deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-6247
Published: 2019-01-13
Description: An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in SVG++ (aka svgpp) 1.2.3. A heap-based buffer overflow bug in svgpp_agg_render may lead to code execution. In the render_scanlines_aa_solid function, the blend_hline function is called repeatedly multiple times. blend_hline is equivalent to a loop containing write operations. Each call writes a piece of heap data, and multiple calls overwrite the data in the heap.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/svgpp/svgpp/issues/70; https://lists.debian.org/debian-lts-announce/2023/04/msg00001.html; https://github.com/svgpp/svgpp/issues/70
CVE: CVE-2019-6248
Published: 2019-01-13
Description: PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 has Reflected XSS via the srch parameter, as demonstrated by restaurants-details.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://suku90.wordpress.com/2019/01/12/php-scripts-mall-citysearch-hotfrog-gelbeseiten-clone-script-2-0-1-reflected-xss/; https://suku90.wordpress.com/2019/01/12/php-scripts-mall-citysearch-hotfrog-gelbeseiten-clone-script-2-0-1-reflected-xss/
CVE: CVE-2018-16887
Published: 2019-01-13
Description: A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2019:1222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16887; https://access.redhat.com/errata/RHSA-2019:1222
CVE: CVE-2018-20703
Published: 2019-01-13
Description: CubeCart 6.2.2 has Reflected XSS via a /{ADMIN-FILE}/ query string.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-18-025-reflected-cross-site-scripting-in-cubecart/; https://www.netsparker.com/web-applications-advisories/ns-18-025-reflected-cross-site-scripting-in-cubecart/
CVE: CVE-2019-6249
Published: 2019-01-13
Description: An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/index.php?load=admins&act=edit_info&act_type=add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/109/; https://www.exploit-db.com/exploits/46149/; http://www.iwantacve.cn/index.php/archives/109/
CVE: CVE-2019-6250
Published: 2019-01-13
Description: A pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4.2.x and 4.3.x before 4.3.1. A v2_decoder.cpp zmq::v2_decoder_t::size_ready integer overflow allows an authenticated attacker to overwrite an arbitrary amount of bytes beyond the bounds of a buffer, which can be leveraged to run arbitrary code on the target system. The memory layout allows the attacker to inject OS commands into a data structure located immediately after the problematic buffer (i.e., it is not necessary to use a typical buffer-overflow exploitation technique that changes the flow of control).
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/zeromq/libzmq/issues/3351; https://github.com/zeromq/libzmq/releases/tag/v4.3.1; https://security.gentoo.org/glsa/201903-22
CVE: CVE-2019-6251
Published: 2019-01-14
Description: WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge.
CVSS Score: 8.1 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00031.html; http://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.html
CVE: CVE-2019-6256
Published: 2019-01-14
Description: A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93. It can cause an RTSPServer crash in handleHTTPCmd_TunnelingPOST, when RTSP-over-HTTP tunneling is supported, via x-sessioncookie HTTP headers in a GET request and a POST request within the same TCP session. This occurs because of a call to an incorrect virtual function pointer in the readSocket function in GroupsockHelper.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-755
References: https://github.com/rgaufman/live555/issues/19; https://lists.debian.org/debian-lts-announce/2019/02/msg00037.html; https://seclists.org/bugtraq/2019/Mar/22
CVE: CVE-2019-6257
Published: 2019-01-14
Description: A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources. This occurs in get_remote_contents() in php/elFinder.class.php.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://github.com/Studio-42/elFinder/blob/68ec63c0aeca3963101aca8f842dc9f2e4c4c6d3/Changelog; https://github.com/Studio-42/elFinder/commit/2f522db8f037a66ce9040ee0b216aa4a0359286c; https://github.com/Studio-42/elFinder/blob/68ec63c0aeca3963101aca8f842dc9f2e4c4c6d3/Changelog
CVE: CVE-2018-1956
Published: 2019-01-14
Description: IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 153628.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-521
