deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-14993
Published: 2019-08-13
Description: Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-185
References: https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164; https://github.com/envoyproxy/envoy/issues/7728
CVE: CVE-2019-10927
Published: 2019-08-13
Description: A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-703
References: https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf
CVE: CVE-2019-10928
Published: 2019-08-13
Description: A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated attacker with physical access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the confidentiality, integrity and availability of the affected device.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-703
References: https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-671286.pdf
CVE: CVE-2019-10929
Published: 2019-08-13
Description: A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC STEP 7 (TIA Portal) (All versions < V16), SIMATIC WinCC (TIA Portal) (All versions < V16), SIMATIC WinCC OA (All versions < V3.16 P013), SIMATIC WinCC Runtime Advanced (All versions < V16), SIMATIC WinCC Runtime Professional (All versions < V16), TIM 1531 IRC (incl. SIPLUS NET variants) (All versions < V2.1). Affected devices contain a message protection bypass vulnerability due to certain properties in the calculation used for integrity protection. This could allow an attacker in a Man-in-the-Middle position to modify network traffic sent on port 102/tcp to the affected devices.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://cert-portal.siemens.com/productcert/pdf/ssa-232418.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-273799.pdf; https://www.us-cert.gov/ics/advisories/icsa-19-344-04
CVE: CVE-2019-10942
Published: 2019-08-13
Description: A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0), SCALANCE X204RNA (HSR) (All versions), SCALANCE X204RNA (PRP) (All versions), SCALANCE X204RNA EEC (HSR) (All versions), SCALANCE X204RNA EEC (PRP) (All versions), SCALANCE X204RNA EEC (PRP/HSR) (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-100232.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-100232.pdf
CVE: CVE-2019-10943
Published: 2019-08-13
Description: A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V20.8), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V20.8), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.4.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions >= V4.4.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.8.1), SIMATIC S7-1500 Software Controller (All versions < V20.8), SIMATIC S7-1500 Software Controller (All versions >= V20.8), SIMATIC S7-PLCSIM Advanced (All versions < V3.0), SIMATIC S7-PLCSIM Advanced (All versions >= V3.0). An attacker with network access to port 102/tcp could potentially modify the user program on the PLC in a way that the running code is different from the source code which is stored on the device. An attacker must have network access to affected devices and must be able to perform changes to the user program. The vulnerability could impact the perceived integrity of the user program stored on the CPU. An engineer that tries to obtain the code of the user program running on the device, can receive different source code that is not actually running on the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-353, CWE-345
References: https://cert-portal.siemens.com/productcert/pdf/ssa-232418.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-232418.pdf
CVE: CVE-2019-13415
Published: 2019-08-13
Description: Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-280
References: https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
CVE: CVE-2019-13416
Published: 2019-08-13
Description: Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3; https://search-guard.com/cve-advisory/; https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
CVE: CVE-2019-12806
Published: 2019-08-13
Description: UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote attacker to execute arbitrary code via crafted https packets.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35111; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35111
CVE: CVE-2019-12807
Published: 2019-08-13
Description: Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.altools.co.kr/Download/ALZip.aspx#n; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35114; https://www.altools.co.kr/Download/ALZip.aspx#n
CVE: CVE-2019-12808
Published: 2019-08-13
Description: ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-732
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35116; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35116
CVE: CVE-2019-14984
Published: 2019-08-13
Description: eQ-3 Homematic CCU2 and CCU3 with the XML-API through 1.2.0 AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because the undocumented addons/xmlapi/exec.cgi script uses CMD_EXEC to execute TCL code from a POST request.
CVSS Score: 8.1 (HIGH)
CWE: CWE-306
References: https://psytester.github.io/CVE-2019-14984/; https://psytester.github.io/CVE-2019-14984/
CVE: CVE-2019-14985
Published: 2019-08-13
Description: eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn installed allow Remote Code Execution by unauthenticated attackers with access to the web interface, because this interface can access the CMD_EXEC virtual device type 28.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://psytester.github.io/CVE-2019-14985/; https://psytester.github.io/CVE-2019-14985/
CVE: CVE-2019-14986
Published: 2019-08-13
Description: eQ-3 Homematic CCU2 and CCU3 with the CUxD AddOn before 2.3.0 installed allow administrative operations by unauthenticated attackers with access to the web interface, because features such as File-Browser and Shell Command (as well as "Set root password") are exposed.
