deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10248
Published: 2018-04-20
Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=content&f=content&v=recycle_delete.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/wuzhicms/wuzhicms/issues/130; https://github.com/wuzhicms/wuzhicms/issues/130
CVE: CVE-2018-10250
Published: 2018-04-20
Description: iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Management keyword search.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/22; https://github.com/idreamsoft/iCMS/issues/22
CVE: CVE-2018-1289
Published: 2018-04-20
Description: In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different REST end points to query domain specific entities with a Query Parameter 'orderBy' and 'sortOrder' which are appended directly with SQL statements. A hacker/user can inject/draft the 'orderBy' and 'sortOrder' query parameter in such a way to read/update the data for which he doesn't have authorization.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/104005; https://lists.apache.org/thread.html/4a1312b18ed2979fba9e2df07839e6a940eeeea12ed9154db1a49a5a%40%3Cdev.fineract.apache.org%3E; http://www.securityfocus.com/bid/104005
CVE: CVE-2018-1290
Published: 2018-04-20
Description: In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injection. This could be done in Methods like retrieveAuditEntries of AuditsApiResource Class and retrieveCommands of MakercheckersApiResource Class.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/103975; https://lists.apache.org/thread.html/69cc2b54b32f0936f40dc9be41f41fe1566710a75edbe2eb0a948ae4%40%3Cdev.fineract.apache.org%3E; http://www.securityfocus.com/bid/103975
CVE: CVE-2018-1291
Published: 2018-04-20
Description: Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query domain specific entities with a Query Parameter 'orderBy' which are appended directly with SQL statements. A hacker/user can inject/draft the 'orderBy' query parameter by way of the "order" param in such a way to read/update the data for which he doesn't have authorization.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/104008; https://lists.apache.org/thread.html/1f7fadc93500b3fe14603b132b13c18fff3d0a35e50ebd0246f325c0%40%3Cdev.fineract.apache.org%3E; http://www.securityfocus.com/bid/104008
CVE: CVE-2018-1292
Published: 2018-04-20
Description: Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a hacker could inject SQL to read/update data for which he doesn't have authorization for by way of the 'reportName' parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/104007; https://lists.apache.org/thread.html/a[PII_REDACTED]5d022d5fe89cfe21563ef83bea35ca95de867cd2c4ee9%40%3Cdev.fineract.apache.org%3E; http://www.securityfocus.com/bid/104007
CVE: CVE-2017-8315
Published: 2018-04-20
Description: Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169; https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/; https://bugs.eclipse.org/bugs/show_bug.cgi?id=519169
CVE: CVE-2018-10249
Published: 2018-04-20
Description: baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://crayon-xin.github.io/2018/04/20/baijiacmsV3-CSRF-add-admin/; https://crayon-xin.github.io/2018/04/20/baijiacmsV3-CSRF-add-admin/
CVE: CVE-2014-10073
Published: 2018-04-20
Description: The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=blob%3Bf=NEWS; http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=commit%3Bh=48739caa745f9f8002e87af574f03e5dc6ae3447; http://git.wpitchoune.net/gitweb/?p=psensor.git%3Ba=commit%3Bh=8b10426dcc0246c1712a99460dd470dcb1cc4d9c
CVE: CVE-2014-4782
Published: 2018-04-20
Description: IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21693053; https://exchange.xforce.ibmcloud.com/vulnerabilities/95029; http://www-01.ibm.com/support/docview.wss?uid=swg21693053
CVE: CVE-2014-6108
Published: 2018-04-20
Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 might allow man-in-the-middle attackers to obtain sensitive information by leveraging an unencrypted connection for interfaces. IBM X-Force ID: 96172.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698020; https://exchange.xforce.ibmcloud.com/vulnerabilities/96172; http://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE: CVE-2014-6109
Published: 2018-04-20
Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via vectors related to server side LDAP queries. IBM X-Force ID: 96173.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698020; https://exchange.xforce.ibmcloud.com/vulnerabilities/96173; http://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE: CVE-2014-6111
Published: 2018-04-20
Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 store encrypted user credentials and the keystore password in cleartext in configuration files, which allows local users to decrypt SIM credentials via unspecified vectors. IBM X-Force ID: 96180.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698020; https://exchange.xforce.ibmcloud.com/vulnerabilities/96180; http://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE: CVE-2014-6112
