deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-18528
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18529
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18530
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18531
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18532
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18533
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18534
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18535
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18536
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18537
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18538
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18539
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18540
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18541
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18542
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18543
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18544
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18545
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18546
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18547
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18548
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18549
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18550
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18551
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18552
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18553
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18554
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18555
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18556
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18557
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18558
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18559
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18560
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18561
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18562
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18563
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18564
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18565
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-18566
Published: 2019-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-3636
Published: 2019-10-28
Description: A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102982; https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102982
CVE: CVE-2019-5536
Published: 2019-10-28
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
CVSS Score: 6.5 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2019-0019.html; https://www.vmware.com/security/advisories/VMSA-2019-0019.html
CVE: CVE-2019-5537
Published: 2019-10-28
Description: Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over FTPS and HTTPS. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.vmware.com/security/advisories/VMSA-2019-0018.html; https://www.vmware.com/security/advisories/VMSA-2019-0018.html
CVE: CVE-2019-5538
Published: 2019-10-28
Description: Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over SCP. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.vmware.com/security/advisories/VMSA-2019-0018.html; https://www.vmware.com/security/advisories/VMSA-2019-0018.html
CVE: CVE-2012-5577
Published: 2019-10-28
Description: Python keyring lib before 0.10 created keyring files with world-readable permissions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2012/11/27/3; https://bitbucket.org/kang/python-keyring-lib/commits/049cd181470f1ee6c540e1d64acf1def7b1de0c1; https://bitbucket.org/kang/python-keyring-lib/issue/67/set-go-rwx-on-keyring_passcfg
CVE: CVE-2019-14450
Published: 2019-10-28
Description: A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location. When this is combined with CVE-2019-14451, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.repetier-server.com/knowledgebase/security-advisory/; https://www.repetier-server.com/manuals/0.91/index.html; https://www.repetier-server.com/knowledgebase/security-advisory/
CVE: CVE-2019-17181
Published: 2019-10-28
Description: A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET or HEAD request that can result in a compromise of the hosting system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.leighb.com/intrasrv.htm; https://cxsecurity.com/issue/WLB[PII_REDACTED]; http://www.leighb.com/intrasrv.htm
CVE: CVE-2017-15725
Published: 2019-10-28
Description: An XML External Entity Injection vulnerability exists in Dzone AnswerHub.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://il.linkedin.com/in/nivlevy; https://il.linkedin.com/in/nivlevy
CVE: CVE-2019-18187
Published: 2019-10-28
Description: Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on the OfficeScan server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to a web service account, which depending on the web platform used may have restricted permissions. An attempted attack requires user authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://success.trendmicro.com/solution/000151730; https://success.trendmicro.com/solution/000151730; https://web.archive.org/web/[PII_REDACTED]1235/https://success.trendmicro.com/solution/000151730
CVE: CVE-2019-18188
Published: 2019-10-28
Description: Trend Micro Apex One could be exploited by an attacker utilizing a command injection vulnerability to extract files from an arbitrary zip file to a specific folder on the Apex One server, which could potentially lead to remote code execution (RCE). The remote process execution is bound to the IUSR account, which has restricted permission and is unable to make major system changes. An attempted attack requires user authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://success.trendmicro.com/solution/000151731; https://success.trendmicro.com/solution/000151731
CVE: CVE-2019-18189
Published: 2019-10-28
Description: A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass authentication and log on to an affected product's management console as a root user. The vulnerability does not require authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://success.trendmicro.com/solution/000151732; https://success.trendmicro.com/solution/000151732
CVE: CVE-2019-4306
