deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17495
Published: 2019-03-21
Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prompt.
CVSS Score: 8.4 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149655; https://exchange.xforce.ibmcloud.com/vulnerabilities/149655
CVE: CVE-2018-17496
Published: 2019-03-21
Description: eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error while in kiosk mode. By visiting the kiosk and typing ctrl+shift+esc, an attacker could exploit this vulnerability to open the task manager to kill the process or launch new processes on the system.
CVSS Score: 8.4 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149656; https://exchange.xforce.ibmcloud.com/vulnerabilities/149656
CVE: CVE-2018-17497
Published: 2019-03-21
Description: eVisitorPass contains default administrative credentials. An attacker could exploit this vulnerability to gain full access to the application.
CVSS Score: 8.4 (HIGH)
CWE: CWE-1188
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149657; https://exchange.xforce.ibmcloud.com/vulnerabilities/149657
CVE: CVE-2018-17499
Published: 2019-03-21
Description: Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, a token and other sensitive information.
CVSS Score: 2.9 (LOW)
CWE: CWE-312, CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149659; https://exchange.xforce.ibmcloud.com/vulnerabilities/149659
CVE: CVE-2018-17500
Published: 2019-03-21
Description: Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of hardcoded OAuth Creds in plaintext. An attacker could exploit this vulnerability to obtain sensitive information.
CVSS Score: 2.9 (LOW)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149660; https://exchange.xforce.ibmcloud.com/vulnerabilities/149660
CVE: CVE-2018-17502
Published: 2019-03-21
Description: The Receptionist for iPad could allow a local attacker to obtain sensitive information, caused by an error in the contact.json file. An attacker could exploit this vulnerability to obtain the contact names, phone numbers and emails.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/149662; https://exchange.xforce.ibmcloud.com/vulnerabilities/149662
CVE: CVE-2018-17996
Published: 2019-03-21
Description: LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151694/LayerBB-1.1.2-Cross-Site-Request-Forgery.html; https://github.com/AndyRixon/LayerBB/commits/master; https://github.com/AndyRixon/LayerBB/issues/38
CVE: CVE-2018-17997
Published: 2019-03-21
Description: LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151015/LayerBB-1.1.1-Cross-Site-Scripting.html; https://github.com/AndyRixon/LayerBB/commits/master; https://www.exploit-db.com/exploits/46079/
CVE: CVE-2018-1836
Published: 2019-03-21
Description: IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107530; https://exchange.xforce.ibmcloud.com/vulnerabilities/150661; https://www.ibm.com/support/docview.wss?uid=ibm10734457
CVE: CVE-2018-18435
Published: 2019-03-21
Description: KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any user full permission "Everyone: (F)" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as "Localsystem", this will allow any user to escalate privileges to "NT AUTHORITY\SYSTEM" by substituting the service's binary with a malicious one.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/151031/KioWare-Server-4.9.6-Privilege-Escalation.html; https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-002.md; https://m.kioware.com/news/kioware-press-releases/kioware_server_security_patch_update
CVE: CVE-2018-18466
Published: 2019-03-21
Description: An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs (present in the DEBUG folder) that can be accessed by anyone. NOTE: The vendor disputes this as a vulnerability since the disclosure of a local account password (actually an alpha numeric passcode) is achievable only when a custom registry key is added to the windows registry. This action requires administrator access and the registry key is only provided by support staff at securenvoy to troubleshoot customer issues.
