deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16011
Published: 2018-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-6708.  Reason: This candidate is a duplicate of CVE-2012-6708.  Notes: All CVE users should reference CVE-2012-6708 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-16012
Published: 2018-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-9251.  Reason: This candidate is a duplicate of CVE-2015-9251.  Notes: All CVE users should reference CVE-2015-9251 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-16013
Published: 2018-06-04
Description: hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: https://github.com/hapijs/hapi/issues/3466; https://nodesecurity.io/advisories/335; https://github.com/hapijs/hapi/issues/3466
CVE: CVE-2017-16014
Published: 2018-06-04
Description: Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703, CWE-388
References: https://github.com/nodejitsu/node-http-proxy/pull/101; https://nodesecurity.io/advisories/323; https://github.com/nodejitsu/node-http-proxy/pull/101
CVE: CVE-2017-16015
Published: 2018-06-04
Description: Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d; https://nodesecurity.io/advisories/158; https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d
CVE: CVE-2017-16016
Published: 2018-06-04
Description: Sanitize-html is a library for scrubbing html input of malicious values. Versions 1.11.1 and below are vulnerable to cross site scripting (XSS) in certain scenarios: If allowed at least one nonTextTags, the result is a potential XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/punkave/sanitize-html/commit/5d205a1005ba0df80e21d8c64a15bb3accdb2403; https://github.com/punkave/sanitize-html/issues/100; https://nodesecurity.io/advisories/154
CVE: CVE-2017-16017
Published: 2018-06-04
Description: sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/punkave/sanitize-html/issues/19; https://github.com/punkave/sanitize-html/pull/20; https://nodesecurity.io/advisories/155
CVE: CVE-2017-16018
Published: 2018-06-04
Description: Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/restify/node-restify/issues/1018; https://nodesecurity.io/advisories/314; https://github.com/restify/node-restify/issues/1018
CVE: CVE-2017-16019
Published: 2018-06-04
Description: GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/GitbookIO/gitbook/issues/1609; https://nodesecurity.io/advisories/159; https://github.com/GitbookIO/gitbook/issues/1609
CVE: CVE-2017-16020
Published: 2018-06-04
Description: Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/notduncansmith/summit/issues/23; https://nodesecurity.io/advisories/315; https://github.com/notduncansmith/summit/issues/23
CVE: CVE-2017-16021
Published: 2018-06-04
Description: uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program to hang and the CPU to idle at 100% usage while uri-js is trying to validate if the supplied URL is valid or not. To check if you're vulnerable, look for a call to `require("uri-js").parse()` where a user is able to send their own input. This affects uri-js 2.1.1 and earlier.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/garycourt/uri-js/issues/12; https://nodesecurity.io/advisories/100; https://github.com/garycourt/uri-js/issues/12
CVE: CVE-2017-16022
Published: 2018-06-04
Description: Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions 0.5.0 and earlier. If control over the labels is obtained, script can be injected. The script will run on the client side whenever that specific graph is loaded.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/morrisjs/morris.js/pull/464; https://nodesecurity.io/advisories/307; https://github.com/morrisjs/morris.js/pull/464
CVE: CVE-2017-16023
Published: 2018-06-04
Description: Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: https://github.com/sindresorhus/decamelize/issues/5; https://nodesecurity.io/advisories/308; https://github.com/sindresorhus/decamelize/issues/5
CVE: CVE-2017-16024
Published: 2018-06-04
Description: The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-377, CWE-200
References: https://cwe.mitre.org/data/definitions/377.html; https://github.com/gvarsanyi/sync-exec/issues/17; https://nodesecurity.io/advisories/310
CVE: CVE-2017-16025
Published: 2018-06-04
Description: Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only present when websocket authentication is set to `cookie`. Submitting an invalid cookie on the websocket upgrade request will cause the node process to error out.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-287
References: https://github.com/hapijs/nes/commit/249ba1755ed6977fbc208463c87364bf884ad655; https://github.com/hapijs/nes/issues/171; https://nodesecurity.io/advisories/331
CVE: CVE-2017-16026
Published: 2018-06-04
Description: Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. This affects Request >=2.2.6 <2.47.0 || >2.51.0 <=2.67.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-201, CWE-20
