deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4846
Published: 2018-06-26
Description: A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens Healthineers Informatics products), RAPIDLab 1200 Series (All versions < V3.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions >= V3.0 _with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (V2.4.X_with_ Siemens Healthineers Informatics products), RAPIDPoint 500 systems (All versions =< V2.3 _with_ Siemens Healthineers Informatics products), RAPIDPoint 400 systems (All versions _with_ Siemens Healthineers Informatics products). A factory account with hardcoded password might allow attackers access to the device over port 5900/tcp. Successful exploitation requires no user interaction or privileges and impacts the confidentiality, integrity, and availability of the affected device. At the time of advisory publication, no public exploitation of this security vulnerability is known. Siemens Healthineers confirms the security vulnerability and provides mitigations to resolve the security issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-755010.pdf
CVE: CVE-2018-4859
Published: 2018-06-26
Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE: CVE-2018-4860
Published: 2018-06-26
Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. The vulnerability could allow an attacker to execute arbitrary code on the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE: CVE-2018-4861
Published: 2018-06-26
Description: A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), could potentially read and download arbitrary files from the device's file system. Successful exploitation requires that the attacker has network access to the web interface. The attacker must be authenticated as administrative user to exploit the security vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-200
References: https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-977428.pdf
CVE: CVE-2018-12711
Published: 2018-06-26
Description: An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the current page URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104565; http://www.securitytracker.com/id/1041244; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-xss-vulnerability-in-language-switcher-module
CVE: CVE-2018-12712
Published: 2018-06-26
Description: An issue was discovered in Joomla! 2.5.0 through 3.8.8 before 3.8.9. The autoload code checks classnames to be valid, using the "class_exists" function in PHP. In PHP 5.3, this function validates invalid names as valid, which can result in a Local File Inclusion.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104566; http://www.securitytracker.com/id/1041245; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-local-file-inclusion-with-php-5-3
CVE: CVE-2018-3760
Published: 2018-06-26
Description: There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-200
References: https://access.redhat.com/errata/RHSA-2018:2244; https://access.redhat.com/errata/RHSA-2018:2245; https://access.redhat.com/errata/RHSA-2018:2561
CVE: CVE-2018-10594
Published: 2018-06-26
Description: Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) utilize a fixed-length stack buffer where an unverified length value can be read from the network packets via a specific network port, causing the buffer to be overwritten. This may allow remote code execution, cause the application to crash, or result in a denial-of-service condition in the application server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/104529; https://ics-cert.us-cert.gov/advisories/ICSA-18-172-01; https://www.exploit-db.com/exploits/44965/
CVE: CVE-2018-12895
Published: 2018-06-26
Description: WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink function and can delete the wp-config.php file. This is related to missing filename validation in the wp-includes/post.php wp_delete_attachment function. The attacker must have capabilities for files and posts that are normally available only to the Author, Editor, and Administrator roles. The attack methodology is to delete wp-config.php and then launch a new installation process to increase the attacker's privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/164633/WordPress-4.9.6-Arbitrary-File-Deletion.html; http://www.securityfocus.com/bid/104569; https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
CVE: CVE-2018-1374
Published: 2018-06-26
Description: An IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. IBM X-Force ID: 137775.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg22012982; https://exchange.xforce.ibmcloud.com/vulnerabilities/137775; http://www-01.ibm.com/support/docview.wss?uid=swg22012982
CVE: CVE-2018-1614
Published: 2018-06-26
