deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12974
Published: 2019-06-26
Description: A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1515
CVE: CVE-2019-12975
Published: 2019-06-26
Description: ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1517
CVE: CVE-2019-12976
Published: 2019-06-26
Description: ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1520
CVE: CVE-2019-12977
Published: 2019-06-26
Description: ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1518
CVE: CVE-2019-12978
Published: 2019-06-26
Description: ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1519
CVE: CVE-2019-12979
Published: 2019-06-26
Description: ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html; http://www.securityfocus.com/bid/108913; https://github.com/ImageMagick/ImageMagick/issues/1522
CVE: CVE-2019-12980
Published: 2019-06-26
Description: In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/libming/libming/commit/a009a38dce1d9316cad1ab522b813b1d5ba4c62a; https://github.com/libming/libming/commit/a009a38dce1d9316cad1ab522b813b1d5ba4c62a
CVE: CVE-2019-12981
Published: 2019-06-26
Description: Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/libming/libming/commit/6e76e8c71cb51c8ba0aa9737a636b9ac3029887f; https://github.com/libming/libming/commit/6e76e8c71cb51c8ba0aa9737a636b9ac3029887f
CVE: CVE-2019-12982
Published: 2019-06-26
Description: Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/libming/libming/commit/da9d86eab55cbf608d5c916b8b690f5b76bca462; https://github.com/libming/libming/commit/da9d86eab55cbf608d5c916b8b690f5b76bca462
CVE: CVE-2019-12983
Published: 2019-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11884. Reason: This candidate is a reservation duplicate of CVE-2019-11884. Notes: All CVE users should reference CVE-2019-11884 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-12984
Published: 2019-06-26
Description: A NULL pointer dereference vulnerability in the function nfc_genl_deactivate_target() in net/nfc/netlink.c in the Linux kernel before 5.1.13 can be triggered by a malicious user-mode program that omits certain NFC attributes, leading to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html; http://www.securityfocus.com/bid/108905; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.13
CVE: CVE-2019-10133
Published: 2019-06-26
Description: A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to internal URLs.
CVSS Score: 3.1 (LOW)
CWE: CWE-601, CWE-601
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10133; https://moodle.org/mod/forum/discuss.php?d=386523; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10133
CVE: CVE-2019-10134
Published: 2019-06-26
Description: A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
CVSS Score: 3.7 (LOW)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134; https://moodle.org/mod/forum/discuss.php?d=386524; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10134
CVE: CVE-2019-10154
Published: 2019-06-26
Description: A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154; https://moodle.org/mod/forum/discuss.php?d=386521; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154
CVE: CVE-2019-9039
Published: 2019-06-26
Description: In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "_all_docs" endpoint. By issuing nested queries with CPU-intensive operations they may have been able to cause increased resource usage and denial of service conditions. The _all_docs endpoint is not required for Couchbase Mobile replication and external access to this REST endpoint has been blocked to mitigate this issue. This issue has been fixed in versions 2.5.0 and 2.1.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://docs.couchbase.com/sync-gateway/2.5/release-notes.html; https://research.hisolutions.com/2019/06/n1ql-injection-in-couchbase-sync-gateway-cve-2019-9039/; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2019-1619
Published: 2019-06-27
Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-798
References: http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Jul/7
CVE: CVE-2019-1620
Published: 2019-06-27
Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-22
References: http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Jul/7
CVE: CVE-2019-1621
Published: 2019-06-27
Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download arbitrary files from the underlying filesystem of the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264, CWE-22
References: http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Jul/7; http://www.securityfocus.com/bid/108904
CVE: CVE-2019-1622
Published: 2019-06-27
Description: A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-532
References: http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Jul/7
CVE: CVE-2018-1734
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/147838; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1758
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148605.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/148605; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1760
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148614.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/148614; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1826
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150429.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/150429; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1827
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150430.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/150430; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1828
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150431.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/150431; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1892
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152156.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/152156; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2018-1893
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152157.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/152157; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-12583
Published: 2019-06-27
Description: Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator. This can lead to unauthorised network access or Denial of Service.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-425
References: https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/; https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml; https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/
CVE: CVE-2019-12887
Published: 2019-06-27
Description: KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).
