deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1913
Published: 2019-08-07
Description: Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The vulnerabilities are due to insufficient validation of user-supplied input and improper boundary checks when reading data into an internal buffer. An attacker could exploit these vulnerabilities by sending malicious requests to the web management interface of an affected device. Depending on the configuration of the affected switch, the malicious requests must be sent via HTTP or HTTPS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190806-sb220-rce; http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html
CVE: CVE-2019-1914
Published: 2019-08-07
Description: A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious request to certain parts of the web management interface. To send the malicious request, the attacker needs a valid login session in the web management interface as a privilege level 15 user. Depending on the configuration of the affected switch, the malicious request must be sent via HTTP or HTTPS. A successful exploit could allow the attacker to execute arbitrary shell commands with the privileges of the root user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-20
References: http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190806-sb220-inject; http://packetstormsecurity.com/files/154667/Realtek-Managed-Switch-Controller-RTL83xx-Stack-Overflow.html
CVE: CVE-2016-10798
Published: 2019-08-07
Description: cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10799
Published: 2019-08-07
Description: cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10800
Published: 2019-08-07
Description: cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10801
Published: 2019-08-07
Description: cPanel before 58.0.4 has improper session handling for shared users (SEC-139).
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10802
Published: 2019-08-07
Description: cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142).
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0004-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10803
Published: 2019-08-07
Description: cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923).
CVSS Score: 7.5 (HIGH)
CWE: CWE-93
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10804
Published: 2019-08-07
Description: The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10805
Published: 2019-08-07
Description: cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10806
Published: 2019-08-07
Description: cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0002-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10807
Published: 2019-08-07
Description: cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10808
Published: 2019-08-07
Description: In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10809
Published: 2019-08-07
Description: In cPanel before 57.9999.54, /scripts/checkinfopages exposed a TTY to an unprivileged process (SEC-114).
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10810
Published: 2019-08-07
Description: In cPanel before 57.9999.54, /scripts/maildir_converter exposed a TTY to an unprivileged process (SEC-115).
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10811
Published: 2019-08-07
Description: In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10812
Published: 2019-08-07
Description: In cPanel before 57.9999.54, /scripts/enablefileprotect exposed TTYs (SEC-117).
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://documentation.cpanel.net/display/CL/58+Change+Log; https://documentation.cpanel.net/display/CL/58+Change+Log
CVE: CVE-2016-10861
Published: 2019-08-07
Description: Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer/; https://www.pentestpartners.com/security-blog/a-neet-csrf-to-reverse-shell-in-wi-fi-music-streamer/
CVE: CVE-2017-18483
Published: 2019-08-07
Description: ANNKE SP1 HD wireless camera 3.4.[PII_REDACTED] devices allow XSS via a crafted SSID.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/; https://www.pentestpartners.com/security-blog/nifty-xss-in-annke-sp1-hd-wireless-camera/
CVE: CVE-2018-20958
Published: 2019-08-07
Description: The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://tapplock.com/notice/20180612/; https://www.pentestpartners.com/security-blog/totally-pwning-the-tapplock-smart-lock/; https://tapplock.com/notice/20180612/
CVE: CVE-2018-20959
Published: 2019-08-07
Description: Jura E8 devices lack Bluetooth connection security.
