deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-8839
Published: 2018-04-30
Description: Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable by PMSoft's fixed-length stack buffer. This can cause the buffer to be overwritten, which may allow arbitrary code execution or cause the application to crash. CVSS v3 base score: 7.1; CVSS vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/104013; https://ics-cert.us-cert.gov/advisories/ICSA-18-116-01; http://www.securityfocus.com/bid/104013
CVE: CVE-2018-10570
Published: 2018-04-30
Description: Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/9; https://github.com/philippe/FrogCMS/issues/9
CVE: CVE-2018-10571
Published: 2018-04-30
Description: Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) patient parameter to interface/main/finder/finder_navigation.php; (2) key parameter to interface/billing/get_claim_file.php; (3) formid or (4) formseq parameter to interface/orders/types.php; (5) eraname, (6) paydate, (7) post_to_date, (8) deposit_date, (9) debug, or (10) InsId parameter to interface/billing/sl_eob_process.php; (11) form_source, (12) form_paydate, (13) form_deposit_date, (14) form_amount, (15) form_name, (16) form_pid, (17) form_encounter, (18) form_date, or (19) form_to_date parameter to interface/billing/sl_eob_search.php; (20) codetype or (21) search_term parameter to interface/de_identification_forms/find_code_popup.php; (22) search_term parameter to interface/de_identification_forms/find_drug_popup.php; (23) search_term parameter to interface/de_identification_forms/find_immunization_popup.php; (24) id parameter to interface/forms/CAMOS/view.php; (25) id parameter to interface/forms/reviewofs/view.php; or (26) list_id parameter to library/custom_template/personalize.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://csticsfrontline.wordpress.com/2018/05/24/openemr-%E5%BC%B1%E9%BB%9E%E5%88%86%E6%9E%90/; https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051; https://github.com/openemr/openemr/issues/1518
CVE: CVE-2018-10572
Published: 2018-04-30
Description: interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the newtemplatename and form_body parameters.
CVSS Score: 6.5 (MEDIUM)
References: https://csticsfrontline.wordpress.com/2018/05/24/openemr-%E5%BC%B1%E9%BB%9E%E5%88%86%E6%9E%90/; https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051; https://github.com/openemr/openemr/issues/1518
CVE: CVE-2018-10573
Published: 2018-04-30
Description: interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restrictions via the scan parameter.
CVSS Score: 8.8 (HIGH)
References: https://csticsfrontline.wordpress.com/2018/05/24/openemr-%E5%BC%B1%E9%BB%9E%E5%88%86%E6%9E%90/; https://github.com/openemr/openemr/commit/699e3c2ef68545357cac714505df1419b8bf2051; https://github.com/openemr/openemr/issues/1518
CVE: CVE-2018-9310
Published: 2018-04-30
Description: An issue was discovered in MagniComp SysInfo before 10-H82 if setuid root (the default). This vulnerability allows any local user on a Linux/UNIX system to run SysInfo and obtain a root shell, which can be used to compromise the local system.
CVSS Score: 7.8 (HIGH)
References: http://www.magnicomp.com/about/2018/CVE-2018-9310.html; http://www.magnicomp.com/about/2018/CVE-2018-9310.html
CVE: CVE-2018-5234
Published: 2018-04-30
Description: The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execution of arbitrary commands on the host system via vulnerable software.
