVE: CVE-2015-1853
Published: 2019-12-09
Description: chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (inability to synchronize) via random timestamps in crafted NTP data packets.
CVSS Score: 6.5 (MEDIUM)
References: http://chrony.tuxfamily.org/News.html; https://security.gentoo.org/glsa/201507-01; http://chrony.tuxfamily.org/News.html
CVE: CVE-2019-18190
Published: 2019-12-09
Description: Trend Micro Security (Consumer) 2020 (v16.x) is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124031.aspx
CVE: CVE-2019-19603
Published: 2019-12-09
Description: SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
CVSS Score: 7.5 (HIGH)
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13; https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a[PII_REDACTED]c%40%3Cissues.guacamole.apache.org%3E
CVE: CVE-2019-19646
Published: 2019-12-09
Description: pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-754
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3; https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd
CVE: CVE-2014-0242
Published: 2019-12-09
Description: mod_wsgi module before 3.4 for Apache, when used in embedded mode, might allow remote attackers to obtain sensitive information via the Content-Type header which is generated from memory that may have been freed and then overwritten by a separate thread.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html; http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.4.html; http://www.openwall.com/lists/oss-security/2014/05/21/1
CVE: CVE-2015-3424
Published: 2019-12-09
Description: SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/134176/Accentis-Content-Resource-Management-System-SQL-Injection.html; http://packetstormsecurity.com/files/134176/Accentis-Content-Resource-Management-System-SQL-Injection.html
CVE: CVE-2015-3425
Published: 2019-12-09
Description: Cross-site scripting (XSS) vulnerability in Accentis Content Resource Management System before October 2015 patch allows remote attackers to inject arbitrary web script or HTML via the ctl00$cph_content$_uig_formState parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/134177/Accentis-Content-Resource-Management-System-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/134177/Accentis-Content-Resource-Management-System-Cross-Site-Scripting.html
CVE: CVE-2015-7892
Published: 2019-12-09
Description: Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to have unspecified impact via a large data.buf_out.num_planes value in an ioctl call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/134108/Samsung-M2m1shot-Kernel-Driver-Buffer-Overflow.html; https://code.google.com/p/google-security-research/issues/detail?id=493; https://www.exploit-db.com/exploits/38555/
CVE: CVE-2013-0342
Published: 2019-12-09
Description: The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2013/02/15/9; http://www.openwall.com/lists/oss-security/2013/02/21/27; http://www.openwall.com/lists/oss-security/2013/02/22/2
CVE: CVE-2019-19230
Published: 2019-12-09
Description: An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/155631/CA-Nolio-6.6-Arbitrary-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Dec/16; https://seclists.org/bugtraq/2019/Dec/16
CVE: CVE-2019-4428
Published: 2019-12-09
Description: IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162807.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/162807; https://www.ibm.com/support/pages/node/1125585; https://exchange.xforce.ibmcloud.com/vulnerabilities/162807
CVE: CVE-2019-4611
Published: 2019-12-09
Description: IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168519.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/168519; https://www.ibm.com/support/pages/node/1118565; https://exchange.xforce.ibmcloud.com/vulnerabilities/168519
CVE: CVE-2019-4612
Published: 2019-12-09
Description: IBM Planning Analytics 2.0 is vulnerable to malicious file upload in the My Account Portal. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 168523.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/168523; https://www.ibm.com/support/pages/node/1118565; https://exchange.xforce.ibmcloud.com/vulnerabilities/168523
CVE: CVE-2019-4621
Published: 2019-12-09
Description: IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default administrator account that is enabled if the IPMI LAN channel is enabled. A remote attacker could use this account to gain unauthorised access to the BMC. IBM X-Force ID: 168883.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/168883; https://www.ibm.com/support/pages/node/1125615; https://exchange.xforce.ibmcloud.com/vulnerabilities/168883
CVE: CVE-2019-19698
Published: 2019-12-10
Description: marc-q libwav through 2017-04-20 has a NULL pointer dereference in wav_content_read() at libwav.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/marc-q/libwav/issues/25; https://github.com/xiaoxiongwang/security/tree/master/libwav; https://github.com/marc-q/libwav/issues/25
CVE: CVE-2013-0293
Published: 2019-12-10
Description: oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2013/02/28/13; http://www.securityfocus.com/bid/58227; https://access.redhat.com/security/cve/cve-2013-0293