deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5187
Published: 2018-10-18
Description: Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104556; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1461324%2C1414829%2C1395246%2C1467938%2C1461619%2C1425930%2C1438556%2C1454285%2C1459568%2C1463884; https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html
CVE: CVE-2018-5188
Published: 2018-10-18
Description: Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104555; https://access.redhat.com/errata/RHSA-2018:2112; https://access.redhat.com/errata/RHSA-2018:2113
CVE: CVE-2018-1518
Published: 2018-10-18
Description: IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM X-Force ID: 141682.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/141682; https://www.ibm.com/support/docview.wss?uid=swg22017446; https://exchange.xforce.ibmcloud.com/vulnerabilities/141682
CVE: CVE-2018-1822
Published: 2018-10-18
Description: IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the system, resulting in the ability to remotely change the superuser password. This can be used by an attacker to gain administrative control or to deny service. IBM X-Force ID: 150296.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=ibm10732962; https://exchange.xforce.ibmcloud.com/vulnerabilities/150296; http://www.ibm.com/support/docview.wss?uid=ibm10732962
CVE: CVE-2018-18478
Published: 2018-10-18
Description: Persistent Cross-Site Scripting (XSS) issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboard_name parameter in the /ajax_form.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and html/includes/forms/edit-dashboard.inc.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/issues/9170; https://github.com/librenms/librenms/pull/9171; https://github.com/librenms/librenms/releases/tag/1.44
CVE: CVE-2018-18480
Published: 2018-10-18
Description: A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadMCHAR function in lib/dwg/io.cpp, resulting in an application crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/sandyre/libopencad/issues/43; https://github.com/sandyre/libopencad/issues/43
CVE: CVE-2018-18481
Published: 2018-10-18
Description: A heap-based buffer over-read exists in libopencad 0.2.0 in the ReadCHAR function in lib/dwg/io.cpp, resulting in an application crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/sandyre/libopencad/issues/43; https://github.com/sandyre/libopencad/issues/43
CVE: CVE-2018-18482
Published: 2018-10-18
Description: An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/lfittl/libpg_query/issues/49; https://github.com/lfittl/libpg_query/issues/49
CVE: CVE-2015-4630
Published: 2018-10-18
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to (1) hijack the authentication of administrators for requests that create a user via a request to members/memberentry.pl or (2) give a user superlibrarian permission via a request to members/member-flags.pl or (3) hijack the authentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the addshelf parameter to opac-shelves.pl.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423; https://koha-community.org/koha-3-14-16-released/; https://koha-community.org/security-release-koha-3-16-12/
CVE: CVE-2015-4631
Published: 2018-10-18
Description: Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to inject arbitrary web script or HTML via the (1) tag parameter to opac-search.pl; the (2) value parameter to authorities/authorities-home.pl; the (3) delay parameter to acqui/lateorders.pl; the (4) authtypecode or (5) tagfield to admin/auth_subfields_structure.pl; the (6) tagfield parameter to admin/marc_subfields_structure.pl; the (7) limit parameter to catalogue/search.pl; the (8) bookseller_filter, (9) callnumber_filter, (10) EAN_filter, (11) ISSN_filter, (12) publisher_filter, or (13) title_filter parameter to serials/serials-search.pl; or the (14) author, (15) collectiontitle, (16) copyrightdate, (17) isbn, (18) manageddate_from, (19) manageddate_to, (20) publishercode, (21) suggesteddate_from, or (22) suggesteddate_to parameter to suggestion/suggestion.pl; or the (23) direction, (24) display or (25) addshelf parameter to opac-shelves.pl.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416; https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14418; https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14423
CVE: CVE-2015-4632
Published: 2018-10-18
Description: Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the template_path parameter to (1) svc/virtualshelves/search or (2) svc/members/search.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14408; https://koha-community.org/koha-3-14-16-released/; https://koha-community.org/security-release-koha-3-16-12/