CVSS Score: 8.1 (HIGH)
References: https://psytester.github.io/CVE-2019-14986/; https://psytester.github.io/CVE-2019-14986/
CVE: CVE-2019-11207
Published: 2019-08-13
Description: The web server component of TIBCO Software Inc.'s TIBCO LogLogic Enterprise Virtual Appliance, and TIBCO LogLogic Log Management Intelligence contains multiple vulnerabilities that theoretically allow persistent and reflected cross-site scripting (XSS) attacks, as well as cross-site request forgery (CSRF) attacks. This issue affects: TIBCO Software Inc. TIBCO LogLogic Enterprise Virtual Appliance version 6.2.1 and prior versions. TIBCO Software Inc. TIBCO LogLogic Log Management Intelligence 6.2.1. TIBCO LogLogic LX825 Appliance 0.0.004, TIBCO LogLogic LX1025 Appliance 0.0.004, TIBCO LogLogic LX4025 Appliance 0.0.004, TIBCO LogLogic MX3025 Appliance 0.0.004, TIBCO LogLogic MX4025 Appliance 0.0.004, TIBCO LogLogic ST1025 Appliance 0.0.004, TIBCO LogLogic ST2025-SAN Appliance 0.0.004, and TIBCO LogLogic ST4025 Appliance 0.0.004 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below. TIBCO LogLogic LX1035 Appliance 0.0.005, TIBCO LogLogic LX1025R1 Appliance 0.0.004, TIBCO LogLogic LX1025R2 Appliance 0.0.004, TIBCO LogLogic LX4025R1 Appliance 0.0.004, TIBCO LogLogic LX4025R2 Appliance 0.0.004, TIBCO LogLogic LX4035 Appliance 0.0.005, TIBCO LogLogic ST2025-SANR1 Appliance 0.0.004, TIBCO LogLogic ST2025-SANR2 Appliance 0.0.004, TIBCO LogLogic ST2035-SAN Appliance 0.0.005, TIBCO LogLogic ST4025R1 Appliance 0.0.004, TIBCO LogLogic ST4025R2 Appliance 0.0.004, and TIBCO LogLogic ST4035 Appliance 0.0.005 using TIBCO LogLogic Log Management Intelligence versions 6.2.1 and below.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/08/tibco-security-advisory-august-13-2019-tibco-loglogic-log-management-intelligence; http://www.tibco.com/services/support/advisories
CVE: CVE-2019-12479
Published: 2019-08-13
Description: An issue was discovered in 20|20 Storage 2.11.0. A Path Traversal vulnerability in the TwentyTwenty.Storage library in the LocalStorageProvider allows creating and reading files outside of the specified basepath. If the application using this library does not sanitize user-supplied filenames, then this issue may be exploited to read or write arbitrary files. This affects LocalStorageProvider.cs.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://security401.com/twentytwenty-storage-path-traversal/; https://security401.com/twentytwenty-storage-path-traversal/
CVE: CVE-2019-14809
Published: 2019-08-13
Description: net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can compose a crafted javascript:// URL that results in a hostname of google.com.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html
CVE: CVE-2019-5223
Published: 2019-08-13
Description: PCManager 9.1.3.1 has an improper authentication vulnerability. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190718-01-pcmanager-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190718-01-pcmanager-en
CVE: CVE-2019-5280
Published: 2019-08-13
Description: The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered abnormally, affecting the availability of IP phones.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190724-01-7900-en
CVE: CVE-2019-5299
Published: 2019-08-13
Description: Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability. Attackers can induce users to install malicious applications. Due to a defect in the signature verification logic, the malicious applications can invoke specific interface to execute malicious code. A successful exploit may result in the execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-phone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190320-01-phone-en
CVE: CVE-2019-9511
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
CVE: CVE-2019-9512
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html
CVE: CVE-2019-9513
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
CVE: CVE-2019-9514
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html
CVE: CVE-2019-9515
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html; http://seclists.org/fulldisclosure/2019/Aug/16
CVE: CVE-2019-9516
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html
CVE: CVE-2019-9517
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html
CVE: CVE-2019-9518
Published: 2019-08-13
Description: Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html; http://seclists.org/fulldisclosure/2019/Aug/16
CVE: CVE-2019-15028
Published: 2019-08-14
Description: In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms.
CVSS Score: 5.3 (MEDIUM)
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-hardening-com-contact-contact-form; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-hardening-com-contact-contact-form
CVE: CVE-2014-10375
Published: 2019-08-14
Description: handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://git.savannah.nongnu.org/cgit/exosip.git/commit/?id=2549e421c14aff886629b8482c14af800f411070; http://git.savannah.nongnu.org/cgit/exosip.git/commit/?id=2549e421c14aff886629b8482c14af800f411070
CVE: CVE-2019-14973
Published: 2019-08-14
Description: _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00102.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00023.html; http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html
CVE: CVE-2019-14975
Published: 2019-08-14
Description: Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=97096297d409ec6f206298444ba00719607e8ba8; https://bugs.ghostscript.com/show_bug.cgi?id=701292; http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=97096297d409ec6f206298444ba00719607e8ba8
CVE: CVE-2019-15027
Published: 2019-08-14
Description: The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes 'system("/system/bin/rm -r /data/' followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://dojo.bullguard.com/dojo-by-bullguard/blog/gaining-rooting-primitives-for-android-mediatek-chips/; https://github.com/andr3jx/MTK6577/blob/238012ebf18e[PII_REDACTED]d1742ff7ab6417e80d/mediatek/platform/mt6577/external/meta/emmc/meta_clr_emmc.c#L302-L305; https://dojo.bullguard.com/dojo-by-bullguard/blog/gaining-rooting-primitives-for-android-mediatek-chips/
CVE: CVE-2017-18515
Published: 2019-08-14
Description: The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wordpress.org/plugins/wp-statistics/#developers; https://wordpress.org/plugins/wp-statistics/#developers