References: https://github.com/request/request/issues/1904; https://github.com/request/request/pull/2018; https://nodesecurity.io/advisories/309
CVE: CVE-2017-16028
Published: 2018-06-04
Description: react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330, CWE-338
References: https://github.com/tableflip/react-native-meteor-oauth/blob/a7eb738b74c469f5db20296b44b7cae4e2337435/src/meteor-oauth.js#L66; https://nodesecurity.io/advisories/157; https://github.com/tableflip/react-native-meteor-oauth/blob/a7eb738b74c469f5db20296b44b7cae4e2337435/src/meteor-oauth.js#L66
CVE: CVE-2017-16029
Published: 2018-06-04
Description: hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/henrytseng/hostr/issues/8; https://nodesecurity.io/advisories/303; https://github.com/henrytseng/hostr/issues/8
CVE: CVE-2017-16030
Published: 2018-06-04
Description: Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://nodesecurity.io/advisories/312; https://nodesecurity.io/advisories/312
CVE: CVE-2017-16031
Published: 2018-06-04
Description: Socket.io is a realtime application framework that provides communication via websockets. Because socket.io 0.9.6 and earlier depends on `Math.random()` to create socket IDs, the IDs are predictable. An attacker is able to guess the socket ID and gain access to socket.io servers, potentially obtaining sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://github.com/socketio/socket.io/commit/67b4eb9abdf111dfa9be4176d1709374a2b4ded8; https://github.com/socketio/socket.io/issues/856; https://github.com/socketio/socket.io/pull/857
CVE: CVE-2017-16035
Published: 2018-06-04
Description: The hubl-server module is a wrapper for the HubL Development Server. During installation hubl-server downloads a set of dependencies from api.hubapi.com. It appears in the code that these files are downloaded over HTTPS however the api.hubapi.com endpoint redirects to a HTTP url. Because of this behavior an attacker with the ability to man-in-the-middle a developer or system performing a package installation could compromise the integrity of the installation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-319
References: https://nodesecurity.io/advisories/334; https://nodesecurity.io/advisories/334
CVE: CVE-2017-16036
Published: 2018-06-04
Description: `badjs-sourcemap-server` receives files sent by `badjs-sourcemap`. `badjs-sourcemap-server` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/badjs-sourcemap-server; https://nodesecurity.io/advisories/349; https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/badjs-sourcemap-server
CVE: CVE-2017-16037
Published: 2018-06-04
Description: `gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gomeplus-h5-proxy; https://nodesecurity.io/advisories/350; https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gomeplus-h5-proxy
CVE: CVE-2017-16038
Published: 2018-06-04
Description: `f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by `f2e-server` requiring elevated privileges to run.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/shy2850/node-server/issues/10; https://github.com/shy2850/node-server/pull/12/files; https://nodesecurity.io/advisories/346
CVE: CVE-2017-16039
Published: 2018-06-04
Description: `hftp` is a static http or ftp server `hftp` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/hftp; https://nodesecurity.io/advisories/384; https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/hftp
CVE: CVE-2017-16040
Published: 2018-06-04
Description: gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-319
References: https://nodesecurity.io/advisories/291; https://nodesecurity.io/advisories/291
CVE: CVE-2017-16041
Published: 2018-06-04
Description: ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-311, CWE-319
References: https://nodesecurity.io/advisories/249; https://nodesecurity.io/advisories/249
CVE: CVE-2017-16042
Published: 2018-06-04
Description: Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-78
References: https://github.com/tj/node-growl/issues/60; https://github.com/tj/node-growl/pull/61; https://nodesecurity.io/advisories/146
CVE: CVE-2017-16043
Published: 2018-06-04
Description: Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-74
References: https://github.com/erming/shout/pull/344; https://nodesecurity.io/advisories/322; https://github.com/erming/shout/pull/344
CVE: CVE-2017-16044
Published: 2018-06-04
Description: `d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/497; https://nodesecurity.io/advisories/497
CVE: CVE-2017-16045
Published: 2018-06-04
Description: `jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/496; https://nodesecurity.io/advisories/496
CVE: CVE-2017-16046
Published: 2018-06-04
Description: `mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506
References: https://nodesecurity.io/advisories/495; https://nodesecurity.io/advisories/495
CVE: CVE-2017-16048
