deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4964
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4965
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Memory Corruption vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104176; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4966
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4967
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4968
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4969
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4970
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4971
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4972
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4973
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4974
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4975
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4976
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4977
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4978
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4979
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Security Bypass vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104168; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4980
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4981
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4982
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4983
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4984
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104172; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4985
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4986
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104175; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4987
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an Untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104173; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4988
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4989
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104169; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4990
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415, CWE-415
References: http://www.securityfocus.com/bid/104167; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4993
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an NTLM SSO hash theft vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104177; http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html
CVE: CVE-2018-4995
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have an XFA '\n' POST injection vulnerability. Successful exploitation could lead to a security bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html; http://www.securitytracker.com/id/1040920
CVE: CVE-2018-4996
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]8 and earlier, 2[PII_REDACTED]9 and earlier, and 2[PII_REDACTED]7 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securitytracker.com/id/1040920; https://helpx.adobe.com/security/products/acrobat/apsb18-09.html; http://www.securitytracker.com/id/1040920
CVE: CVE-2018-4997
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]4 and earlier have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/104264; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html; http://www.securityfocus.com/bid/104264
CVE: CVE-2018-4998
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]4 and earlier have a Memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104265; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html; http://www.securityfocus.com/bid/104265
CVE: CVE-2018-4999
Published: 2018-07-09
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]0 and earlier, and 2[PII_REDACTED]4 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104266; https://helpx.adobe.com/security/products/acrobat/apsb18-02.html; http://www.securityfocus.com/bid/104266
CVE: CVE-2018-5000
Published: 2018-07-09
Description: Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://www.securityfocus.com/bid/104413; http://www.securitytracker.com/id/1041058; https://access.redhat.com/errata/RHSA-2018:1827
CVE: CVE-2018-5001
Published: 2018-07-09
Description: Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104413; http://www.securitytracker.com/id/1041058; https://access.redhat.com/errata/RHSA-2018:1827
CVE: CVE-2018-5002
Published: 2018-07-09
Description: Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-121
References: http://www.securityfocus.com/bid/104412; http://www.securitytracker.com/id/1041058; https://access.redhat.com/errata/RHSA-2018:1827
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OpenConext/OpenConext-engineblock/pull/563/files; https://github.com/OpenConext/OpenConext-engineblock/pull/563/files
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. This attack appear to be exploitable via A handcrafted private key can include references to unexpected classes which will be picked up from the class path for the executing application. This vulnerability appears to have been fixed in 1.60 and later.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-470
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00011.html; https://github.com/bcgit/bc-java/commit/4092ede58da51af9a21e4825fbad0d9a3ef5a223#diff-2c06e2edef41db889ee14899e12bd574; https://github.com/bcgit/bc-java/commit/cd98322b171b15b3f88c5ec[PII_REDACTED]93c31e6#diff-148a6c098af0199192d6aede960f45dc
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java that can result in An adversary can remotely launch advanced XXE attacks on ONOS controller without authentication.. This attack appear to be exploitable via crafted protocol message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://gms.cl0udz.com/ONOS_Vul.pdf; https://gerrit.onosproject.org/#/c/18779/; http://gms.cl0udz.com/ONOS_Vul.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: ONOS ONOS Controller version 1.13.1 and earlier contains a Denial of Service (Service crash) vulnerability in OVSDB component in ONOS that can result in An adversary can remotely crash OVSDB service ONOS controller via a normal switch.. This attack appear to be exploitable via the attacker should be able to control or forge a switch in the network..
CVSS Score: 7.5 (HIGH)
References: http://gms.cl0udz.com/OVSDB_DOS.pdf; https://gerrit.onosproject.org/#/c/18926/; http://gms.cl0udz.com/OVSDB_DOS.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: ONOS ONOS controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in onos\drivers\utilities\src\main\java\org\onosproject\drivers\utilities\XmlConfigParser.java loadxml() that can result in An adversary can remotely launch XXE attacks on ONOS controller via an OpenConfig Terminal Device.. This attack appear to be exploitable via network connectivity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://gms.cl0udz.com/Openconfig_xxe.pdf; https://gerrit.onosproject.org/#/c/18894/; http://gms.cl0udz.com/Openconfig_xxe.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: Atlassian Floodlight Atlassian Floodlight Controller version 1.2 and earlier versions contains a Denial of Service vulnerability in Forwarding module that can result in Improper type cast in Forwarding module allows remote attackers to cause a DoS(thread crash).. This attack appear to be exploitable via network connectivity (Remote attack).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://gms.cl0udz.com/Floodlight_DoS.pdf; http://www.securityfocus.com/bid/104711; http://gms.cl0udz.com/Floodlight_DoS.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: EOSIO/eos eos version after commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168 contains a stack overflow vulnerability in abi_serializer that can result in attack eos network node. This attack appear to be exploitable via network request. This vulnerability appears to have been fixed in after commit cf7209e703e6d3f7a5413e0cb1fe88a4d8e4b38d .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-674
References: https://github.com/EOSIO/eos/pull/4112; https://github.com/EOSIO/eos/pull/4112
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: Ovidentia version 8.4.3 and earlier contains a Unsanitized User Input vulnerability in utilit.php, bab_getAddonFilePathfromTg that can result in Authenticated Remote Code Execution. This attack appear to be exploitable via The attacker must have permission to upload addons.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://drive.google.com/open?id=195h-LirGiIVKxioyusw3SvmLp8BljPxe; https://www.ovidentia.org/index.php?; https://www.ovidentia.org/modules
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: Eran Hammer cryptiles version 4.1.1 earlier contains a CWE-331: Insufficient Entropy vulnerability in randomDigits() method that can result in An attacker is more likely to be able to brute force something that was supposed to be random.. This attack appear to be exploitable via Depends upon the calling application.. This vulnerability appears to have been fixed in 4.1.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-331
References: https://github.com/hapijs/cryptiles/issues/34; https://github.com/hapijs/cryptiles/issues/35; https://github.com/hapijs/cryptiles/issues/34
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-09
Description: Mycroft AI mycroft-core version 18.2.8b and earlier contains a Incorrect Access Control vulnerability in Websocket configuration that can result in code execution. This impacts ONLY the Mycroft for Linux and "non-enclosure" installs - Mark 1 and Picroft unaffected. This attack appear to be exploitable remote access to the unsecured websocket server. This vulnerability appears to have been fixed in No fix currently available.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://community.mycroft.ai/t/zero-click-remote-code-execution-in-mycroft-ai-vocal-assistant/3930/13; https://github.com/Nhoya/MycroftAI-RCE; https://community.mycroft.ai/t/zero-click-remote-code-execution-in-mycroft-ai-vocal-assistant/3930/13