CVSS Score: 8.0 (HIGH)
References: http://www.securityfocus.com/bid/103955; https://www.exploit-db.com/exploits/44574/; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180430_00
CVE: CVE-2018-1102
Published: 2018-04-30
Description: A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-22
References: https://access.redhat.com/errata/RHSA-2018:1227; https://access.redhat.com/errata/RHSA-2018:1229; https://access.redhat.com/errata/RHSA-2018:1231
CVE: CVE-2018-10574
Published: 2018-04-30
Description: site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/bigtreecms/BigTree-CMS/commit/609bd17728ee1db0487a42d96028d30537528ae8; https://github.com/bigtreecms/BigTree-CMS/issues/335; https://github.com/bigtreecms/BigTree-CMS/commit/609bd17728ee1db0487a42d96028d30537528ae8
CVE: CVE-2018-1183
Published: 2018-04-30
Description: In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions prior to 8.4.0.512, Dell EMC SMIS versions prior to 8.4.0.6, Dell EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4.0.347, Dell EMC VNX2 Operating Environment (OE) for File versions prior to 8.1.9.231, Dell EMC VNX2 Operating Environment (OE) for Block versions prior to 05.33.009.5.231, Dell EMC VNX1 Operating Environment (OE) for File versions prior to 7.1.82.0, Dell EMC VNX1 Operating Environment (OE) for Block versions prior to 05.32.000.5.225, Dell EMC VNXe3200 Operating Environment (OE) all versions, Dell EMC VNXe1600 Operating Environment (OE) versions prior to 3.1.9.9570228, Dell EMC VNXe 3100/3150/3300 Operating Environment (OE) all versions, Dell EMC ViPR SRM versions 3.7, 3.7.1, 3.7.2 (only if using Dell EMC Host Interface for Windows), Dell EMC ViPR SRM versions 4.0, 4.0.1, 4.0.2, 4.0.3 (only if using Dell EMC Host Interface for Windows), Dell EMC XtremIO versions 4.x, Dell EMC VMAX eNAS version 8.x, Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0[PII_REDACTED], ECOM is affected by a XXE injection vulnerability due to the configuration of the XML parser shipped with the product. XXE Injection attack may occur when XML input containing a reference to an external entity (defined by the attacker) is processed by an affected XML parser. XXE Injection may allow attackers to gain unauthorized access to files containing sensitive information or may be used to cause denial-of-service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/Apr/61; http://www.securityfocus.com/bid/104024; http://seclists.org/fulldisclosure/2018/Apr/61
CVE: CVE-2018-1277
Published: 2018-04-30
Description: Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. A remote authenticated user may push an app with a malicious Docker image that will consume more space on a Diego cell than allocated in their quota, potentially causing a DoS against the cell.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://www.cloudfoundry.org/blog/cve-2018-1277/; https://www.cloudfoundry.org/blog/cve-2018-1277/
CVE: CVE-2018-10364
Published: 2018-04-30
Description: BigTree before 4.2.22 has XSS in the Users management page via the name or company field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigtreecms/BigTree-CMS#changelog; https://github.com/bigtreecms/BigTree-CMS/commit/b2eff67e45b90ca26a62e971e8f0d5d0d70f23e6; https://github.com/bigtreecms/BigTree-CMS/issues/332
CVE: CVE-2018-1194
Published: 2018-04-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-30
Description: Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/zeroday/FG-VD-17-215; https://wordpress.org/plugins/nextgen-gallery/#developers; https://fortiguard.com/zeroday/FG-VD-17-215
CVE: CVE-2018-10575
Published: 2018-04-30
Description: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2018/May/12; https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy; https://www.exploit-db.com/exploits/45409/
CVE: CVE-2018-10576
Published: 2018-04-30
Description: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account (instead of the dedicated web-only user).
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2018/May/12; https://watchguardsupport.secure.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000LIy; https://www.exploit-db.com/exploits/45409/
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-3848 and CVE-2018-3849. Reason: This candidate is a reservation duplicate of CVE-2018-3848 and CVE-2018-3849. Notes: All CVE users should reference CVE-2018-3848 and CVE-2018-3849 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10371
Published: 2018-05-01
Description: An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripting vulnerability has been identified in the web interface of the plugin that allows the execution of arbitrary HTML/script code to be executed in a victim's web browser via a page title.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/B0UG/8615df3fe83a4deca07334af783696d6; https://wordpress.org/plugins/wf-cookie-consent/#developers; https://wpvulndb.com/vulnerabilities/9080
CVE: CVE-2018-10581
Published: 2018-05-01
Description: In Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save variable values within the Tenant Variables area for Environments that do not exist within their associated Team scoping. This occurs in situations where this authenticated user also belongs to multiple teams, where one of the Teams has the VariableEdit permission or VariableView permissions for the Environment.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://github.com/OctopusDeploy/Issues/issues/4474; https://github.com/OctopusDeploy/Issues/issues/4474
CVE: CVE-2018-1502
Published: 2018-05-01
Description: IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141338.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg22014917; http://www.securitytracker.com/id/1040760; https://exchange.xforce.ibmcloud.com/vulnerabilities/141338
CVE: CVE-2017-17020
Published: 2018-05-01
Description: On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with firmware before 1.15.01, command injection in alphapd (binary responsible for running the camera's web server) allows remote authenticated attackers to execute code through sanitized /setSystemAdmin user input in the AdminID field being passed directly to a call to system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084; https://www.fidusinfosec.com/dlink-dcs-5030l-remote-code-execution-cve-2017-17020/; http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10084
CVE: CVE-2018-10365
Published: 2018-05-01
Description: An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the option to convert the thread to a link. The thread link input box is not properly sanitized.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/44547/; https://www.exploit-db.com/exploits/44547/
CVE: CVE-2018-10583
Published: 2018-05-01
Description: An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2020/Oct/26; http://secureyourit.co.uk/wp/2018/05/01/creating-malicious-odt-files/; https://access.redhat.com/errata/RHSA-2018:3054
CVE: CVE-2018-8938
Published: 2018-05-01
Description: A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm; https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm
CVE: CVE-2018-8939
Published: 2018-05-01
Description: An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm; https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm
CVE: CVE-2017-18264
Published: 2018-05-01
Description: An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/97211; https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html; https://www.phpmyadmin.net/security/PMASA-2017-8/
CVE: CVE-2013-4035
Published: 2018-05-01
Description: IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the client. IBM X-Force ID: 86138.