Published: 2018-04-20
Description: IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS-SIM-IF0001 and 7.0.x before 7.0.0.0-ISS-SIM-IF0003 make it easier for remote attackers to obtain sensitive information by leveraging support for weak SSL ciphers. IBM X-Force ID: 96184.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21698020; https://exchange.xforce.ibmcloud.com/vulnerabilities/96184; http://www-01.ibm.com/support/docview.wss?uid=swg21698020
CVE: CVE-2018-8826
Published: 2018-04-20
Description: ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS/; https://www.asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS/; https://www.asus.com/ca-en/Networking/RT-N600/HelpDesk_Download/
CVE: CVE-2014-0883
Published: 2018-04-20
Description: IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  91163.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/91163; https://www.ibm.com/support/pages/security-bulletin-power-hardware-management-console-hmc-cve-2014-0883; https://exchange.xforce.ibmcloud.com/vulnerabilities/91163
CVE: CVE-2014-0900
Published: 2018-04-20
Description: The Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://securityintelligence.com/how-to-cheat-your-mdm-compliance-without-a-password/; https://securityintelligence.com/how-to-cheat-your-mdm-compliance-without-a-password/
CVE: CVE-2014-0912
Published: 2018-04-20
Description: IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID: 92072.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21674739; https://exchange.xforce.ibmcloud.com/vulnerabilities/92072; http://www-01.ibm.com/support/docview.wss?uid=swg21674739
CVE: CVE-2014-0927
Published: 2018-04-20
Description: The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to bypass authentication by leveraging knowledge of the port number and webapp path. IBM X-Force ID: 92259.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www-01.ibm.com/support/docview.wss?uid=swg21674739; https://exchange.xforce.ibmcloud.com/vulnerabilities/92259; http://www-01.ibm.com/support/docview.wss?uid=swg21674739
CVE: CVE-2014-0931
Published: 2018-04-20
Description: Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg21668868; https://exchange.xforce.ibmcloud.com/vulnerabilities/92263; http://www-01.ibm.com/support/docview.wss?uid=swg21668868
CVE: CVE-2014-0950
Published: 2018-04-20
Description: Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg21675164; https://exchange.xforce.ibmcloud.com/vulnerabilities/92623; http://www-01.ibm.com/support/docview.wss?uid=swg21675164
CVE: CVE-2017-2825
Published: 2018-04-20
Description: In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this vulnerability.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98094; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0326; https://www.debian.org/security/2017/dsa-3937
CVE: CVE-2018-10077
Published: 2018-04-20
Description: XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html; https://www.exploit-db.com/exploits/44493/; http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE: CVE-2018-10078
Published: 2018-04-20
Description: Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html; https://www.exploit-db.com/exploits/44493/; http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE: CVE-2018-10079
Published: 2018-04-20
Description: Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html; https://www.exploit-db.com/exploits/44493/; http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
CVE: CVE-2018-10173
Published: 2018-04-20
Description: Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/147244/Digital-Guardian-Management-Console-7.1.2.0015-Shell-Upload.html; http://packetstormsecurity.com/files/147244/Digital-Guardian-Management-Console-7.1.2.0015-Shell-Upload.html
CVE: CVE-2018-10174
Published: 2018-04-20
Description: Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/147260/Digital-Guardian-Management-Console-7.1.2.0015-Server-Side-Request-Forgery.html; http://packetstormsecurity.com/files/147260/Digital-Guardian-Management-Console-7.1.2.0015-Server-Side-Request-Forgery.html
CVE: CVE-2018-10175
Published: 2018-04-20
Description: Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://packetstormsecurity.com/files/147261/Digital-Guardian-Management-Console-7.1.2.0015-XXE-Injection.html; http://packetstormsecurity.com/files/147261/Digital-Guardian-Management-Console-7.1.2.0015-XXE-Injection.html
CVE: CVE-2018-10176
Published: 2018-04-20
Description: Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/147242/Digital-Guardian-Management-Console-7.1.2.0015-Arbitrary-File-Read.html; http://packetstormsecurity.com/files/147242/Digital-Guardian-Management-Console-7.1.2.0015-Arbitrary-File-Read.html
CVE: CVE-2018-7747
Published: 2018-04-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log, or (3) an imported form.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/147257/WordPress-Caldera-Forms-1.5.9.1-Cross-Site-Scripting.html; https://calderaforms.com/2018/03/caldera-forms-1-6-is-here/; https://calderaforms.com/updates/caldera-forms-1-6-0/#security
