deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-16789
Published: 2019-12-26
Description: In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special whitespace characters in the Transfer-Encoding header would get parsed by Waitress as being a chunked request, but a front-end server would use the Content-Length instead as the Transfer-Encoding header is considered invalid due to containing invalid characters. If a front-end server does HTTP pipelining to a backend Waitress server this could lead to HTTP request splitting which may lead to potential cache poisoning or unexpected information disclosure. This issue is fixed in Waitress 1.4.1 through more strict HTTP field validation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-444, CWE-444
References: https://access.redhat.com/errata/RHSA-2020:0720; https://docs.pylonsproject.org/projects/waitress/en/latest/#security-fixes; https://github.com/Pylons/waitress/commit/11d9e138125ad46e951027184b13242a3c1de017
CVE: CVE-2019-16326
Published: 2019-12-26
Description: D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/; https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/
CVE: CVE-2019-16327
Published: 2019-12-26
Description: D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/; https://0x62626262.wordpress.com/2019/12/24/dlink-dir-601-router-authentication-bypass-and-csrf/
CVE: CVE-2019-19995
Published: 2019-12-26
Description: A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/%40rsantos_14778/csrf-cve-2019-19995-96c1a2dcc182; https://medium.com/%40rsantos_14778/csrf-cve-2019-19995-96c1a2dcc182
CVE: CVE-2019-19996
Published: 2019-12-26
Description: An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
CVSS Score: 7.5 (HIGH)
References: https://medium.com/%40rsantos_14778/dos-cve-2019-19996-5ad1be772179; https://medium.com/%40rsantos_14778/dos-cve-2019-19996-5ad1be772179
CVE: CVE-2011-1474
Published: 2019-12-26
Description: A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in arch_get_unmapped_area_topdown triggered by programs doing an mmap after a MAP_GROWSDOWN mmap will create an infinite loop condition without releasing the VM semaphore eventually leading to a system crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-835
References: http://seclists.org/oss-sec/2011/q1/579; https://security-tracker.debian.org/tracker/CVE-2011-1474; http://seclists.org/oss-sec/2011/q1/579
CVE: CVE-2019-19398
Published: 2019-12-26
Description: M5 lite 10 with versions of 8.0.0.182(C00) have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to modify the memory of the device by doing a series of operations. Successful exploit may lead to malicious code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-validation-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-validation-en
CVE: CVE-2019-5272
Published: 2019-12-26
Description: USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-354
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-digital-en
CVE: CVE-2019-5273
Published: 2019-12-26
Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a large heap buffer overrun error, an attacker may exploit the vulnerability by a malicious certificate, resulting a denial of service on the affected products.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE: CVE-2019-5274
Published: 2019-12-26
Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in an infinite loop, an attacker may exploit the vulnerability via a malicious certificate to perform a denial of service attack on the affected products.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE: CVE-2019-5275
Published: 2019-12-26
Description: USG9500 with versions of V500R001C30;V500R001C60 have a denial of service vulnerability. Due to a flaw in the X.509 implementation in the affected products which can result in a heap buffer overflow when decoding a certificate, an attacker may exploit the vulnerability by a malicious certificate to perform a denial of service attack on the affected products.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-eudemon-en
CVE: CVE-2012-2736
Published: 2019-12-26
Description: In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-306
References: http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html; http://www.openwall.com/lists/oss-security/2012/06/15/2; http://www.openwall.com/lists/oss-security/2012/06/15/4
CVE: CVE-2012-3462
Published: 2019-12-26
Description: A flaw was found in SSSD version 1.9.0. The SSSD's access-provider logic causes the result of the HBAC rule processing to be ignored in the event that the access-provider is also handling the setup of the user's SELinux user context.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://access.redhat.com/security/cve/cve-2012-3462; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3462; https://pagure.io/SSSD/sssd/issue/1470
CVE: CVE-2012-4420
Published: 2019-12-26
Description: An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2012/09/13/3; http://www.securityfocus.com/bid/55538; https://access.redhat.com/security/cve/cve-2012-4420
CVE: CVE-2013-2011
Published: 2019-12-26
Description: WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.
