deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-6973
Published: 2019-03-21
Description: Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html; https://github.com/bitfu/sricam-gsoap2.8-dos-exploit; https://www.exploit-db.com/exploits/46261/
CVE: CVE-2019-7161
Published: 2019-03-21
Description: An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-7161; https://www.excellium-services.com/cert-xlm-advisory; https://www.excellium-services.com/cert-xlm-advisory/cve-2019-7161/
CVE: CVE-2019-7221
Published: 2019-03-21
Description: The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html; http://packetstormsecurity.com/files/151713/KVM-VMX-Preemption-Timer-Use-After-Free.html; http://www.openwall.com/lists/oss-security/2019/02/18/2
CVE: CVE-2019-7222
Published: 2019-03-21
Description: The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html; http://packetstormsecurity.com/files/151712/KVM-kvm_inject_page_fault-Uninitialized-Memory-Leak.html; http://www.openwall.com/lists/oss-security/2019/02/18/2
CVE: CVE-2019-7223
Published: 2019-03-21
Description: InvoicePlane 1.5 has stored XSS via the index.php/invoices/ajax/save invoice_password parameter, aka the "PDF password" field to the "Create Invoice" option. The XSS payload is rendered at an index.php/invoices/view/## URI. NOTE: this is different from CVE-2018-12255.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2019-7299
Published: 2019-03-21
Description: A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Ticket System plugin 9.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the subject parameter in wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/ajax/submit_ticket.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert.kalasag.com.ph/news/research/cve-2019-7299-stored-xss-in-wp-support-plus-responsive-ticket-system/; https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/#developers; https://wpvulndb.com/vulnerabilities/9235
CVE: CVE-2019-7383
Published: 2019-03-21
Description: An issue was discovered on Systrome Cumilon ISG-600C, ISG-600H, and ISG-800W devices with firmware V1.1-R2.1_TRUNK-20181105.bin. A shell command injection occurs by editing the description of an ISP file. The file network/isp/isp_update_edit.php does not properly validate user input, which leads to shell command injection via the des parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/151648/SYSTORME-ISG-Command-Injection.html; http://seclists.org/fulldisclosure/2019/Feb/32; http://www.securityfocus.com/bid/107035
CVE: CVE-2019-7384
Published: 2019-03-21
Description: An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below. The value of the fmgpon_loid parameter is used in a system call inside the boa binary. Because there is no user input validation, this leads to authenticated code execution on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/151649/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.html; http://seclists.org/fulldisclosure/2019/Feb/33; http://www.securityfocus.com/bid/107033
CVE: CVE-2019-7385
Published: 2019-03-21
Description: An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 or below, The values of the newpass and confpass parameters in /bin/WebMGR are used in a system call in the firmware. Because there is no user input validation, this leads to authenticated code execution on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://breakthesec.com; http://packetstormsecurity.com/files/151650/Raisecom-Technology-GPON-ONU-HT803G-07-Command-Injection.html; http://seclists.org/fulldisclosure/2019/Feb/34
CVE: CVE-2019-7386
Published: 2019-03-21
Description: A Denial of Service issue has been discovered in the Gecko component of KaiOS 2.5 10.05 (platform 48.0.a2) on Nokia 8810 4G devices. When a crafted web page is visited with the internal browser, the Gecko process crashes with a segfault. Successful exploitation could lead to the remote code execution on the device.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/151651/Nokia-8810-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2019/Feb/35; http://www.breakthesec.com
CVE: CVE-2019-7391
Published: 2019-03-21
Description: ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/login-page.cgi CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151550/Zyxel-VMG3312-B10B-DSL-491HNU-B1-V2-Cross-Site-Request-Forgery.html; https://twitter.com/h1_yusuf; https://www.exploit-db.com/exploits/46326/
CVE: CVE-2019-7416
Published: 2019-03-21
Description: XSS and/or a Client Side URL Redirect exists in OpenText Documentum Webtop 5.3 SP2. The parameter startat in "/webtop/help/en/default.htm" is vulnerable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-601
References: http://packetstormsecurity.com/files/151582/OpenText-Documentum-Webtop-5.3-SP2-Open-Redirect.html; http://seclists.org/fulldisclosure/2019/Feb/26; https://www.opentext.com/products-and-solutions/products/opentext-product-offerings-catalog/rebranded-products/documentum
CVE: CVE-2019-7417
Published: 2019-03-21
Description: XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151583/Ericsson-Active-Library-Explorer-ALEX-14.3-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/27; http://www.ericsson.com
CVE: CVE-2019-7418
Published: 2019-03-21
Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/swsAlert.sws" in multiple parameters: flag, frame, func, and Nfunc.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/28; http://www.samsung.com/Support/ProductSupport/download/index.aspx
CVE: CVE-2019-7419
Published: 2019-03-21
Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws/leftmenu.sws" in multiple parameters: ruiFw_id, ruiFw_pid, ruiFw_title.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/28; http://www.samsung.com/Support/ProductSupport/download/index.aspx
CVE: CVE-2019-7420
Published: 2019-03-21
Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.application/information/networkinformationView.sws" in the tabName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/28; http://www.samsung.com/Support/ProductSupport/download/index.aspx
CVE: CVE-2019-7421
Published: 2019-03-21
Description: XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151584/SAMSUNG-X7400GX-Sync-Thru-Web-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/28; http://www.samsung.com/Support/ProductSupport/download/index.aspx
CVE: CVE-2019-7422
Published: 2019-03-21
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; https://www.manageengine.com/products/netflow/?doc
CVE: CVE-2019-7423
Published: 2019-03-21
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; https://www.manageengine.com/products/netflow/?doc
CVE: CVE-2019-7424
Published: 2019-03-21
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to CVE-2009-3903.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; https://www.manageengine.com/products/netflow/?doc
CVE: CVE-2019-7425
Published: 2019-03-21
Description: XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the task parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151585/Zoho-ManageEngine-Netflow-Analyzer-Professional-7.0.0.2-XSS.html; http://seclists.org/fulldisclosure/2019/Feb/29; https://www.manageengine.com/products/netflow/?doc
CVE: CVE-2019-7429
Published: 2019-03-21
Description: PHP Scripts Mall Property Rental Software 2.1.4 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2016/08 directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://gkaim.com/cve-2019-7429-vikas-chaudhary/; https://gkaim.com/cve-2019-7429-vikas-chaudhary/
CVE: CVE-2019-7430
Published: 2019-03-21
Description: PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2019-7430-vikas-chaudhary/; https://gkaim.com/cve-2019-7430-vikas-chaudhary/
CVE: CVE-2019-7431
Published: 2019-03-21
Description: PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://gkaim.com/cve-2019-7431-vikas-chaudhary/; https://gkaim.com/cve-2019-7431-vikas-chaudhary/
CVE: CVE-2019-7432
Published: 2019-03-21
Description: PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2019-7432-vikas-chaudhary/; https://gkaim.com/cve-2019-7432-vikas-chaudhary/
CVE: CVE-2019-7433
Published: 2019-03-21
Description: PHP Scripts Mall Rental Bike Script 2.0.3 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gkaim.com/cve-2019-7433-vikas-chaudhary/; https://gkaim.com/cve-2019-7433-vikas-chaudhary/
CVE: CVE-2019-7434
Published: 2019-03-21
Description: PHP Scripts Mall Rental Bike Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://gkaim.com/cve-2019-7434-vikas-chaudhary/; https://gkaim.com/cve-2019-7434-vikas-chaudhary/
CVE: CVE-2019-7435
Published: 2019-03-21
Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2019-7435-vikas-chaudhary/; https://gkaim.com/cve-2019-7435-vikas-chaudhary/
CVE: CVE-2019-7436
Published: 2019-03-21
Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has directory traversal via a direct request for a listing of an uploads directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://gkaim.com/cve-2019-7436-vikas-chaudhary/; https://gkaim.com/cve-2019-7436-vikas-chaudhary/
CVE: CVE-2019-7437
Published: 2019-03-21
Description: PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2019-7437-vikas-chaudhary/; https://gkaim.com/cve-2019-7437-vikas-chaudhary/
CVE: CVE-2019-7438
Published: 2019-03-21
Description: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152625/JioFi-4G-M2S-1.0.2-Cross-Site-Scripting.html; https://gkaim.com/cve-2019-7438-html-vikas-chaudhary/; https://gkaim.com/cve-2019-7438-xss-vikas-chaudhary/
CVE: CVE-2019-7439
Published: 2019-03-21
Description: cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices allows a DoS (Hang) via the mask POST parameter.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/152626/JioFi-4G-M2S-1.0.2-Denial-Of-Service.html; https://gkaim.com/cve-2019-7439-vikas-chaudhary/; https://www.exploit-db.com/exploits/46752/
CVE: CVE-2019-7440
Published: 2019-03-21
Description: JioFi 4G M2S 1.0.2 devices have CSRF via the SSID name and Security Key field under Edit Wi-Fi Settings (aka a SetWiFi_Setting request to cgi-bin/qcmap_web_cgi).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152361/JioFi-4G-M2S-1.0.2-Cross-Site-Request-Forgery.html; https://gkaim.com/cve-2019-7440-vikas-chaudhary/; https://www.exploit-db.com/exploits/46633/
CVE: CVE-2019-7441
Published: 2019-03-21
Description: cgi-bin/webscr?cmd=_cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter (such as amount_1), as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it is true that the amount can be manipulated in the PayPal payment flow. However, the amount is validated against the WooCommerce order total before completing the order, and if it doesn’t match then the order will be left in an “On Hold” state
