deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-1788
Published: 2018-11-02
Description: IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force ID: 148873.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=ibm10730357; http://www.securityfocus.com/bid/105818; http://www.securitytracker.com/id/1042032
CVE: CVE-2018-17918
Published: 2018-11-02
Description: Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-287
References: http://www.securityfocus.com/bid/105816; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03; http://www.securityfocus.com/bid/105816
CVE: CVE-2018-17922
Published: 2018-11-02
Description: Circontrol CirCarLife all versions prior to 4.3.1, the PAP credentials of the device are stored in clear text in a log file that is accessible without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-532
References: http://www.securityfocus.com/bid/105816; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-03; http://www.securityfocus.com/bid/105816
CVE: CVE-2018-1835
Published: 2018-11-02
Description: IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=ibm10733815; https://exchange.xforce.ibmcloud.com/vulnerabilities/150514; http://www.ibm.com/support/docview.wss?uid=ibm10733815
CVE: CVE-2018-1846
Published: 2018-11-02
Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150945.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=ibm10738075; https://exchange.xforce.ibmcloud.com/vulnerabilities/150945; http://www.ibm.com/support/docview.wss?uid=ibm10738075
CVE: CVE-2018-1876
Published: 2018-11-02
Description: IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/151707; https://www.ibm.com/support/docview.wss?uid=ibm10735967; https://exchange.xforce.ibmcloud.com/vulnerabilities/151707
CVE: CVE-2018-1877
Published: 2018-11-02
Description: IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-312
References: http://www.ibm.com/support/docview.wss?uid=ibm10735973; https://exchange.xforce.ibmcloud.com/vulnerabilities/151713; http://www.ibm.com/support/docview.wss?uid=ibm10735973
CVE: CVE-2018-1878
Published: 2018-11-02
Description: IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/151714; https://www.ibm.com/support/docview.wss?uid=ibm10735977; https://exchange.xforce.ibmcloud.com/vulnerabilities/151714
CVE: CVE-2018-3890
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw and command injection, resulting in code execution. An attacker can insert an SD card to trigger this vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0565; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0565
CVE: CVE-2018-3891
Published: 2018-11-02
Description: An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD card to trigger this vulnerability.
CVSS Score: 4.6 (MEDIUM)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0566; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0566
CVE: CVE-2018-3892
Published: 2018-11-02
Description: An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0567; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0567
CVE: CVE-2018-3898
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the ssid_dst field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0571; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0571
CVE: CVE-2018-3899
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The trans_info call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the password_dst field
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0571; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0571
CVE: CVE-2018-3920
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially crafted 7-Zip file can cause a CRC collision, resulting in a firmware update and code execution. An attacker can insert an SDcard to trigger this vulnerability.
CVSS Score: 6.8 (MEDIUM)
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0584; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0584
CVE: CVE-2018-3934
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a logic flaw, resulting in an authentication bypass. An attacker can sniff network traffic and send a set of packets to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0601; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0601
CVE: CVE-2018-3935
Published: 2018-11-02
Description: An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0602; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0602
CVE: CVE-2018-7798
Published: 2018-11-02
Description: A Insufficient Verification of Data Authenticity (CWE-345) vulnerability exists in the Modicon M221, all versions, which could cause a change of IPv4 configuration (IP address, mask and gateway) when remotely connected to the device.
CVSS Score: 8.2 (HIGH)
CWE: CWE-345
References: http://www.securityfocus.com/bid/105970; https://www.schneider-electric.com/en/download/document/SEVD-2018-270-01/; http://www.securityfocus.com/bid/105970
CVE: CVE-2018-7799
Published: 2018-11-02
Description: A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/bid/105951; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02; https://www.schneider-electric.com/en/download/document/SEVD-2018-298-01/
CVE: CVE-2018-16849
Published: 2018-11-02
Description: A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor running the action. Since std.ssh private_key_filename can take an absolute path, it can be used to assess whether or not a file exists on the executor's filesystem.
