deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6333
Published: 2018-12-31
Description: The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79, CWE-20
References: https://github.com/facebook/nuclide/commit/65f6bbd683404be1bb569b8d1be84b5d4c74a324; https://github.com/facebook/nuclide/commit/65f6bbd683404be1bb569b8d1be84b5d4c74a324
CVE: CVE-2019-3494
Published: 2019-01-01
Description: Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/Paroxyste/Simply-Blog/issues/1; https://github.com/Paroxyste/Simply-Blog/issues/1
CVE: CVE-2018-20650
Published: 2019-01-01
Description: A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106459; https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713
CVE: CVE-2018-20651
Published: 2019-01-01
Description: A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/106440
CVE: CVE-2018-20652
Published: 2019-01-01
Description: An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/syoyo/tinyexr/issues/104; https://github.com/syoyo/tinyexr/issues/104
CVE: CVE-2019-3500
Published: 2019-01-02
Description: aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532
References: https://github.com/aria2/aria2/issues/1329; https://lists.debian.org/debian-lts-announce/2019/01/msg00012.html; https://lists.debian.org/debian-lts-announce/2021/12/msg00039.html
CVE: CVE-2019-3501
Published: 2019-01-02
Description: The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sama34/OUGC-Awards/issues/29; https://github.com/Sama34/OUGC-Awards/pull/31; https://www.exploit-db.com/exploits/46080/
CVE: CVE-2018-15760
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-15799
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-15802
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-15803
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-17188
Published: 2019-01-02
Description: Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. In some cases, this lead to vulnerabilities where CouchDB admin users could access the underlying operating system as the CouchDB user. Together with other vulnerabilities, it allowed full system entry for unauthenticated users. Rather than waiting for new vulnerabilities to be discovered, and fixing them as they come up, the CouchDB development team decided to make changes to avoid this entire class of vulnerabilities.
CVSS Score: 7.2 (HIGH)
References: https://blog.couchdb.org/2018/12/17/cve-2018-17188/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW/
CVE: CVE-2018-20657
Published: 2019-01-02
Description: The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/106444; https://access.redhat.com/errata/RHSA-2019:3352; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88539
CVE: CVE-2018-5197
Published: 2019-01-02
Description: A vulnerability in the ExtCommon.dll user extension module version 9.2, 9.2.1, 9.2.2 of Xplatform ActiveX could allow attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters. An crafted malicious parameters could cause arbitrary command to execute.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://support.tobesoft.co.kr/Support/index.html; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30097; http://support.tobesoft.co.kr/Support/index.html
CVE: CVE-2018-20658
Published: 2019-01-02
Description: The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted XRMD command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://coreftp.com/forums/viewtopic.php?f=15&t=4022509; https://www.exploit-db.com/exploits/45091; http://coreftp.com/forums/viewtopic.php?f=15&t=4022509
CVE: CVE-2019-3572
Published: 2019-01-02
Description: An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://github.com/libming/libming/issues/169; https://github.com/libming/libming/issues/169
CVE: CVE-2019-3573
Published: 2019-01-02
Description: In libsixel v1.8.2, there is an infinite loop in the function sixel_decode_raw_impl() in the file fromsixel.c, as demonstrated by sixel2png.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/TeamSeri0us/pocs/tree/master/libsixel; https://github.com/saitoha/libsixel/issues/83; https://github.com/TeamSeri0us/pocs/tree/master/libsixel
CVE: CVE-2019-3574
Published: 2019-01-02
Description: In libsixel v1.8.2, there is a heap-based buffer over-read in the function load_jpeg() in the file loader.c, as demonstrated by img2sixel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/libsixel; https://github.com/saitoha/libsixel/issues/83; https://github.com/TeamSeri0us/pocs/tree/master/libsixel
CVE: CVE-2018-7900
Published: 2019-01-02
Description: There is an information leak vulnerability in some Huawei HG products. An attacker may obtain information about the HG device by exploiting this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en; https://blog.newskysecurity.com/information-disclosure-vulnerability-cve-2018-7900-makes-it-easy-for-attackers-to-find-huawei-3e7039b6f44f; http://www.huawei.com/en/psirt/security-notices/huawei-sn-20181219-01-hg-en
CVE: CVE-2018-20659
Published: 2019-01-02
Description: An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core/Ap4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp, as demonstrated by mp42hls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/axiomatic-systems/Bento4/issues/350; https://github.com/axiomatic-systems/Bento4/issues/350
CVE: CVE-2019-3576
Published: 2019-01-02
Description: inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping("/deleteFaveorite/{ids}") line followed by a "public ModelAndView deleteFavorite" line.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/inxeduopen/inxedu/issues/IQIIV; https://exchange.xforce.ibmcloud.com/vulnerabilities/155030; https://gitee.com/inxeduopen/inxedu/issues/IQIIV
CVE: CVE-2019-3577
Published: 2019-01-02
Description: An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/caokang/waimai/issues/9; https://github.com/caokang/waimai/issues/9
CVE: CVE-2018-13045
Published: 2019-01-02
Description: SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/150848/Yeswiki-Cercopitheque-SQL-Injection.html; https://www.exploit-db.com/exploits/46015/; http://packetstormsecurity.com/files/150848/Yeswiki-Cercopitheque-SQL-Injection.html
CVE: CVE-2018-14718
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/106601; https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782
CVE: CVE-2018-14719
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782; https://access.redhat.com/errata/RHSA-2019:0877
CVE: CVE-2018-14720
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-611
References: https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782; https://access.redhat.com/errata/RHSA-2019:1106
CVE: CVE-2018-14721
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782; https://access.redhat.com/errata/RHSA-2019:1106