CVSS Score: 8.8 (HIGH)
CWE: CWE-116
References: http://www.openwall.com/lists/oss-security/2013/04/25/4; http://www.securityfocus.com/bid/59473; https://exchange.xforce.ibmcloud.com/vulnerabilities/83800
CVE: CVE-2013-4318
Published: 2019-12-26
Description: File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: http://www.openwall.com/lists/oss-security/2013/09/09/10; https://security-tracker.debian.org/tracker/CVE-2013-4318; http://www.openwall.com/lists/oss-security/2013/09/09/10
CVE: CVE-2015-5290
Published: 2019-12-26
Description: A Denial of Service vulnerability exists in ircd-ratbox 3.0.9 in the MONITOR Command Handler.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/10/11/1; http://www.openwall.com/lists/oss-security/2015/10/12/1; https://bugzilla.redhat.com/show_bug.cgi?id=1271113
CVE: CVE-2019-19389
Published: 2019-12-26
Description: JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: https://gist.github.com/JLLeitschuh/6792947ed57d589b08c1cc8b666c7737; https://github.com/ktorio/ktor/pull/1408; https://twitter.com/JLLeitschuh/status/[PII_REDACTED]10230017?s=20
CVE: CVE-2019-20005
Published: 2019-12-26
Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to a heap-based buffer over-read while running strchr() starting with a pointer after a '\0' character (where the processing of a string was finished).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://sourceforge.net/p/ezxml/bugs/14/; https://sourceforge.net/p/ezxml/bugs/14/
CVE: CVE-2019-20006
Published: 2019-12-26
Description: An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_char_content puts a pointer to the internal address of a larger block as xml->txt. This is later deallocated (using free), leading to a segmentation fault.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://sourceforge.net/p/ezxml/bugs/15/; https://sourceforge.net/p/ezxml/bugs/15/
CVE: CVE-2019-20007
Published: 2019-12-26
Description: An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxml_str2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer (in some compilers). After this, the function ezxml_parse_str does not check whether the s variable is not NULL in ezxml.c, leading to a NULL pointer dereference and crash (segmentation fault).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://sourceforge.net/p/ezxml/bugs/13/; https://sourceforge.net/p/ezxml/bugs/13/
CVE: CVE-2013-3085
Published: 2019-12-26
Description: An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.ise.io/research/studies-and-papers/belkin_f5d8236-4v2/; https://www.ise.io/research/studies-and-papers/belkin_f5d8236-4v2/
CVE: CVE-2013-3088
Published: 2019-12-26
Description: Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://securityevaluators.com/knowledge/case_studies/routers/belkin_n900.php; https://www.ise.io/research/studies-and-papers/belkin_n900/; http://securityevaluators.com/knowledge/case_studies/routers/belkin_n900.php
CVE: CVE-2019-20008
Published: 2019-12-26
Description: In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/archerysec/archerysec/compare/archerysec-v1.2...v1.3; https://github.com/archerysec/archerysec/issues/338; https://github.com/archerysec/archerysec/releases/tag/v1.3
CVE: CVE-2019-20009
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3
CVE: CVE-2019-20010
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/issues/176
CVE: CVE-2019-20011
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/issues/176
CVE: CVE-2019-20012
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/issues/176
CVE: CVE-2019-20013
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3
CVE: CVE-2019-20014
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/compare/0.9.2...0.9.3
CVE: CVE-2019-20015
Published: 2019-12-27
Description: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html; https://github.com/LibreDWG/libredwg/issues/176
CVE: CVE-2019-20016
Published: 2019-12-27
Description: libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/hoene/libmysofa/commit/2e6fac6ab6156dae8e8c6f[PII_REDACTED]84b70d6f; https://github.com/hoene/libmysofa/issues/83; https://github.com/hoene/libmysofa/issues/84
CVE: CVE-2019-20017
Published: 2019-12-27
Description: A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tbeu/matio/issues/127; https://github.com/tbeu/matio/issues/127
CVE: CVE-2019-20018
Published: 2019-12-27
Description: A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tbeu/matio/issues/129; https://github.com/tbeu/matio/issues/129
CVE: CVE-2019-20019
Published: 2019-12-27
Description: An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/tbeu/matio/issues/130; https://github.com/tbeu/matio/issues/130
CVE: CVE-2019-20020
Published: 2019-12-27
Description: A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/tbeu/matio/issues/128; https://github.com/tbeu/matio/issues/128