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/152362/WordPress-PayPal-Checkout-Payment-Gateway-1.6.8-Parameter-Tampering.html; https://gkaim.com/cve-2019-7441-vikas-chaudhary/; https://wordpress.org/support/topic/vulnerabilty-in-plugin/#post-11899173
CVE: CVE-2019-8934
Published: 2019-03-21
Description: hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
CVSS Score: 3.3 (LOW)
CWE: CWE-668
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00040.html; http://www.openwall.com/lists/oss-security/2019/02/21/1
CVE: CVE-2019-8938
Published: 2019-03-21
Description: VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151800/VertrigoServ-2.17-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/47; https://sourceforge.net/p/vertrigo/news/
CVE: CVE-2019-9083
Published: 2019-03-21
Description: SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2019/Feb/51; http://seclists.org/fulldisclosure/2019/Feb/51
CVE: CVE-2019-9093
Published: 2019-03-21
Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename parameter is echoed back, which resulted in reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md; https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md
CVE: CVE-2019-9094
Published: 2019-03-21
Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is echoed back in JavaScript code, which resulted in XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md; https://github.com/humhub/humhub/blob/master/protected/humhub/docs/CHANGELOG.md
CVE: CVE-2019-9837
Published: 2019-03-21
Description: Doorkeeper::OpenidConnect (aka the OpenID Connect extension for Doorkeeper) 1.4.x and 1.5.x before 1.5.4 has an open redirect via the redirect_uri field in an OAuth authorization request (that results in an error response) with the 'openid' scope and a prompt=none value. This allows phishing attacks against the authorization flow.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/doorkeeper-gem/doorkeeper-openid_connect/blob/master/CHANGELOG.md; https://github.com/doorkeeper-gem/doorkeeper-openid_connect/issues/61; https://github.com/doorkeeper-gem/doorkeeper-openid_connect/pull/66
CVE: CVE-2019-9857
Published: 2019-03-21
Description: In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://www.securityfocus.com/bid/107527; https://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs.git/commit/?h=fsnotify&id=62c9d2674b31d4c8a674bee86b7edc6da2803aea; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXLZ2V2ES37A3J7DMK4MZYIWV2LEZFLM/
CVE: CVE-2019-9867
Published: 2019-03-21
Description: An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The proxy server password is displayed to an administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/107567; https://www.veritas.com/content/support/en_US/security/VTS19-001.html#Issue2; http://www.securityfocus.com/bid/107567
CVE: CVE-2019-9868
Published: 2019-03-21
Description: An issue was discovered in the Web Console in Veritas NetBackup Appliance through 3.1.2. The SMTP password is displayed to an administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/107567; https://www.veritas.com/content/support/en_US/security/VTS19-001.html#Issue1; http://www.securityfocus.com/bid/107567
CVE: CVE-2019-9870
Published: 2019-03-21
Description: plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for CKEditor mishandles SCRIPT elements.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-19
References: https://github.com/w8tcha/CKEditor-oEmbed-Plugin/commit/10f6169e39510bbf5af[PII_REDACTED]44458b9dc9b; https://github.com/w8tcha/CKEditor-oEmbed-Plugin/issues/94; https://github.com/w8tcha/CKEditor-oEmbed-Plugin/commit/10f6169e39510bbf5af[PII_REDACTED]44458b9dc9b
CVE: CVE-2019-9877
Published: 2019-03-21
Description: There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41265; https://research.loginsoft.com/bugs/invalid-memory-access-in-textpagefindgaps-xpdf-4-01/; https://forum.xpdfreader.com/viewtopic.php?f=3&t=41265
CVE: CVE-2019-9878
Published: 2019-03-21
Description: There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/kermitt2/pdfalto/issues/46; https://research.loginsoft.com/bugs/invalid-memory-access-in-gfxindexedcolorspacemapcolortobase-pdfalto-0-2/; https://github.com/kermitt2/pdfalto/issues/46
CVE: CVE-2019-9889
Published: 2019-03-21
Description: In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://github.com/vanilla/vanilla/compare/b043ae8...9f12b22; https://github.com/vanilla/vanilla/pull/7840; https://hackerone.com/reports/411140
CVE: CVE-2019-9893
Published: 2019-03-21
Description: libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able to lead to bypassing seccomp filters and potential privilege escalations.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00027.html; https://access.redhat.com/errata/RHSA-2019:3624
CVE: CVE-2019-9894
Published: 2019-03-21
Description: A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-320
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html; https://lists.debian.org/debian-lts-announce/2019/04/msg00023.html
CVE: CVE-2019-9895
Published: 2019-03-21
Description: In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36LWQ3NPFIV7DC7TC4KFPRYRH2OR7SZ2/