CVSS Score: 3.1 (LOW)
CWE: CWE-200, CWE-200
References: https://bugs.launchpad.net/mistral/+bug/1783708; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16849; https://bugs.launchpad.net/mistral/+bug/1783708
CVE: CVE-2018-11062
Published: 2018-11-02
Description: Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://www.securityfocus.com/bid/105764; https://seclists.org/fulldisclosure/2018/Oct/53; http://www.securityfocus.com/bid/105764
CVE: CVE-2018-15762
Published: 2018-11-02
Description: Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for privilege escalation. A remote malicious user who has been authenticated may create a new client with administrator privileges for Opsman.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-269
References: https://pivotal.io/security/cve-2018-15762; https://pivotal.io/security/cve-2018-15762
CVE: CVE-2018-16847
Published: 2018-11-02
Description: An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-125, CWE-787
References: http://www.securityfocus.com/bid/105866; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16847; https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg00200.html
CVE: CVE-2018-18915
Published: 2018-11-03
Description: There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/511; https://access.redhat.com/errata/RHSA-2019:2101
CVE: CVE-2018-18903
Published: 2018-11-03
Description: Vanilla 2.6.x before 2.6.4 allows remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/vanilla/vanilla/releases/tag/Vanilla_2.6.4; https://open.vanillaforums.com/discussion/36771/security-update-vanilla-2-6-4; https://srcincite.io/blog/2018/10/02/old-school-pwning-with-new-school-tricks-vanilla-forums-remote-code-execution.html
CVE: CVE-2018-18909
Published: 2018-11-03
Description: xhEditor 1.2.2 allows XSS via JavaScript code in the SRC attribute of an IFRAME element within the editor's source-code view.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/yaniswang/xhEditor/issues/37; https://github.com/yaniswang/xhEditor/issues/37
CVE: CVE-2018-18919
Published: 2018-11-04
Description: The WP Editor.md plugin 10.0.1 for WordPress allows XSS via the comment area.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/JaxsonWang/WP-Editor.md/issues/275; https://github.com/JaxsonWang/WP-Editor.md/issues/275
CVE: CVE-2018-18924
Published: 2018-11-04
Description: The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the server, with predictable filenames, after a "This file is not a valid image" error message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-459
References: https://pentest.com.tr/exploits/ProjeQtOr-Project-Management-Tool-7-2-5-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/45680/; https://pentest.com.tr/exploits/ProjeQtOr-Project-Management-Tool-7-2-5-Remote-Code-Execution.html
CVE: CVE-2018-18925
Published: 2018-11-04
Description: Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go. This is related to session ID handling in the go-macaron/session code for Macaron.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/gogs/gogs/issues/5469; https://github.com/gogs/gogs/issues/5469
CVE: CVE-2018-18926
Published: 2018-11-04
Description: Gitea before 1.5.4 allows remote code execution because it does not properly validate session IDs. This is related to session ID handling in the go-macaron/session code for Macaron.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/go-gitea/gitea/issues/5140; https://github.com/go-gitea/gitea/issues/5140
CVE: CVE-2018-18927
Published: 2018-11-04
Description: An issue was discovered in PublicCMS V4.0. It allows XSS by modifying the page_list "attached" attribute (which typically has 'class="icon-globe icon-large"' in its value), as demonstrated by an 'UPDATE sys_module SET attached = "[XSS]" WHERE id="page_list"' statement.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/sanluan/PublicCMS/issues/22; https://github.com/sanluan/PublicCMS/issues/22
CVE: CVE-2018-18928
Published: 2018-11-04
Description: International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://bugs.chromium.org/p/chromium/issues/detail?id=900059; https://github.com/unicode-org/icu/commit/53d8c8f3d181d87a6aa925b449b51c4a2c922a51; https://unicode-org.atlassian.net/browse/ICU-20246
CVE: CVE-2018-18933
Published: 2018-11-05
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!safe_vsnprintf+0x[PII_REDACTED]2c4330" issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/02/2018/11/2018-11-02/index.html; https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/02/2018/11/2018-11-02/
CVE: CVE-2018-18934
Published: 2018-11-05
Description: An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=component&act=addnew URI by using the fupload parameter to upload a ZIP file containing arbitrary PHP code (that is extracted and can be executed). This can also be exploited via CSRF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352, CWE-434