CVE: CVE-2015-4633
Published: 2018-10-18
Description: Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow (1) remote attackers to execute arbitrary SQL commands via the number parameter to opac-tags_subject.pl in the OPAC interface or (2) remote authenticated users to execute arbitrary SQL commands via the Filter or (3) Criteria parameter to reports/borrowers_out.pl in the Staff interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14412; https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14426; https://koha-community.org/koha-3-14-16-released/
CVE: CVE-2018-14807
Published: 2018-10-18
Description: A stack-based buffer overflow vulnerability in Opto 22 PAC Control Basic and PAC Control Professional versions R10.0a and prior may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-247-01; https://www.opto22.com/support/resources-tools/knowledgebase/kb87547; https://ics-cert.us-cert.gov/advisories/ICSA-18-247-01
CVE: CVE-2018-18483
Published: 2018-10-18
Description: The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/105689
CVE: CVE-2018-18484
Published: 2018-10-18
Description: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/105693
CVE: CVE-2018-18485
Published: 2018-10-18
Description: An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gitee.com/koyshe/phpshe/issues/INOG4; https://gitee.com/koyshe/phpshe/issues/INOG4
CVE: CVE-2018-18486
Published: 2018-10-18
Description: An issue was discovered in PHPSHE 1.7. SQL injection exists via the admin.php?mod=user&act=del user_id[] parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/koyshe/phpshe/issues/INPIT; https://gitee.com/koyshe/phpshe/issues/INPIT
CVE: CVE-2018-18487
Published: 2018-10-18
Description: In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://sunu11.com/2018/10/18/glxcms/; http://sunu11.com/2018/10/18/glxcms/
CVE: CVE-2018-18488
Published: 2018-10-18
Description: In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://sunu11.com/2018/10/18/glxcms/; http://sunu11.com/2018/10/18/glxcms/
CVE: CVE-2018-11079
Published: 2018-10-18
Description: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain access to the application database.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.securityfocus.com/bid/105694; http://www.securitytracker.com/id/1041877; https://seclists.org/fulldisclosure/2018/Oct/35
CVE: CVE-2018-11080
Published: 2018-10-18
Description: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/105694; http://www.securitytracker.com/id/1041877; https://seclists.org/fulldisclosure/2018/Oct/35
CVE: CVE-2018-15756
Published: 2018-10-18
Description: Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105703; https://lists.apache.org/thread.html/339fd112517e4873695b5115b96acdddbfc8f83b10598528d37c7d12%40%3Cissues.activemq.apache.org%3E; https://lists.apache.org/thread.html/77886fec378ee6064debb1efb6b464a4a0173b2ff0d151ed86d3a228%40%3Cissues.activemq.apache.org%3E
CVE: CVE-2018-15758
Published: 2018-10-18
Description: Spring Security OAuth, versions 2.3 prior to 2.3.4, and 2.2 prior to 2.2.3, and 2.1 prior to 2.1.3, and 2.0 prior to 2.0.16, and older unsupported versions could be susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the subsequent approval. This scenario can happen if the application is configured to use a custom approval endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability exposes applications that meet all of the following requirements: Act in the role of an Authorization Server (e.g. @EnableAuthorizationServer) and use a custom Approval Endpoint that declares AuthorizationRequest as a controller method argument. This vulnerability does not expose applications that: Act in the role of an Authorization Server and use the default Approval Endpoint, act in the role of a Resource Server only (e.g. @EnableResourceServer), act in the role of a Client only (e.g. @EnableOAuthClient).
CVSS Score: 9.6 (CRITICAL)
References: http://www.securityfocus.com/bid/105687; https://access.redhat.com/errata/RHSA-2019:2413; https://pivotal.io/security/cve-2018-15758
CVE: CVE-2018-15765
Published: 2018-10-18
Description: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains an Information Exposure vulnerability. The log file contents store sensitive data including executed commands to generate authentication tokens which may prove useful to an attacker for crafting malicious authentication tokens for querying the application and subsequent attacks.