CVSS Score: 8.1 (HIGH)
References: https://www.pentestpartners.com/security-blog/hacking-the-nespresso-prodigio-and-jura-e8-coffee-machines/; https://www.pentestpartners.com/security-blog/hacking-the-nespresso-prodigio-and-jura-e8-coffee-machines/
CVE: CVE-2016-5431
Published: 2019-08-07
Description: The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327
References: https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b; https://github.com/nov/jose-php/commit/1cce55e27adf0274193eb1cd74b927a398a3df4b
CVE: CVE-2018-14383
Published: 2019-08-07
Description: The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://marketplace.atlassian.com/apps/37456/the-scheduler?hosting=server&tab=versions; https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-022_jira_plugin_the_scheduler.txt; https://marketplace.atlassian.com/apps/37456/the-scheduler?hosting=server&tab=versions
CVE: CVE-2018-20961
Published: 2019-08-07
Description: In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://packetstormsecurity.com/files/154228/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4
CVE: CVE-2019-10367
Published: 2019-08-07
Description: Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1497; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10368
Published: 2019-08-07
Description: A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1482; https://lists.apache.org/thread.html/r42b7ff290ed5ec8f27f12c54fff54462ffc4bcf6a5015c37fece94ac%40%3Cnotifications.jclouds.apache.org%3E
CVE: CVE-2019-10369
Published: 2019-08-07
Description: A missing permission check in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1482; https://lists.apache.org/thread.html/r42b7ff290ed5ec8f27f12c54fff54462ffc4bcf6a5015c37fece94ac%40%3Cnotifications.jclouds.apache.org%3E
CVE: CVE-2019-10370
Published: 2019-08-07
Description: Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-157; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10371
Published: 2019-08-07
Description: A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-795; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10372
Published: 2019-08-07
Description: An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-796; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10373
Published: 2019-08-07
Description: A stored cross-site scripting vulnerability in Jenkins Build Pipeline Plugin 1.5.8 and earlier allows attackers able to edit the build pipeline description to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-879; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10374
Published: 2019-08-07
Description: A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields rendered using the configured markup formatter to insert links with the javascript scheme into the Jenkins UI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-142; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10375
Published: 2019-08-07
Description: An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10376
Published: 2019-08-07
Description: A reflected cross-site scripting vulnerability in Jenkins Wall Display Plugin 0.6.34 and earlier allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-751; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10377
Published: 2019-08-07
Description: A missing permission check in Jenkins Avatar Plugin 1.2 and earlier allows attackers with Overall/Read access to change the avatar of any user of Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1099; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10378
Published: 2019-08-07
Description: Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1428; https://www.zerodayinitiative.com/advisories/ZDI-19-839/
CVE: CVE-2019-10379
Published: 2019-08-07
Description: Jenkins Google Cloud Messaging Notification Plugin 1.0 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-591; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10380
Published: 2019-08-07
Description: Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10381
Published: 2019-08-07
Description: Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-931; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10382
Published: 2019-08-07
Description: Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1376; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10385
Published: 2019-08-07
Description: Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1430; https://www.zerodayinitiative.com/advisories/ZDI-19-834/
CVE: CVE-2019-10386
Published: 2019-08-07
Description: A cross-site request forgery vulnerability in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1008; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10387
Published: 2019-08-07
Description: A missing permission check in Jenkins XL TestView Plugin 1.2.0 and earlier in XLTestView.XLTestDescriptor#doTestConnection allows users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1008; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10388
Published: 2019-08-07
Description: A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1053; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-10389
Published: 2019-08-07
Description: A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/08/07/1; https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1053; http://www.openwall.com/lists/oss-security/2019/08/07/1
CVE: CVE-2019-14432
Published: 2019-08-07
Description: Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack vector can be used to crash the application at any time.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://thomask.sdf.org/blog/2019/08/07/cve-2019-14432-loom-desktop-rce-vulnerability.html; https://www.loom.com/blog/loom-desktop-application-security-fix/; https://thomask.sdf.org/blog/2019/08/07/cve-2019-14432-loom-desktop-rce-vulnerability.html
CVE: CVE-2019-14743
Published: 2019-08-07
Description: In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-732
References: https://amonitoring.ru/article/steamclient-0day/; https://github.com/alexanderbittner/steam-privesc/; https://habr.com/ru/company/pm/blog/462479/
CVE: CVE-2019-14744
Published: 2019-08-07
Description: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to libKF5ConfigCore.so, and the mishandling of .desktop and .directory files, as demonstrated by a shell command on an Icon line in a .desktop file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00013.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00016.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00034.html
CVE: CVE-2019-14745
Published: 2019-08-07
Description: In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://bananamafia.dev/post/r2-pwndebian/; https://github.com/radare/radare2/pull/14690; https://github.com/radare/radare2/releases/tag/3.7.0
CVE: CVE-2019-14746
Published: 2019-08-07
Description: A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/poropro/kuaifan/issues/2; https://github.com/poropro/kuaifan/issues/2