CVSS Score: 8.1 (HIGH)
CWE: CWE-294
References: https://www.linotp.org/CVE-2019-12887.txt; https://www.linotp.org/CVE-2019-12887.txt
CVE: CVE-2019-4083
Published: 2019-06-27
Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/157383; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-4084
Published: 2019-06-27
Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
CVSS Score: 4.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/157384; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-4249
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159647.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/159647; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-4250
Published: 2019-06-27
Description: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/159648; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-4252
Published: 2019-06-27
Description: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 159883.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.ibm.com/support/docview.wss?uid=ibm10956525; https://exchange.xforce.ibmcloud.com/vulnerabilities/159883; http://www.ibm.com/support/docview.wss?uid=ibm10956525
CVE: CVE-2019-12581
Published: 2019-06-27
Description: A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the err_msg parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://n-thumann.de/blog/zyxel-gateways-missing-access-control-in-account-generator-xss/; https://sec-consult.com/en/blog/advisories/reflected-cross-site-scripting-in-zxel-zywall/index.html; https://www.zyxel.com/support/vulnerabilities-related-to-the-Free-Time-feature.shtml
CVE: CVE-2019-7228
Published: 2019-06-27
Description: The ABB IDAL HTTP server mishandles format strings in a username or cookie during the authentication process. Attempting to authenticate with the username %25s%25p%25x%25n will crash the server. Sending %08x.AAAA.%08x.%08x will log memory content from the stack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: http://packetstormsecurity.com/files/153404/ABB-IDAL-HTTP-Server-Uncontrolled-Format-String.html; http://seclists.org/fulldisclosure/2019/Jun/43; http://www.securityfocus.com/bid/108886
CVE: CVE-2019-7226
Published: 2019-06-27
Description: The ABB IDAL HTTP server CGI interface contains a URL that allows an unauthenticated attacker to bypass authentication and gain access to privileged functions. Specifically, /cgi/loginDefaultUser creates a session in an authenticated state and returns the session ID along with what may be the username and cleartext password of the user. An attacker can then supply an IDALToken value in a cookie, which will allow them to perform privileged operations such as restarting the service with /cgi/restart. A GET request to /cgi/loginDefaultUser may result in "1 #S_OK IDALToken=532c8632b86694f0232a68a0897a145c admin admin" or a similar response.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/153402/ABB-IDAL-HTTP-Server-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2019/Jun/39; http://www.securityfocus.com/bid/108886
CVE: CVE-2019-7227
Published: 2019-06-27
Description: In the ABB IDAL FTP server, an authenticated attacker can traverse to arbitrary directories on the hard disk with "CWD ../" and then use the FTP server functionality to download and upload files. An unauthenticated attacker can take advantage of the hardcoded or default credential pair exor/exor to become an authenticated attacker.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/153396/ABB-IDAL-FTP-Server-Path-Traversal.html; http://seclists.org/fulldisclosure/2019/Jun/37; http://www.securityfocus.com/bid/108886
CVE: CVE-2017-5028
Published: 2019-06-27
Description: Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html; https://crbug.com/653555; https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html
CVE: CVE-2018-15556
Published: 2019-06-27
Description: The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using the enabled onboard UART headers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2019/Jun/1; http://seclists.org/fulldisclosure/2019/Jun/1
CVE: CVE-2018-15557
Published: 2019-06-27
Description: An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything on the 169.254.1.0/24 subnet, and obtain root access by connecting to 169.254.1.2 port 23 with telnet/netcat.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2019/Jun/2; http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html
CVE: CVE-2018-16064
Published: 2019-06-27
Description: Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/797461; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html