CVSS Score: 7.3 (HIGH)
CWE: CWE-310
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/86138; https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sterling-connectdirect-for-openvms-unencrypted-data-transfers-can-occur-even-when-ssl-encryption-is-specified-in-the-security-configuration-cve-2013-4035/; https://exchange.xforce.ibmcloud.com/vulnerabilities/86138
CVE: CVE-2013-4040
Published: 2018-05-01
Description: IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2.x before 7.2.1.5 and 7.2.x before 7.2.2.0 on Unix use weak permissions (755) for unspecified configuration and log files, which allows local users to obtain sensitive information by reading the files. IBM X-Force ID: 86176.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-275
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/86176; https://www-01.ibm.com/support/docview.wss?uid=swg21672253; https://exchange.xforce.ibmcloud.com/vulnerabilities/86176
CVE: CVE-2017-14012
Published: 2018-05-01
Description: Boston Scientific ZOOM LATITUDE PRM Model 3120 does not encrypt PHI at rest. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311, CWE-311
References: http://www.securityfocus.com/bid/101510; https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01; http://www.securityfocus.com/bid/101510
CVE: CVE-2017-14014
Published: 2018-05-01
Description: Boston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI prior to having it transferred to removable media. CVSS v3 base score: 4.6; CVSS vector string: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-321, CWE-798
References: http://www.securityfocus.com/bid/101510; https://ics-cert.us-cert.gov/advisories/ICSMA-17-292-01; http://www.securityfocus.com/bid/101510
CVE: CVE-2017-5535
Published: 2018-05-01
Description: The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-326
References: https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535; https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535
CVE: CVE-2017-5536
Published: 2018-05-01
Description: The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5536; https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5536
CVE: CVE-2018-6589
Published: 2018-05-01
Description: CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180501-01--security-notice-for-ca-spectrum.html; https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180501-01--security-notice-for-ca-spectrum.html
CVE: CVE-2018-9232
Published: 2018-05-01
Description: Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.digitalwhisper.co.il/files/Zines/0x5E/DW94-3-Repeater2.pdf; https://www.digitalwhisper.co.il/files/Zines/0x5E/DW94-3-Repeater2.pdf
CVE: CVE-2018-9336
Published: 2018-05-01
Description: openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.568761; https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24; https://github.com/OpenVPN/openvpn/commit/1394192b210cb3c6624a7419bcf3ff966742e79b
CVE: CVE-2013-0159
Published: 2018-05-01
Description: The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=892299; https://bugzilla.redhat.com/show_bug.cgi?id=892815; https://bugzilla.redhat.com/show_bug.cgi?id=892299
CVE: CVE-2013-0185
Published: 2018-05-01
Description: Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=895345; https://bugzilla.redhat.com/show_bug.cgi?id=895345
CVE: CVE-2013-2049
Published: 2018-05-01
Description: Red Hat CloudForms 2 Management Engine (CFME) allows remote attackers to conduct session tampering attacks by leveraging use of a static secret_token.rb secret.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: https://bugzilla.redhat.com/show_bug.cgi?id=959041; https://bugzilla.redhat.com/show_bug.cgi?id=959041
CVE: CVE-2013-4201
Published: 2018-05-01
Description: Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-275
References: https://bugzilla.redhat.com/show_bug.cgi?id=991318; https://bugzilla.redhat.com/show_bug.cgi?id=991318
CVE: CVE-2013-4209
Published: 2018-05-01
Description: Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=991604; https://bugzilla.redhat.com/show_bug.cgi?id=991604
CVE: CVE-2016-10036
Published: 2018-05-01
Description: Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uploading a war file or (2) possibly write to arbitrary files and cause a denial of service by uploading an HTML file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/147378/Jfrog-Artifactory-Code-Execution-Shell-Upload.html; https://www.exploit-db.com/exploits/44543/; https://www.jfrog.com/confluence/display/RTF/Release+Notes#ReleaseNotes-Artifactory4.16