CVE: CVE-2018-15490
Published: 2019-01-02
Description: An issue was discovered in ExpressVPN on Windows. The Xvpnd.exe process (which runs as a service with SYSTEM privileges) listens on TCP port 2015, which is used as an RPC interface for communication with the client side of the ExpressVPN application. A JSON-RPC protocol over HTTP is used for communication. The JSON-RPC XVPN.GetPreference and XVPN.SetPreference methods are vulnerable to path traversal, and allow reading and writing files on the file system on behalf of the service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://medium.com/%40Wflki/https-medium-com-wflki-cve-2018-15490-expressvpn-local-privilege-escalation-d22c86fecc47; https://medium.com/%40Wflki/https-medium-com-wflki-cve-2018-15490-expressvpn-local-privilege-escalation-d22c86fecc47
CVE: CVE-2018-19360
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/107985; https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782
CVE: CVE-2018-19361
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/107985; https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782
CVE: CVE-2018-19362
Published: 2019-01-02
Description: FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/107985; https://access.redhat.com/errata/RHBA-2019:0959; https://access.redhat.com/errata/RHSA-2019:0782
CVE: CVE-2018-19371
Published: 2019-01-02
Description: The SaveUserSettings service in Content Manager in SDL Web 8.5.0 has an XXE Vulnerability that allows reading sensitive files from the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://packetstormsecurity.com/files/150826/SDL-Web-Content-Manager-8.5.0-XML-Injection.html; https://www.exploit-db.com/exploits/46000/; http://packetstormsecurity.com/files/150826/SDL-Web-Content-Manager-8.5.0-XML-Injection.html
CVE: CVE-2018-19478
Published: 2019-01-02
Description: In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0a7e5a1c309fa0911b892fa40996a7d55d90bace; http://www.securityfocus.com/bid/106445; https://bugs.ghostscript.com/show_bug.cgi?id=699856
CVE: CVE-2018-20100
Published: 2019-01-02
Description: An issue was discovered on August Connect devices. Insecure data transfer between the August app and August Connect during configuration allows attackers to discover home Wi-Fi credentials. This data transfer uses an unencrypted access point for these credentials, and passes them in an HTTP POST, using the AugustWifiDevice class, with data encrypted with a fixed key found obfuscated in the app.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-311
References: https://dojo.bullguard.com/dojo-by-bullguard/blog/august-connect/; https://dojo.bullguard.com/dojo-by-bullguard/blog/august-connect/
CVE: CVE-2018-20114
Published: 2019-01-02
Description: On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-20114; https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-20114
CVE: CVE-2018-20166
Published: 2019-01-02
Description: A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles extension checking. It accepts uploads of PHP content if the first few characters match GIF data, and the filename ends in ".php" with mixed case, such as the .pHp extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://pentest.com.tr/exploits/Rukovoditel-Project-Management-CRM-2-3-1-Authenticated-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/46011; https://pentest.com.tr/exploits/Rukovoditel-Project-Management-CRM-2-3-1-Authenticated-Remote-Code-Execution.html
CVE: CVE-2018-20211
Published: 2019-01-02
Description: ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws32_32.dll file into this new folder, aka DLL Hijacking.  NOTE: 8.32 is an obsolete version from 2010 (9.x was released starting in 2012, and 10.x was released starting in 2015).
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://packetstormsecurity.com/files/150892/Exiftool-8.3.2.0-DLL-Hijacking.html; http://seclists.org/fulldisclosure/2018/Dec/44; http://packetstormsecurity.com/files/150892/Exiftool-8.3.2.0-DLL-Hijacking.html
CVE: CVE-2018-20326
Published: 2019-01-02
Description: ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150918/PLC-Wireless-Router-GPN2.4P21-C-CN-Cross-Site-Scripting.html; https://0dayfindings.home.blog/2018/12/26/plc-wireless-router-gpn2-4p21-c-cn-reflected-xss/; https://www.exploit-db.com/exploits/46081/
CVE: CVE-2017-14808
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14809
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14810
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14811
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14812
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14813
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14814
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14815
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14816
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-14817
Published: 2019-01-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2018-18264
Published: 2019-01-03
Description: Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/106493; https://github.com/kubernetes/dashboard/pull/3289; https://github.com/kubernetes/dashboard/pull/3400
CVE: CVE-2018-18893
Published: 2019-01-03
Description: Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/HubSpot/jinjava/blob/master/CHANGES.md; https://github.com/HubSpot/jinjava/pull/230; https://github.com/HubSpot/jinjava/blob/master/CHANGES.md
CVE: CVE-2018-20131
Published: 2019-01-03
Description: The Code42 app before 6.8.4, as used in Code42 for Enterprise, on Linux installs with overly permissive permissions on the /usr/local/crashplan/log directory. This allows a user to manipulate symbolic links to escalate privileges, or show the contents of sensitive files that a regular user would not have access to.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/106452; https://code42.com/r/support/CVE-2018-20131; http://www.securityfocus.com/bid/106452
CVE: CVE-2019-3580
Published: 2019-01-03
Description: OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/OpenRefine/OpenRefine/issues/1927; https://github.com/OpenRefine/OpenRefine/issues/1927
CVE: CVE-2018-17172
Published: 2019-01-03
Description: The web application on Xerox AltaLink B80xx before 100[PII_REDACTED]0, C8030/C8035 before 100[PII_REDACTED]0, C8045/C8055 before 100[PII_REDACTED]0, and C8070 before 100[PII_REDACTED]0 allows unauthenticated command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/12/cert_Security_Mini_Bulletin_XRX18AL_for_ALB80xx-C80xx_v1.1.pdf
CVE: CVE-2018-20662
Published: 2019-01-03
Description: In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/commit/9fd5ec0e6e5f763b190f2a55ceb5427cfe851d5f