References: http://www.securityfocus.com/bid/106554; https://exchange.xforce.ibmcloud.com/vulnerabilities/153628; https://www.ibm.com/support/docview.wss?uid=ibm10794615
CVE: CVE-2018-1967
Published: 2019-01-14
Description: IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153748.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106554; https://exchange.xforce.ibmcloud.com/vulnerabilities/153748; https://www.ibm.com/support/docview.wss?uid=ibm10794615
CVE: CVE-2018-1969
Published: 2019-01-14
Description: IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-434
References: http://www.securityfocus.com/bid/106554; https://exchange.xforce.ibmcloud.com/vulnerabilities/153750; https://www.ibm.com/support/docview.wss?uid=ibm10794615
CVE: CVE-2019-6259
Published: 2019-01-14
Description: An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php _data_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/idreamsoft/iCMS/issues/47; https://github.com/idreamsoft/iCMS/issues/47
CVE: CVE-2018-16886
Published: 2019-01-14
Description: etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/106540; https://access.redhat.com/errata/RHSA-2019:0237; https://access.redhat.com/errata/RHSA-2019:1352
CVE: CVE-2019-6278
Published: 2019-01-14
Description: XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/fuhai/jpress/issues/IQUXE; https://gitee.com/fuhai/jpress/issues/IQUXE
CVE: CVE-2018-16888
Published: 2019-01-14
Description: It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may use this flaw to trick systemd into killing other services and/or privileged processes. Versions before v237 are vulnerable.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-250, CWE-269
References: https://access.redhat.com/errata/RHSA-2019:2091; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16888; https://lists.apache.org/thread.html/5960a34a524848cd722fd7ab7e2227eac10107b0f90d9d1e9c3caa74%40%3Cuser.cassandra.apache.org%3E
CVE: CVE-2019-6283
Published: 2019-01-14
Description: In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2019-6284
Published: 2019-01-14
Description: In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2019-6285
Published: 2019-01-14
Description: The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/jbeder/yaml-cpp/issues/660; http://seclists.org/fulldisclosure/2024/Nov/0; https://github.com/jbeder/yaml-cpp/issues/660
CVE: CVE-2019-6286
Published: 2019-01-14
Description: In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-20712
Published: 2019-01-15
Description: A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106563; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629; https://sourceware.org/bugzilla/show_bug.cgi?id=24043
CVE: CVE-2019-6267
Published: 2019-01-15
Description: The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templates/admin/redirect-log.php URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/easy-redirect-manager/#developers; https://wpvulndb.com/vulnerabilities/9203; https://www.logicallysecure.com/blog/ls-team-discovers-xss-in-wordpress-plugin/
CVE: CVE-2019-6290
Published: 2019-01-15
Description: An infinite recursion issue was discovered in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem resulting from infinite recursion in the functions expr, rexp, bexpr and cexpr in certain scenarios involving lots of '{' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392548; https://bugzilla.nasm.us/show_bug.cgi?id=3392548
CVE: CVE-2019-6291
Published: 2019-01-15
Description: An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392549; https://bugzilla.nasm.us/show_bug.cgi?id=3392549
CVE: CVE-2019-6292
Published: 2019-01-15
Description: An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/jbeder/yaml-cpp/issues/657; https://github.com/jbeder/yaml-cpp/issues/657
CVE: CVE-2019-6293
Published: 2019-01-15
Description: An issue was discovered in the function mark_beginning_as_normal in nfa.c in flex 2.6.4. There is a stack exhaustion problem caused by the mark_beginning_as_normal function making recursive calls to itself in certain scenarios involving lots of '*' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/westes/flex/issues/414; https://github.com/westes/flex/issues/414
CVE: CVE-2019-6289
Published: 2019-01-15
Description: uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension and then renaming with a mixed-case variation of the .php extension, as demonstrated by the 1.pHP filename.