CVSS Score: 3.4 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105694; http://www.securitytracker.com/id/1041877; https://seclists.org/fulldisclosure/2018/Oct/35
CVE: CVE-2017-18348
Published: 2018-10-19
Description: Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNK_HOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNK_HOME/bin, because the non-root setup instructions state that chown should be run across all of $SPLUNK_HOME to give non-root access.
CVSS Score: 7.0 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/101664; https://korelogic.com/Resources/Advisories/KL-001-2017-022.txt; https://www.splunk.com/view/SP-CAAAP3M
CVE: CVE-2018-15312
Published: 2018-10-19
Description: On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an authenticated user to execute JavaScript for the currently logged-in user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041932; https://support.f5.com/csp/article/K44462254; http://www.securitytracker.com/id/1041932
CVE: CVE-2018-15313
Published: 2018-10-19
Description: On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105733; http://www.securitytracker.com/id/1041934; https://support.f5.com/csp/article/K21042153
CVE: CVE-2018-15314
Published: 2018-10-19
Description: On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105733; http://www.securitytracker.com/id/1041933; https://support.f5.com/csp/article/K04524282
CVE: CVE-2018-15315
Published: 2018-10-19
Description: On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041935; https://support.f5.com/csp/article/K41704442; http://www.securitytracker.com/id/1041935
CVE: CVE-2018-15316
Published: 2018-10-19
Description: In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105731; http://www.securitytracker.com/id/1041936; https://support.f5.com/csp/article/K51220077
CVE: CVE-2018-4013
Published: 2018-10-19
Description: An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.live555.com/pipermail/live-devel/2018-October/021071.html; https://lists.debian.org/debian-lts-announce/2018/11/msg00020.html; https://security.gentoo.org/glsa/202005-06
CVE: CVE-2018-18390
Published: 2018-10-19
Description: User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-018-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-user-enumeration/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-018-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-user-enumeration/
CVE: CVE-2018-18391
Published: 2018-10-19
Description: User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 8.8 (HIGH)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-019-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-user-privilege-escalation/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-019-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-user-privilege-escalation/
CVE: CVE-2018-18392
Published: 2018-10-19
Description: Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 8.8 (HIGH)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-020-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-broken-access-control/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-020-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-broken-access-control/
CVE: CVE-2018-18393
Published: 2018-10-19
Description: Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 9.8 (CRITICAL)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-021-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-password-management-issue/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-021-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-password-management-issue/
CVE: CVE-2018-18394
Published: 2018-10-19
Description: Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-022-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-sensitive-information-stored-in-clear-text/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-022-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-sensitive-information-stored-in-clear-text/
CVE: CVE-2018-18395
Published: 2018-10-19
Description: Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 9.8 (CRITICAL)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-023-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-hidden-token-access/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-023-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-hidden-token-access/
CVE: CVE-2018-18396
Published: 2018-10-19
Description: Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVSS Score: 9.8 (CRITICAL)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-024-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-remote-code-execution/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-024-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-remote-code-execution/
CVE: CVE-2018-18520
Published: 2018-10-19
Description: An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-size is intended to support ar files inside ar files, handle_ar in size.c closes the outer ar file before handling all inner entries. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html
CVE: CVE-2018-18521
Published: 2018-10-19
Description: Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by eu-ranlib, because a zero sh_entsize is mishandled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html
CVE: CVE-2018-18527
Published: 2018-10-19
Description: OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/45637/; https://www.exploit-db.com/exploits/45637/
CVE: CVE-2018-18380
Published: 2018-10-19
Description: A Session Fixation issue was discovered in Bigtree before 4.2.24. admin.php accepts a user-provided PHP session ID instead of regenerating a new one after a user has logged in to the application. The Session Fixation could allow an attacker to hijack an admin session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384
References: https://gist.github.com/zionspike/680eb504db7c86296fad0eff30c6317f; https://github.com/bigtreecms/BigTree-CMS/commit/c69402c4764ed9a76301c57277aefe70141b6418; https://github.com/bigtreecms/BigTree-CMS/tree/4.2.24