CVSS Score: 7.0 (HIGH)
CWE: CWE-532
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2018-18466; https://www.excellium-services.com/cert-xlm-advisory; https://www.excellium-services.com/cert-xlm-advisory/cve-2018-18466/
CVE: CVE-2018-18473
Published: 2019-03-21
Description: A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the _secret1.htm URI. Subsequently, the default password of root for the root account allows an attacker to conduct remote code execution and as a result take over the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://herolab.usd.de/wp-content/uploads/sites/4/usd20180020.txt; https://www.patlite.com/support/Security_Informationtest.html; https://herolab.usd.de/wp-content/uploads/sites/4/usd20180020.txt
CVE: CVE-2018-18762
Published: 2019-03-21
Description: SaltOS 3.1 r8126 contains a database download vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/150005/SaltOS-Erp-Crm-3.1-r8126-Database-Download.html; https://www.exploit-db.com/exploits/45734/; http://packetstormsecurity.com/files/150005/SaltOS-Erp-Crm-3.1-r8126-Database-Download.html
CVE: CVE-2018-18798
Published: 2019-03-21
Description: Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/150010/School-Attendance-Monitoring-System-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/45727/; http://packetstormsecurity.com/files/150010/School-Attendance-Monitoring-System-1.0-SQL-Injection.html
CVE: CVE-2018-18845
Published: 2019-03-21
Description: internal/advanced_comment_system/index.php and internal/advanced_comment_system/admin.php in Advanced Comment System, version 1.0, contain a reflected cross-site scripting vulnerability via ACS_path. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The product is discontinued.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151799/Advanced-Comment-System-1.0-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/46; http://packetstormsecurity.com/files/151799/Advanced-Comment-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2018-18849
Published: 2019-03-21
Description: In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00043.html
CVE: CVE-2018-18862
Published: 2019-03-21
Description: BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+View/.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425
References: http://packetstormsecurity.com/files/151021/BMC-Remedy-ITAM-7.1.00-9.1.02.003-Information-Disclosure.html; http://seclists.org/fulldisclosure/2019/Jan/11; https://docs.bmc.com/docs/ars91/en/release-notes-and-notices-609073037.html
CVE: CVE-2018-18881
Published: 2019-03-21
Description: A Denial of Service (DOS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory reset is required to restore the device to an operational state.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106655; https://applied-risk.com/labs/advisories; http://www.securityfocus.com/bid/106655
CVE: CVE-2018-18882
Published: 2019-03-21
Description: A stored cross-site scripting (XSS) issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106655; https://applied-risk.com/labs/advisories; http://www.securityfocus.com/bid/106655
CVE: CVE-2018-18898
Published: 2019-03-21
Description: The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bestpractical.com/download-page; https://lists.debian.org/debian-lts-announce/2020/02/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPJVDT77ZPRU5Z2BEMZM7EBY6WZHUATZ/
CVE: CVE-2018-19158
Published: 2019-03-21
Description: ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://github.com/ColossusCoinXT/ColossusCoinXT/compare/0223904...9666bb8; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806
CVE: CVE-2018-19191
Published: 2019-03-21
Description: Webmin 1.890 has XSS via /config.cgi?webmin, the /shell/index.cgi history parameter, /shell/index.cgi?stripped=1, or the /webminlog/search.cgi uall or mall parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151144/Webmin-1.890-Cross-Site-Scripting.html; http://www.webmin.com/index.html; http://packetstormsecurity.com/files/151144/Webmin-1.890-Cross-Site-Scripting.html
CVE: CVE-2018-19276
Published: 2019-03-21
Description: OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.html; http://packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.html; https://know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserialization
CVE: CVE-2018-19365
Published: 2019-03-21
Description: The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://blog.gdssecurity.com/labs/2019/2/11/wowza-streaming-engine-manager-directory-traversal-and-local.html; https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-19365.txt; https://blog.gdssecurity.com/labs/2019/2/11/wowza-streaming-engine-manager-directory-traversal-and-local.html
CVE: CVE-2018-19487
Published: 2019-03-21
Description: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_employer_ajax_profile() function through the admin-ajax.php file, which allows remote unauthenticated attackers to enumerate information about users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/Antho59/wp-jobhunt-exploit; https://wpvulndb.com/vulnerabilities/9206; https://github.com/Antho59/wp-jobhunt-exploit