CVE: CVE-2019-20021
Published: 2019-12-27
Description: A heap-based buffer over-read was discovered in canUnpack in p_mach.cpp in UPX 3.95 via a crafted Mach-O file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00007.html; https://github.com/upx/upx/issues/315
CVE: CVE-2019-20022
Published: 2019-12-27
Description: An invalid memory address dereference was discovered in load_pnm in frompnm.c in libsixel before 1.8.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-672
References: https://github.com/saitoha/libsixel/issues/108; https://github.com/saitoha/libsixel/issues/108
CVE: CVE-2019-20023
Published: 2019-12-27
Description: A memory leak was discovered in image_buffer_resize in fromsixel.c in libsixel 1.8.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/saitoha/libsixel/issues/120; https://github.com/saitoha/libsixel/issues/120
CVE: CVE-2019-20024
Published: 2019-12-27
Description: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/saitoha/libsixel/issues/121; https://github.com/saitoha/libsixel/issues/121
CVE: CVE-2019-20041
Published: 2019-12-27
Description: wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/WordPress/wordpress-develop/commit/b1975463dd995da19bb40d3fa[PII_REDACTED]e3c53; https://lists.debian.org/debian-lts-announce/2020/01/msg00010.html; https://seclists.org/bugtraq/2020/Jan/8
CVE: CVE-2019-20042
Published: 2019-12-27
Description: In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.ripstech.com/filter/vulnerabilities/; https://core.trac.wordpress.org/changeset/46894/trunk; https://github.com/WordPress/wordpress-develop/commit/1f7f3f1f59567e2504f0fbebd51ccf004b3ccb1d
CVE: CVE-2019-20043
Published: 2019-12-27
Description: In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or unsticky via the REST API. For example, the contributor role does not have such rights, but this allowed them to bypass that. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://core.trac.wordpress.org/changeset/46893/trunk; https://github.com/WordPress/wordpress-develop/commit/1d1d5be7aa94608c04516cac4238e8c22b93c1d9; https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-g7rg-hchx-c2gw
CVE: CVE-2014-4523
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in the Easy Career Openings plugin 0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-easy-career-openings-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-easy-career-openings-a3-cross-site-scripting-xss
CVE: CVE-2014-4525
Published: 2019-12-27
Description: Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-ebay-feeds-for-wordpress-a3-cross-site-scripting-xss; http://wordpress.org/plugins/ebay-feeds-for-wordpress/changelog; http://codevigilant.com/disclosure/wp-plugin-ebay-feeds-for-wordpress-a3-cross-site-scripting-xss
CVE: CVE-2014-4559
Published: 2019-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) api_key, (2) payment_page_url, (3) merchant_id, (4) api_url, or (5) currency parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-wp-e-commerce-a3-cross-site-scripting-xss; http://codevigilant.com/disclosure/wp-plugin-swipehq-payment-gateway-wp-e-commerce-a3-cross-site-scripting-xss
CVE: CVE-2019-19781
Published: 2019-12-27
Description: An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/155904/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution.html; http://packetstormsecurity.com/files/155905/Citrix-Application-Delivery-Controller-Gateway-Remote-Code-Execution-Traversal.html; http://packetstormsecurity.com/files/155930/Citrix-Application-Delivery-Controller-Gateway-10.5-Remote-Code-Execution.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-12-27
Description: Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would only potentially impact other admins. (Tenable ID 5198).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92134; http://www.securitytracker.com/id/1036414; https://www.tenable.com/security/tns-2016-11
CVE: CVE-2[PII_REDACTED]
Published: 2019-12-27
Description: Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would potentially impact other admins (Tenable IDs 5218 and 5269).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/92134; http://www.securitytracker.com/id/1036414; https://www.tenable.com/security/tns-2016-11
CVE: CVE-2013-4664
Published: 2019-12-27
Description: SPBAS Business Automation Software 2012 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.offcon.org/research.html; https://www.exploit-database.net/?id=48229; https://www.exploit-db.com/exploits/26244
CVE: CVE-2013-4665
Published: 2019-12-27
Description: SPBAS Business Automation Software 2012 has CSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.exploit-database.net/?id=48229; https://www.exploit-db.com/exploits/26244; https://www.exploit-database.net/?id=48229