Published: 2018-06-04
Description: `node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/493; https://nodesecurity.io/advisories/493
CVE: CVE-2017-16049
Published: 2018-06-04
Description: `nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/492; https://nodesecurity.io/advisories/492
CVE: CVE-2017-16050
Published: 2018-06-04
Description: `sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/491; https://nodesecurity.io/advisories/491
CVE: CVE-2017-16051
Published: 2018-06-04
Description: `sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/490; https://nodesecurity.io/advisories/490
CVE: CVE-2017-16052
Published: 2018-06-04
Description: `node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/489; https://nodesecurity.io/advisories/489
CVE: CVE-2017-16053
Published: 2018-06-04
Description: `fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/487; https://nodesecurity.io/advisories/487
CVE: CVE-2017-16054
Published: 2018-06-04
Description: `nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/488; https://nodesecurity.io/advisories/488
CVE: CVE-2017-16055
Published: 2018-06-04
Description: `sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/486; https://nodesecurity.io/advisories/486
CVE: CVE-2016-9042
Published: 2018-06-04
Description: An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected origin timestamp for target peers. Legitimate replies from targeted peers will fail the origin timestamp check (TEST2) causing the reply to be dropped and creating a denial of service condition.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/142101/FreeBSD-Security-Advisory-FreeBSD-SA-17-03.ntp.html; http://packetstormsecurity.com/files/142284/Slackware-Security-Advisory-ntp-Updates.html; http://seclists.org/fulldisclosure/2017/Nov/7
CVE: CVE-2017-12092
Published: 2018-06-04
Description: An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resulting in a new program being written to the memory module. An attacker can send an unauthenticated packet to trigger this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0444
CVE: CVE-2018-3853
Published: 2018-06-04
Description: An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can trigger a previously freed object in memory to be reused resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/103942; http://www.securitytracker.com/id/1040733; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0536
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
CVSS Score: 7.4 (HIGH)
CWE: CWE-310
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed, it is possible with enough observations to identify when the decryption is failing due to padding.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-361
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/21dcb3d9744c83dcf2ff8fcee06dbca7bfa4ef35#diff-4439ce586bf9a13bfec05c0d113b8098
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-Hellman is in use. As of release 1.56 the key parameters are checked on agreement calculation.
CVSS Score: 3.7 (LOW)
CWE: CWE-320
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/1127131c89021612c6eefa26dbe5714c194e7495#diff-d525a20b8acaed791ae2f0f770eb5937
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.
CVSS Score: 7.4 (HIGH)
CWE: CWE-310
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/9385b0ebd277724b167fe1d1456e3c112112be1f
CVE: CVE-2017-18286
Published: 2018-06-05
Description: nZEDb v0.7.3.3 has XSS in the 404 error page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/143725/nZEDb-0.7.3.3-Cross-Site-Scripting.html
CVE: CVE-2018-11735
Published: 2018-06-05
Description: index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/XIMDEX/ximdex/issues/146; https://github.com/XIMDEX/ximdex/issues/146
CVE: CVE-2018-11736
Published: 2018-06-05
Description: An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute arbitrary PHP code by using the image/jpeg content type for a .htaccess file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/pluck-cms/pluck/issues/61; https://github.com/pluck-cms/pluck/releases/tag/4.7.7-dev2; https://github.com/pluck-cms/pluck/issues/61
CVE: CVE-2018-11554
Published: 2018-06-05
Description: The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information Exposure issue and an unexpectedly long lifetime for a verification code, which makes it easier for remote attackers to hijack accounts via a brute-force approach.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/littleheary/-YzmCMS-User-Traversal-Vulnerability/blob/master/README.md; https://github.com/littleheary/-YzmCMS-User-Traversal-Vulnerability/blob/master/README.md
CVE: CVE-2018-11678
Published: 2018-06-05
Description: plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via manipulation of the login_attempts cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://abdilahrf.github.io/login-rate-limiting-bypass; http://abdilahrf.github.io/login-rate-limiting-bypass