deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7323
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14412; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4f9199ea8cff56c6704e9828c3d80360b27c4565
CVE: CVE-2018-7324
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-sccp.c had an infinite loop that was addressed by using a correct integer data type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14413; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=9e7695bbee18525eaa6d12b32230313ae8a36a81
CVE: CVE-2018-7325
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpki-rtr.c had an infinite loop that was addressed by validating a length field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14414; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=7be234d06ea39ab6a88115ae41d71060f1f15e3c
CVE: CVE-2018-7326
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-lltd.c had an infinite loop that was addressed by using a correct integer data type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14419; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=293b999425e998d6cde0d9149648e421ea7687d0
CVE: CVE-2018-7327
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflow_v6.c had an infinite loop that was addressed by validating property lengths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14420; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=563989f888e51258edb9a27db56124bdc33c9afe
CVE: CVE-2018-7328
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-usb.c had an infinite loop that was addressed by rejecting short frame header lengths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14421; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=69d09028c956f6e049145485ce9b3e2858789b2b
CVE: CVE-2018-7329
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-s7comm.c had an infinite loop that was addressed by correcting off-by-one errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193, CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14423; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=d8a0cbc4f2979e0b1cadbe79f0b8b4ecb92477be
CVE: CVE-2018-7330
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thread.c had an infinite loop that was addressed by using a correct integer data type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14428; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8ad0c5b3683a17d9e2e16bbf25869140fd5c1c66
CVE: CVE-2018-7331
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14444; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=157712b2f5f89b19ef2497ea89c5938eb29529da
CVE: CVE-2018-7332
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-reload.c had an infinite loop that was addressed by validating a length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14445; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=1ab0585098c7ce20f3afceb6730427cc2a1e98ea
CVE: CVE-2018-7333
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/103158; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14449; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bd[PII_REDACTED]bfe83842b27650b65f3c2b8d5dc9
CVE: CVE-2018-7334
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umts_mac.c by rejecting a certain reserved value.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103162; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14339; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=8ed705e1227d3d582e3f0de435bba606d053d686
CVE: CVE-2018-7335
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the IEEE 802.11 dissector could crash. This was addressed in epan/crypt/airpdcap.c by rejecting lengths that are too small.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103165; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14442; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a2901dcf45c9f1b07abfbf2a0b0cd654371d72a4
CVE: CVE-2018-7336
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the FCP protocol dissector could crash. This was addressed in epan/dissectors/packet-fcp.c by checking for a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/103166; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14374; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b56f598f1bc04f5d00f13b38c713763928cedb7c
CVE: CVE-2018-7337
Published: 2018-02-23
Description: In Wireshark 2.4.0 to 2.4.4, the DOCSIS protocol dissector could crash. This was addressed in plugins/docsis/packet-docsis.c by removing the recursive algorithm that had been used for concatenated PDUs.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103164; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14446; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=511a8b0b546d25413e289dc5a7d3a455a33994c2
CVE: CVE-2018-7417
Published: 2018-02-23
Description: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the IPMI dissector could crash. This was addressed in epan/dissectors/packet-ipmi-picmg.c by adding support for crafted packets that lack an IPMI header.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103156; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14409; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=81216a176b25dd8a616e11808a951e141a467009
CVE: CVE-2018-7418
Published: 2018-02-23
Description: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by correcting the extraction of the length value.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103157; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14410; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=29d920b8309905dda11ad397596fe8aafc9b4bf7
CVE: CVE-2018-7419
Published: 2018-02-23
Description: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: http://www.securityfocus.com/bid/103159; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14443; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bebd3a1f50b0a27738d8d3da5b33c1b392eb7273
CVE: CVE-2018-7420
Published: 2018-02-23
Description: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the pcapng file parser could crash. This was addressed in wiretap/pcapng.c by adding a block-size check for sysdig event blocks.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/103163; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14403; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=129e41f9f63885ad8224ef413c2860788fb9e849
CVE: CVE-2018-7421
Published: 2018-02-23
Description: In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the DMP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dmp.c by correctly supporting a bounded number of Security Categories for a DMP Security Classification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14408; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=656812ee1f2a8ddfd383b02a066e888f5919e17a; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e8be5adae469ba563acfad2c2b98673e1afaf901
CVE: CVE-2018-7443
Published: 2018-02-23
Description: The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/ImageMagick/ImageMagick/issues/999; https://lists.debian.org/debian-lts-announce/2018/02/msg00028.html; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE: CVE-2017-14884
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the function WLANQCMBR_McProcessMsg, a buffer overflow may potentially occur in WLANFTM_McProcessMsg.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-14910
Published: 2018-02-23
Description: In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-02-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2017-15518
Published: 2018-02-23
Description: All versions of OnCommand API Services prior to 2.1 and NetApp Service Level Manager prior to 1.0RC4 log a privileged database user account password. All users are urged to move to a fixed version. Since the affected password is changed during every upgrade/installation no further action is required.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/
CVE: CVE-2017-15817
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-15820
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-15829
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a GPU Driver which can potentially lead to a Use After Free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-15860
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://source.android.com/security/bulletin/2018-02-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2017-15861
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://source.android.com/security/bulletin/2018-02-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2017-15862
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number of radio channels coming from firmware is not properly validated, potentially leading to an integer overflow vulnerability followed by a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/2018-02-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2017-17764
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-17765
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocate the sizes of buffers and may be vulnerable to integer overflow leading to buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-17767
Published: 2018-02-23
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102974; https://source.android.com/security/bulletin/2018-02-01; http://www.securityfocus.com/bid/102974
CVE: CVE-2018-1305
Published: 2018-02-23
Description: Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them.