CVE: CVE-2018-19488
Published: 2019-03-21
Description: The WP-jobhunt plugin before version 2.4 for WordPress does not control AJAX requests sent to the cs_reset_pass() function through the admin-ajax.php file, which allows remote unauthenticated attackers to reset the password of a user's account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/Antho59/wp-jobhunt-exploit; https://wpvulndb.com/vulnerabilities/9206; https://github.com/Antho59/wp-jobhunt-exploit
CVE: CVE-2018-19498
Published: 2019-03-21
Description: The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151466/Pages-For-Bitbucket-Server-2.6.0-Cross-Site-Scripting.html; https://marketplace.atlassian.com/apps/1212525/pages-for-bitbucket-server/version-history; https://seclists.org/bugtraq/2019/Jan/53
CVE: CVE-2018-19509
Published: 2019-03-21
Description: wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19510
Published: 2019-03-21
Description: subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19511
Published: 2019-03-21
Description: wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19512
Published: 2019-03-21
Description: In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19513
Published: 2019-03-21
Description: In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19514
Published: 2019-03-21
Description: In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval() expression in the subscriber.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19515
Published: 2019-03-21
Description: In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atment_sddd1xGz, or xls_bgimport query parameters, most of these methods become available to unauthenticated users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html; https://seclists.org/fulldisclosure/2019/Jan/15; http://packetstormsecurity.com/files/151017/Webgalamb-Information-Disclosure-XSS-CSRF-SQL-Injection.html
CVE: CVE-2018-19524
Published: 2019-03-21
Description: An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Web_passwd function allows remote attackers to cause a denial of service (segmentation fault) or achieve unauthenticated remote code execution because of control of registers S0 through S4 and T4 through T7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/151608/Skyworth-GPON-HomeGateways-Optical-Network-Stack-Overflow.html; http://seclists.org/fulldisclosure/2019/Feb/30; https://s3curityb3ast.github.io/KSA-Dev-001.md
CVE: CVE-2018-19525
Published: 2019-03-21
Description: An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352
References: http://packetstormsecurity.com/files/151647/SYSTORME-ISG-Cross-Site-Request-Forgery.html; http://seclists.org/fulldisclosure/2019/Feb/31; https://s3curityb3ast.github.io/KSA-Dev-002.md
CVE: CVE-2018-19694
Published: 2019-03-21
Description: HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151119/HMS-Netbiter-WS100-3.30.5-Cross-Site-Scripting.html; https://seclists.org/bugtraq/2019/Jan/9; https://www.hms-networks.com/docs/librariesprovider6/cybersecurity/hms-security-advisory-2018-12-04-001-ec150-ec250-lc310-lc350-ws100-ws200-cve-2018-19694.pdf
CVE: CVE-2018-19783
Published: 2019-03-21
Description: Kentix MultiSensor-LAN 5.63.00 devices and previous allow Authentication Bypass via an Alternate Path or Channel.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/151237/Kentix-MultiSensor-LAN-5.63.00-Authentication-Bypass.html; https://seclists.org/bugtraq/2019/Jan/21; http://packetstormsecurity.com/files/151237/Kentix-MultiSensor-LAN-5.63.00-Authentication-Bypass.html
CVE: CVE-2018-19872
Published: 2019-03-21
Description: An issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html; https://bugreports.qt.io/browse/QTBUG-69449
CVE: CVE-2018-19917
Published: 2019-03-21
Description: Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151005/Microweber-1.0.8-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/12; http://seclists.org/fulldisclosure/2019/Jan/25
CVE: CVE-2018-1992
Published: 2019-03-21
Description: The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/154345; https://www.ibm.com/support/docview.wss?uid=ibm10868992; https://exchange.xforce.ibmcloud.com/vulnerabilities/154345
CVE: CVE-2018-19934
Published: 2019-03-21
Description: SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151474/SolarWinds-Serv-U-FTP-15.1.6.25-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Feb/5; https://www.themissinglink.com.au/security-advisories-cve-2018-19934
CVE: CVE-2018-19985
Published: 2019-03-21
Description: The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00007.html; http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
CVE: CVE-2018-20121
Published: 2019-03-21
Description: Podcast Generator 2.7 has stored cross-site scripting (XSS) via the URL addcategory parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151333/Podcast-Generator-2.7-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/63; https://github.com/albertobeta/PodcastGenerator/commits/master