deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15920
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105441; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15922
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15923
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15924
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105441; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15925
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15926
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15927
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15928
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15929
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15930
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105442; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15931
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105442; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15932
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15933
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15934
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15935
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15936
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15937
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105442; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15938
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15939
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15940
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15941
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15942
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15943
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15944
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15945
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15946
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15947
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15948
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15949
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15950
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15951
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105437; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15952
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15953
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15954
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15955
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105432; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15956
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15966
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105435; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-15968
Published: 2018-10-12
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]3 and earlier, 2[PII_REDACTED]2 and earlier, and 2[PII_REDACTED]2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105439; http://www.securitytracker.com/id/1041809; https://helpx.adobe.com/security/products/acrobat/apsb18-30.html
CVE: CVE-2018-18270
Published: 2018-10-12
Description: XSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/12; https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/12
CVE: CVE-2018-18271
Published: 2018-10-12
Description: XSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/13; https://github.com/cmsmadesimple/cmsmadesimple-2-0/issues/13
CVE: CVE-2018-14664
Published: 2018-10-12
Description: A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the client side.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106553; https://access.redhat.com/errata/RHSA-2019:1222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14664
CVE: CVE-2018-15755
Published: 2018-10-12
Description: Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-89
References: https://www.cloudfoundry.org/blog/cve-2018-15755/; https://www.cloudfoundry.org/blog/cve-2018-15755/
CVE: CVE-2018-16210
Published: 2018-10-12
Description: WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.18(13) and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMP_DESC or SNMP_LOC_SNMP_CONT field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/45581/; https://www.exploit-db.com/exploits/45581/
CVE: CVE-2018-18274
Published: 2018-10-12
Description: A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/pdfalto; https://github.com/kermitt2/pdfalto/issues/33; https://github.com/TeamSeri0us/pocs/tree/master/pdfalto
CVE: CVE-2018-10141
Published: 2018-10-12
Description: GlobalProtect Portal Login page in Palo Alto Networks PAN-OS before 8.1.4 allows an unauthenticated attacker to inject arbitrary JavaScript or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.paloaltonetworks.com/CVE-2018-10141; https://security.paloaltonetworks.com/CVE-2018-10141
CVE: CVE-2018-18282
Published: 2018-10-12
Description: Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zeit/next.js/releases/tag/7.0.2; https://github.com/zeit/next.js/releases/tag/7.0.2
CVE: CVE-2018-18287
Published: 2018-10-14
Description: On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/remix30303/AsusLeak; https://github.com/remix30303/AsusLeak
CVE: CVE-2018-18289
Published: 2018-10-14
Description: The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://marketplace.atlassian.com/apps/1215171/zabbix-plugin?hosting=server&tab=versions; https://marketplace.atlassian.com/apps/1215171/zabbix-plugin?hosting=server&tab=versions
CVE: CVE-2018-18290
Published: 2018-10-14
Description: An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnat/nc-cms/issues/9; https://github.com/gnat/nc-cms/issues/9
CVE: CVE-2018-18291
Published: 2018-10-14
Description: A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML via Advanced_ASUSDDNS_Content.asp, Advanced_WSecurity_Content.asp, Advanced_Wireless_Content.asp, Logout.asp, Main_Login.asp, MobileQIS_Login.asp, QIS_wizard.htma, YandexDNS.asp, ajax_status.xml, apply.cgi, clients.asp, disk.asp, disk_utility.asp, or internet.asp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/remix30303/AsusXSS/; https://github.com/remix30303/AsusXSS/
CVE: CVE-2018-18296
Published: 2018-10-15
Description: MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.iwantacve.cn/index.php/archives/52/; http://www.iwantacve.cn/index.php/archives/52/
CVE: CVE-2018-18309
Published: 2018-10-15
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/105692