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-Force ID: 160986.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160986; https://www.ibm.com/support/pages/node/1096396; https://exchange.xforce.ibmcloud.com/vulnerabilities/160986
CVE: CVE-2019-4307
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 160987.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160987; https://www.ibm.com/support/pages/node/1096288; https://exchange.xforce.ibmcloud.com/vulnerabilities/160987
CVE: CVE-2019-4309
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161035; https://www.ibm.com/support/pages/node/1096348; https://exchange.xforce.ibmcloud.com/vulnerabilities/161035
CVE: CVE-2019-4311
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161037.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161037; https://www.ibm.com/support/pages/node/1098069; https://exchange.xforce.ibmcloud.com/vulnerabilities/161037
CVE: CVE-2019-4314
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161041; https://www.ibm.com/support/pages/node/1096912; https://exchange.xforce.ibmcloud.com/vulnerabilities/161041
CVE: CVE-2019-4329
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161209; https://www.ibm.com/support/pages/node/1096906; https://exchange.xforce.ibmcloud.com/vulnerabilities/161209
CVE: CVE-2019-4330
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-565
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161210; https://www.ibm.com/support/pages/node/1096384; https://exchange.xforce.ibmcloud.com/vulnerabilities/161210
CVE: CVE-2019-4339
Published: 2019-10-29
Description: IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/161418; https://www.ibm.com/support/pages/node/1096924; https://exchange.xforce.ibmcloud.com/vulnerabilities/161418
CVE: CVE-2019-4546
Published: 2019-10-29
Description: After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165948; https://www.ibm.com/support/pages/node/1087738; https://exchange.xforce.ibmcloud.com/vulnerabilities/165948
CVE: CVE-2019-4600
Published: 2019-10-29
Description: IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
CVSS Score: 5.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/167883; https://www.ibm.com/support/pages/node/1079127; https://exchange.xforce.ibmcloud.com/vulnerabilities/167883
CVE: CVE-2009-3723
Published: 2019-10-29
Description: asterisk allows calls on prohibited networks
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://downloads.asterisk.org/pub/security/AST-2009-007.html; https://access.redhat.com/security/cve/cve-2009-3723; https://security-tracker.debian.org/tracker/CVE-2009-3723
CVE: CVE-2010-3373
Published: 2019-10-29
Description: paxtest handles temporary files insecurely
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598413; https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-3373.html; https://security-tracker.debian.org/tracker/CVE-2010-3373
CVE: CVE-2010-3375
Published: 2019-10-29
Description: qtparted has insecure library loading which may allow arbitrary code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598301; https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-3375.html; https://security-tracker.debian.org/tracker/CVE-2010-3375
CVE: CVE-2010-4237
Published: 2019-10-29
Description: Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598841; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4237; https://bz.mercurial-scm.org/show_bug.cgi?id=2407
CVE: CVE-2011-0428
Published: 2019-10-29
Description: Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://ikiwiki.info/security/#index38h2; https://security-tracker.debian.org/tracker/CVE-2011-0428; https://ikiwiki.info/security/#index38h2
CVE: CVE-2011-2538
Published: 2019-10-29
Description: Cisco Video Communications Server (VCS) before X7.0.3 contains a command injection vulnerability which allows remote, authenticated attackers to execute arbitrary commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-74
References: https://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/release_note/Cisco_VCS_Release_Note_X7-0-3.pdf; https://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/release_note/Cisco_VCS_Release_Note_X7-0-3.pdf
CVE: CVE-2011-4931
Published: 2019-10-29
Description: gpw generates shorter passwords than required
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: http://www.openwall.com/lists/oss-security/2012/01/17/13; https://access.redhat.com/security/cve/cve-2011-4931; https://security-tracker.debian.org/tracker/CVE-2011-4931
CVE: CVE-2012-0046
Published: 2019-10-29
Description: mediawiki allows deleted text to be exposed
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/security/cve/cve-2012-0046; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0046; https://security-tracker.debian.org/tracker/CVE-2012-0046
CVE: CVE-2012-1187
Published: 2019-10-29
Description: Bitlbee does not drop extra group privileges correctly in unix.c
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-273
References: https://access.redhat.com/security/cve/cve-2012-1187; https://bugs.bitlbee.org/ticket/852; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1187
CVE: CVE-2012-2945
Published: 2019-10-29
Description: Hadoop 1.0.3 contains a symlink vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://seclists.org/fulldisclosure/2012/Jul/3; https://security-tracker.debian.org/tracker/CVE-2012-2945; https://seclists.org/fulldisclosure/2012/Jul/3
CVE: CVE-2016-4289
Published: 2019-10-29
Description: A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99 characters to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.talosintelligence.com/reports/TALOS-2016-0127/; http://www.talosintelligence.com/reports/TALOS-2016-0127/
CVE: CVE-2017-5678
Published: 2019-10-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-13069. Reason: This candidate is a reservation duplicate of CVE-2017-13069. Notes: All CVE users should reference CVE-2017-13069 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10727
Published: 2019-10-29
Description: Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Fabrik/fabrik/issues/2033; https://github.com/Fabrik/fabrik/issues/2033
CVE: CVE-2019-0205
Published: 2019-10-29
Description: In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://mail-archives.apache.org/mod_mbox/thrift-dev/201910.mbox/%3CVI1PR0101MB2142E0EA19F582429C3AEBCBB1920%40VI1PR0101MB2142.eurprd01.prod.exchangelabs.com%3E; https://access.redhat.com/errata/RHSA-2020:0804; https://access.redhat.com/errata/RHSA-2020:0805