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote attacker to obtain sensitive information. IBM X-Force ID: 144270.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041168; https://exchange.xforce.ibmcloud.com/vulnerabilities/144270; https://www-01.ibm.com/support/docview.wss?uid=swg22016887https://www-01.ibm.com/support/docview.wss?uid=swg22016887
CVE: CVE-2018-3840
Published: 2018-06-26
Description: A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0523; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0523
CVE: CVE-2018-3841
Published: 2018-06-26
Description: A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read-in is not validated, and its use can lead to a null pointer dereference. The IT application is opened by a user and then listens for a connection on port 4001. An attacker can deliver an attack once the application has been opened.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0524; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0524
CVE: CVE-2018-11053
Published: 2018-06-26
Description: Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://www.dell.com/support/article/us/en/19/sln310281/ism-dell-emc-idrac-service-module-improper-file-permission-vulnerability?lang=en; http://www.securityfocus.com/bid/104567; http://www.dell.com/support/article/us/en/19/sln310281/ism-dell-emc-idrac-service-module-improper-file-permission-vulnerability?lang=en
CVE: CVE-2018-12900
Published: 2018-06-26
Description: Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2798; https://access.redhat.com/errata/RHSA-2019:2053; https://access.redhat.com/errata/RHSA-2019:3419
CVE: CVE-2018-12902
Published: 2018-06-26
Description: In Easy Magazine through 2012-10-26, there is XSS in the search bar of the web site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lzlzh2016/easymagazine/blob/master/xx1.md; https://github.com/lzlzh2016/easymagazine/blob/master/xx1.md
CVE: CVE-2018-12903
Published: 2018-06-26
Description: In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://code610.blogspot.com/2018/06/exploiting-cyberark-1021603.html; http://code610.blogspot.com/2018/06/exploiting-cyberark-1021603.html
CVE: CVE-2018-12904
Published: 2018-06-27
Description: In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=727ba748e110b4de50d142edca9d6a9b7e6111d8; https://bugs.chromium.org/p/project-zero/issues/detail?id=1589; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.17.2
CVE: CVE-2017-18342
Published: 2018-06-27
Description: In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/marshmallow-code/apispec/issues/278; https://github.com/yaml/pyyaml/blob/master/CHANGES; https://github.com/yaml/pyyaml/issues/193
CVE: CVE-2018-12905
Published: 2018-06-27
Description: joyplus-cms 1.6.0 has XSS in admin_player.php, related to manager/index.php "system manage" and "add" actions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/joyplus/joyplus-cms/issues/427; https://github.com/joyplus/joyplus-cms/issues/427
CVE: CVE-2018-12907
Published: 2018-06-27
Description: In Rclone 1.42, use of "rclone sync" to migrate data between two Google Cloud Storage buckets might allow attackers to trigger the transmission of any URL's content to Google, because there is no validation of a URL field received from the Google Cloud Storage API server, aka a "RESTLESS" issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2018/06/27/3; https://www.danieldent.com/blog/restless-vulnerability-non-browser-cross-domain-http-request-attacks/; http://openwall.com/lists/oss-security/2018/06/27/3
CVE: CVE-2018-8025
Published: 2018-06-27
Description: CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/104554; https://lists.apache.org/thread.html/a919e38f587c714c386a01d40fc8f45bd4219a65aaf2dc0bb4eccc96%40%3Cdev.hbase.apache.org%3E; http://www.securityfocus.com/bid/104554
CVE: CVE-2017-7465
Published: 2018-06-27
Description: It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a 'javax.xml.transform.TransformerFactory'. If the FEATURE_SECURE_PROCESSING feature is set to 'true', it mitigates this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-611, CWE-94
References: http://www.securityfocus.com/bid/97605; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7465; http://www.securityfocus.com/bid/97605
CVE: CVE-2018-12908
Published: 2018-06-27
Description: Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/44977/; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-12909
Published: 2018-06-27
Description: Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/jokkedk/webgrind/issues/112; https://github.com/jokkedk/webgrind/issues/112
CVE: CVE-2018-5435
Published: 2018-06-27
Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for remote code execution. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.