CVSS Score: 8.8 (HIGH)
CWE: CWE-178, CWE-706
References: https://laolisafe.com/dedecms/; https://laolisafe.com/dedecms/
CVE: CVE-2019-6294
Published: 2019-01-15
Description: An issue was discovered in EasyCMS 1.5. There is CSRF via the index.php?s=/admin/articlem/insert/navTabId/listarticle/callbackType/closeCurrent URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/TeamEasy/EasyCMS/issues/8; https://github.com/TeamEasy/EasyCMS/issues/8
CVE: CVE-2019-6295
Published: 2019-01-15
Description: Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yanchongchong/swallow/issues/12; https://github.com/yanchongchong/swallow/issues/12
CVE: CVE-2019-6296
Published: 2019-01-15
Description: Cleanto 5.0 has SQL Injection via the assets/lib/export_ajax.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yanchongchong/swallow/issues/13; https://github.com/yanchongchong/swallow/issues/13
CVE: CVE-2019-3811
Published: 2019-01-15
Description: A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root directory) instead of '' (the empty string / no home directory). This could impact services that restrict the user's filesystem access to within their home directory through chroot() etc. All versions before 2.1 are vulnerable.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-200, CWE-552
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00045.html; http://www.securityfocus.com/bid/106644
CVE: CVE-2017-18356
Published: 2019-01-15
Description: In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the target site with a user account that has at least Shop manager privileges. The attacker then constructs a specifically crafted string that will turn into a PHP object injection involving the includes/shortcodes/class-wc-shortcode-products.php WC_Shortcode_Products::get_products() use of cached queries within shortcodes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://blog.ripstech.com/2018/woocommerce-php-object-injection/; https://woocommerce.wordpress.com/2017/11/16/woocommerce-3-2-4-security-fix-release-notes/; https://blog.ripstech.com/2018/woocommerce-php-object-injection/
CVE: CVE-2017-18357
Published: 2019-01-15
Description: Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-610
References: http://packetstormsecurity.com/files/152995/Shopware-createInstanceFromNamedArguments-PHP-Object-Instantiation.html; https://blog.ripstech.com/2017/shopware-php-object-instantiation-to-blind-xxe/; https://demo.ripstech.com/projects/shopware_5.3.3
CVE: CVE-2017-18358
Published: 2019-01-15
Description: LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/; https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f[PII_REDACTED]8b; https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/
CVE: CVE-2018-20713
Published: 2019-01-15
Description: Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2018; https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2018
CVE: CVE-2018-20714
Published: 2019-01-15
Description: The logging system of the Automattic WooCommerce plugin before 3.4.6 for WordPress is vulnerable to a File Deletion vulnerability. This allows deletion of woocommerce.php, which leads to certain privilege checks not being in place, and therefore a shop manager can escalate privileges to admin.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://blog.ripstech.com/2018/wordpress-design-flaw-leads-to-woocommerce-rce/; https://blog.ripstech.com/2018/wordpress-design-flaw-leads-to-woocommerce-rce/
CVE: CVE-2018-20715
Published: 2019-01-15
Description: The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter() method in core/oxconfig.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://demo.ripstech.com/main/%28scans/38/51//sidebar:types/38/51/0%29; https://demo.ripstech.com/main/%28scans/38/51//sidebar:types/38/51/0%29
CVE: CVE-2018-20716
Published: 2019-01-15
Description: CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.ripstech.com/2018/cubecart-admin-authentication-bypass/; https://blog.ripstech.com/2018/cubecart-admin-authentication-bypass/
CVE: CVE-2018-20717
Published: 2019-01-15
Description: In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher privileges. The attacker can then inject arbitrary PHP objects into the process and abuse an object chain in order to gain Remote Code Execution. This occurs because protection against serialized objects looks for a 0: followed by an integer, but does not consider 0:+ followed by an integer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://blog.ripstech.com/2018/prestashop-remote-code-execution/; https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release/; https://blog.ripstech.com/2018/prestashop-remote-code-execution/
CVE: CVE-2018-20718
Published: 2019-01-15
Description: In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed to use the $phpserial$a:0:{} syntax to store a preference. An attacker either needs a "public link" of a file, or access to any unprivileged user account for creation of such a link.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.ripstech.com/2018/pydio-unauthenticated-remote-code-execution/; https://blog.ripstech.com/2018/pydio-unauthenticated-remote-code-execution/
CVE: CVE-2018-20719
Published: 2019-01-15
Description: In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.ripstech.com/2018/scan-verify-patch-security-issues-in-minutes/; https://blog.ripstech.com/2018/scan-verify-patch-security-issues-in-minutes/
CVE: CVE-2017-6925
Published: 2019-01-15
Description: In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entities that do not use or do not have UUIDs, and entities that have different access restrictions on different revisions of the same entity.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/100368; http://www.securitytracker.com/id/1039200; https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple
CVE: CVE-2018-16846
Published: 2019-01-15
Description: It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html; https://access.redhat.com/errata/RHSA-2019:2538; https://access.redhat.com/errata/RHSA-2019:2541
CVE: CVE-2018-15440
Published: 2019-01-15
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient sanitization of user-supplied data that is written to log files and displayed in certain web pages of the web-based management interface of an affected device. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link or view an affected log file. The injected script code may be executed in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106513; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-ise-multi-xss; http://www.securityfocus.com/bid/106513
CVE: CVE-2018-1772
Published: 2019-01-15
Description: IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148689.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106630; https://exchange.xforce.ibmcloud.com/vulnerabilities/148689; https://www.ibm.com/support/docview.wss?uid=ibm10791853