CVE: CVE-2018-9059
Published: 2018-04-20
Description: Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp.  NOTE: this may overlap CVE-2014-3791.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/147246/Easy-File-Sharing-Web-Server-7.2-Buffer-Overflow.html; https://www.exploit-db.com/exploits/44485/; https://www.exploit-db.com/exploits/44522/
CVE: CVE-2018-10253
Published: 2018-04-21
Description: Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/44500/; https://www.paessler.com/prtg/history/preview; https://www.exploit-db.com/exploits/44500/
CVE: CVE-2018-10254
Published: 2018-04-21
Description: Netwide Assembler (NASM) 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this vulnerability to cause a denial of service or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://sourceforge.net/p/nasm/bugs/561/
CVE: CVE-2018-10283
Published: 2018-04-21
Description: CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lab.insightsecurity.com.br/clickmania-0day-sql-injection-2/; https://lab.insightsecurity.com.br/clickmania-0day-sql-injection-2/
CVE: CVE-2018-10284
Published: 2018-04-21
Description: Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp eve_cod parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lab.insightsecurity.com.br/g-tickets-sql-injection/; https://lab.insightsecurity.com.br/g-tickets-sql-injection/
CVE: CVE-2017-15640
Published: 2018-04-21
Description: app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/1521; https://github.com/phpipam/phpipam/releases/tag/1.3.1; https://github.com/phpipam/phpipam/issues/1521
CVE: CVE-2018-10126
Published: 2018-04-21
Description: ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://bugzilla.maptools.org/show_bug.cgi?id=2786; https://gitlab.com/libtiff/libtiff/-/issues/128; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE: CVE-2018-10265
Published: 2018-04-22
Description: An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Neeke/HongCMS/issues/1; https://github.com/Neeke/HongCMS/issues/1
CVE: CVE-2018-10266
Published: 2018-04-22
Description: BEESCMS 4.0 has a CSRF vulnerability to add an administrator account via the admin/admin_admin.php?nav=list_admin_user&admin_p_nav=user URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/source-trace/beescms/issues/1; https://github.com/source-trace/beescms/issues/1
CVE: CVE-2018-10267
Published: 2018-04-22
Description: WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/taosir/wtcms/issues/1; https://www.hackpwn.me/2018/04/21/1/; https://github.com/taosir/wtcms/issues/1
CVE: CVE-2018-10268
Published: 2018-04-22
Description: An issue was discovered in FastAdmin V1.0.0.20180417_beta. There is XSS via the application\api\controller\User.php avatar parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/karson/fastadmin/issues/IJ7YZ; https://gitee.com/karson/fastadmin/issues/IJ7YZ
CVE: CVE-2018-10289
Published: 2018-04-22
Description: In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?2e43685dc8a8a886fc9df9b3663cf199404f7637; https://bugs.ghostscript.com/show_bug.cgi?id=699271; https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html
CVE: CVE-2018-10285
Published: 2018-04-22
Description: The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://gist.github.com/berkgoksel/b8e15cb5742540c6987e9d837d6fa8b1; https://www.exploit-db.com/exploits/44515/; https://gist.github.com/berkgoksel/b8e15cb5742540c6987e9d837d6fa8b1
CVE: CVE-2018-10286
Published: 2018-04-22
Description: The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the responses to certain HTTP POST requests. In order to be able to see the credentials in cleartext, an attacker needs to be authenticated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522
References: https://gist.github.com/berkgoksel/fde102503c457c0344e2e53b7971437a; https://www.exploit-db.com/exploits/44515/; https://gist.github.com/berkgoksel/fde102503c457c0344e2e53b7971437a
CVE: CVE-2018-9245
Published: 2018-04-22
Description: The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code on the operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/berkgoksel/99ba5c1f3f9f6e4e33e7ad966c007693; https://www.exploit-db.com/exploits/44515/; https://gist.github.com/berkgoksel/99ba5c1f3f9f6e4e33e7ad966c007693
CVE: CVE-2018-10295
Published: 2018-04-22
Description: ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/chemcms/ChemCMS/issues/1; https://github.com/chemcms/ChemCMS/issues/1
CVE: CVE-2018-10296
Published: 2018-04-22
Description: MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/17; https://github.com/bg5sbk/MiniCMS/issues/17
CVE: CVE-2017-17889
Published: 2018-04-22
Description: Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/; https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/
CVE: CVE-2017-17902
Published: 2018-04-22
Description: SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://edricteo.com/kliqqi-cms-sqli-vulnerability-in-version-3.5.2/; https://edricteo.com/kliqqi-cms-sqli-vulnerability-in-version-3.5.2/