CVSS Score: 9.6 (CRITICAL)
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5435; http://www.tibco.com/services/support/advisories
CVE: CVE-2018-5436
Published: 2018-06-27
Description: The Spotfire server component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contain multiple vulnerabilities that may allow for the disclosure of information, including user and data source credentials. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Server: versions up to and including 7.8.1; 7.9.0; 7.10.0; 7.11.0; 7.12.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5436; http://www.tibco.com/services/support/advisories
CVE: CVE-2018-5437
Published: 2018-06-27
Description: The TIBCO Spotfire Client and TIBCO Spotfire Web Player Client components of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Deployment Kit, TIBCO Spotfire Desktop, and TIBCO Spotfire Desktop Language Packs contain multiple vulnerabilities that may allow for unauthorized information disclosure. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0; 7.12.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions up to and including 7.12.0, TIBCO Spotfire Deployment Kit: versions up to and including 7.8.0; 7.9.0;7.9.1;7.10.0;7.10.1;7.11.0; 7.12.0, TIBCO Spotfire Desktop: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0;7.12.0, TIBCO Spotfire Desktop Language Packs: versions up to and including 7.8.0; 7.9.0; 7.9.1; 7.10.0; 7.10.1; 7.11.0.
CVSS Score: 6.8 (MEDIUM)
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2018/06/tibco-security-advisory-june-26-2018-tibco-spotfire-2018-5437; http://www.tibco.com/services/support/advisories
CVE: CVE-2018-12536
Published: 2018-06-27
Description: In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: http://www.securitytracker.com/id/1041194; https://bugs.eclipse.org/bugs/show_bug.cgi?id=535670; https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f[PII_REDACTED]b74d1e4272%40%3Cissues.activemq.apache.org%3E
CVE: CVE-2018-12912
Published: 2018-06-27
Description: An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Neeke/HongCMS/issues/4; https://www.exploit-db.com/exploits/44953/; https://github.com/Neeke/HongCMS/issues/4
CVE: CVE-2018-12913
Published: 2018-06-27
Description: In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/richgel999/miniz/issues/90; https://github.com/richgel999/miniz/issues/90
CVE: CVE-2018-12914
Published: 2018-06-27
Description: A remote code execution issue was discovered in PublicCMS V4.0.20180210. An attacker can upload a ZIP archive that contains a .jsp file with a directory traversal pathname. After an unzip operation, the attacker can execute arbitrary code by visiting a .jsp URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/sanluan/PublicCMS/issues/13; https://github.com/sanluan/PublicCMS/issues/13
CVE: CVE-2018-12915
Published: 2018-06-27
Description: In libpbc.a in PBC through 2017-03-02, there is a buffer over-read in calc_hash in map.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/cloudwu/pbc/issues/118; https://github.com/cloudwu/pbc/issues/118
CVE: CVE-2018-12916
Published: 2018-06-27
Description: In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcP_message_default in proto.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/120; https://github.com/cloudwu/pbc/issues/120
CVE: CVE-2018-12917
Published: 2018-06-27
Description: In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/cloudwu/pbc/issues/119; https://github.com/cloudwu/pbc/issues/119
CVE: CVE-2018-12918
Published: 2018-06-27
Description: In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in _pbcB_register_fields in bootstrap.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/121; https://github.com/cloudwu/pbc/issues/121
CVE: CVE-2018-12919
Published: 2018-06-27
Description: In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lzlzh2016/CraftedWeb/blob/master/xss.md; https://github.com/lzlzh2016/CraftedWeb/blob/master/xss.md
CVE: CVE-2018-1306
Published: 2018-06-27
Description: The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://portals.apache.org/pluto/security.html; https://www.exploit-db.com/exploits/45396/; http://portals.apache.org/pluto/security.html
CVE: CVE-2018-1457
Published: 2018-06-27
Description: An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208.
CVSS Score: 9.8 (CRITICAL)
References: http://www.ibm.com/support/docview.wss?uid=swg22017436; http://www.securityfocus.com/bid/104573; https://exchange.xforce.ibmcloud.com/vulnerabilities/140208