CVSS Score: 6.5 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103144
CVE: CVE-2017-18197
Published: 2018-02-24
Description: In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/jgraph/mxgraph/issues/124; https://lists.debian.org/debian-lts-announce/2018/03/msg00002.html; https://github.com/jgraph/mxgraph/issues/124
CVE: CVE-2018-7447
Published: 2018-02-24
Description: mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields claimed to be vulnerable to XSS are only available to administrators who are supposed to have access to add scripts
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103263; https://github.com/i7MEDIA/mojoportal/issues/82; http://www.securityfocus.com/bid/103263
CVE: CVE-2018-7434
Published: 2018-02-24
Description: zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/kongxin520/zzcms/blob/master/zzcms_8.2_bug.md; https://kongxin.gitbook.io/zzcms-8-2-bug/; https://github.com/kongxin520/zzcms/blob/master/zzcms_8.2_bug.md
CVE: CVE-2017-18198
Published: 2018-02-24
Description: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz; http://www.securityfocus.com/bid/103200; https://access.redhat.com/errata/RHSA-2018:3246
CVE: CVE-2017-18199
Published: 2018-02-24
Description: realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz; http://www.securityfocus.com/bid/103202; https://access.redhat.com/errata/RHSA-2018:3246
CVE: CVE-2018-7452
Published: 2018-02-24
Description: A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=613; https://forum.xpdfreader.com/viewtopic.php?f=3&t=613
CVE: CVE-2018-7453
Published: 2018-02-24
Description: Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://forum.xpdfreader.com/viewtopic.php?p=814#p814; https://forum.xpdfreader.com/viewtopic.php?p=814#p814
CVE: CVE-2018-7454
Published: 2018-02-24
Description: A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=613; https://forum.xpdfreader.com/viewtopic.php?f=3&t=613
CVE: CVE-2018-7455
Published: 2018-02-24
Description: An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=654&p=819#p819; https://forum.xpdfreader.com/viewtopic.php?f=3&t=654&p=819#p819
CVE: CVE-2018-7456
Published: 2018-02-24
Description: A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://bugzilla.maptools.org/show_bug.cgi?id=2778; https://access.redhat.com/errata/RHSA-2019:2051; https://access.redhat.com/errata/RHSA-2019:2053
CVE: CVE-2018-6883
Published: 2018-02-24
Description: Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://github.com/Piwigo/Piwigo/issues/839; https://pastebin.com/tPebQFy4; https://github.com/Piwigo/Piwigo/issues/839
CVE: CVE-2018-7466
Published: 2018-02-25
Description: install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during installation to provide a long, crafted value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/9696012eecbafb0aa21cc346234512c29b474679; https://www.exploit-db.com/exploits/44226/; https://www.exploit-db.com/exploits/44349/
CVE: CVE-2018-7470
Published: 2018-02-25
Description: An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentation violation) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/ImageMagick/ImageMagick/issues/998; https://github.com/ImageMagick/ImageMagick/issues/998
CVE: CVE-2018-7471
Published: 2018-02-25
Description: KingView 7.5SP1 has an integer overflow during stgopenstorage API read operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.cnvd.org.cn/flaw/show/1202823; http://www.cnvd.org.cn/flaw/show/1202823
CVE: CVE-2018-7472
Published: 2018-02-25
Description: INVT Studio 1.2 allows remote attackers to cause a denial of service during import operations.
CVSS Score: 5.5 (MEDIUM)
References: http://www.cnvd.org.cn/flaw/show/1205913; http://www.cnvd.org.cn/flaw/show/1205913
CVE: CVE-2018-7476
Published: 2018-02-25
Description: controllers/admin/Linkage.php in dayrui FineCms 5.3.0 has Cross Site Scripting (XSS) via the id or lid parameter in a c=linkage,m=import request to admin.php, because the xss_clean protection mechanism is defeated by crafted input that lacks a '<' or '>' character.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/w1tcher/finecms/commit/6978c63b3bc5e0d1038a23bfc6293ad5e9d5f530; https://www.from0to1.me/index.php/archives/22/; https://gitee.com/w1tcher/finecms/commit/6978c63b3bc5e0d1038a23bfc6293ad5e9d5f530