References: https://github.com/PopojiCMS/PopojiCMS/issues/12; https://github.com/PopojiCMS/PopojiCMS/issues/13; https://github.com/PopojiCMS/PopojiCMS/issues/12
CVE: CVE-2018-18935
Published: 2018-11-05
Description: An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as demonstrated by adding a level=1 account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/PopojiCMS/PopojiCMS/issues/14; https://github.com/PopojiCMS/PopojiCMS/issues/14
CVE: CVE-2018-18936
Published: 2018-11-05
Description: An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via directory traversal in the po-admin/route.php?mod=library&act=delete id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/PopojiCMS/PopojiCMS/issues/15; https://github.com/PopojiCMS/PopojiCMS/issues/15
CVE: CVE-2018-18937
Published: 2018-11-05
Description: An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-clientdataset_getvalues; https://github.com/mz-automation/libiec61850/issues/82; https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-clientdataset_getvalues
CVE: CVE-2018-18938
Published: 2018-11-05
Description: An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/158; https://github.com/wuzhicms/wuzhicms/issues/158
CVE: CVE-2018-18939
Published: 2018-11-05
Description: An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/159; https://github.com/wuzhicms/wuzhicms/issues/159
CVE: CVE-2018-18942
Published: 2018-11-05
Description: In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://sunu11.com/2018/10/31/baserCMS/; https://basercms.net/release/4_1_4; https://github.com/baserproject/basercms/issues/959
CVE: CVE-2018-18943
Published: 2018-11-05
Description: An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://sunu11.com/2018/10/31/baserCMS/; https://basercms.net/release/4_1_4; http://sunu11.com/2018/10/31/baserCMS/
CVE: CVE-2018-18949
Published: 2018-11-05
Description: Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/network-monitoring/help/read-me.html; https://www.manageengine.com/network-monitoring/help/read-me.html
CVE: CVE-2018-18950
Published: 2018-11-05
Description: KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or directory in the kindeditor/attached/ folder via the path parameter without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/kindsoft/kindeditor/issues/289; https://github.com/kindsoft/kindeditor/issues/289
CVE: CVE-2018-18952
Published: 2018-11-05
Description: JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://blog.csdn.net/libieme/article/details/83588929; https://blog.csdn.net/libieme/article/details/83588929
CVE: CVE-2018-9208
Published: 2018-11-05
Description: Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.vapidlabs.com/advisory.php?v=207; http://www.vapidlabs.com/advisory.php?v=207
CVE: CVE-2018-18820
Published: 2018-11-05
Description: A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabled, then any malicious HTTP client can send a request for that specific resource including a crafted header, leading to denial of service and potentially remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2018/11/01/3; http://www.securitytracker.com/id/1042019; https://lists.debian.org/debian-lts-announce/2018/11/msg00033.html
CVE: CVE-2018-18956
Published: 2018-11-05
Description: The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-November/016316.html; https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html; https://redmine.openinfosecfoundation.org/issues/2658#change-10374
CVE: CVE-2018-13396
Published: 2018-11-05
Description: There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
CVSS Score: 8.8 (HIGH)
References: https://jira.atlassian.com/browse/SRCTREE-5985; https://jira.atlassian.com/browse/SRCTREE-5985
CVE: CVE-2018-13397
Published: 2018-11-05
Description: There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
CVSS Score: 8.8 (HIGH)
References: https://jira.atlassian.com/browse/SRCTREEWIN-9077; https://jira.atlassian.com/browse/SRCTREEWIN-9077
CVE: CVE-2018-18957
Published: 2018-11-05
Description: An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/mz-automation/libiec61850/issues/83; https://www.exploit-db.com/exploits/45798/; https://github.com/mz-automation/libiec61850/issues/83
CVE: CVE-2018-17905
Published: 2018-11-05
Description: When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/105691; https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01; http://www.securityfocus.com/bid/105691
CVE: CVE-2018-17907
Published: 2018-11-05
Description: When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-200
References: http://www.securityfocus.com/bid/105691; https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01; http://www.securityfocus.com/bid/105691