deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5654
Published: 2018-01-13
Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md; https://wpvulndb.com/vulnerabilities/9009; https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE: CVE-2018-5655
Published: 2018-01-13
Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE: CVE-2018-5656
Published: 2018-01-13
Description: An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/weblizar-pinterest-feeds.md
CVE: CVE-2018-5657
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title_icon parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5658
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5659
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5660
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5661
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_width parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5662
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php counter_title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5663
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5664
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php social_icon_1 parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5665
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logo_height parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5666
Published: 2018-01-13
Description: An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php bg_color parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md; https://wpvulndb.com/vulnerabilities/9010; https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md
CVE: CVE-2018-5667
Published: 2018-01-13
Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_pattern parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE: CVE-2018-5668
Published: 2018-01-13
Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnu_username_validation_title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE: CVE-2018-5669
Published: 2018-01-13
Description: An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/read-and-understood.md
CVE: CVE-2018-5670
Published: 2018-01-13
Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md; https://wpvulndb.com/vulnerabilities/9012; https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE: CVE-2018-5671
Published: 2018-01-13
Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md; https://wpvulndb.com/vulnerabilities/9012; https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE: CVE-2018-5672
Published: 2018-01-13
Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md; https://wpvulndb.com/vulnerabilities/9012; https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE: CVE-2018-5673
Published: 2018-01-13
Description: An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md; https://wpvulndb.com/vulnerabilities/9012; https://github.com/d4wner/Vulnerabilities-Report/blob/master/booking-calendar.md
CVE: CVE-2018-5681
Published: 2018-01-13
Description: PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://forge.prestashop.com/browse/BOOM-4612; http://forge.prestashop.com/browse/BOOM-4612
CVE: CVE-2018-5682
Published: 2018-01-13
Description: PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://forge.prestashop.com/browse/BOOM-4613; http://forge.prestashop.com/browse/BOOM-4613
CVE: CVE-2018-0486
Published: 2018-01-13
Description: Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: http://www.securitytracker.com/id/1040177; https://lists.debian.org/debian-lts-announce/2018/01/msg00016.html; https://lists.debian.org/debian-security-announce/2018/msg00007.html
CVE: CVE-2018-5360
Published: 2018-01-14
Description: LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2500; https://gitlab.com/libtiff/libtiff/commit/739dcd28a061738b317c1e9f91029d9cbc157159; https://sourceforge.net/p/graphicsmagick/bugs/540/
CVE: CVE-2018-5684
Published: 2018-01-14
Description: In Libav through 12.2, there is an invalid memcpy call in the ff_mov_read_stsd_entries function of libavformat/mov.c. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) and program failure with a crafted avi file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.libav.org/show_bug.cgi?id=1110; https://bugzilla.libav.org/show_bug.cgi?id=1110
CVE: CVE-2018-5685
Published: 2018-01-14
Description: In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/52a91ddb1aa6; https://lists.debian.org/debian-lts-announce/2018/01/msg00018.html; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE: CVE-2018-5686
Published: 2018-01-14
Description: In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://bugs.ghostscript.com/show_bug.cgi?id=698860; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=b70eb93f6936c03d8af52040bbca4d4a7db39079; https://lists.debian.org/debian-lts-announce/2019/06/msg00027.html
CVE: CVE-2018-5687
Published: 2018-01-14
Description: NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/copy_cat/newbeecms_xss; https://gitee.com/copy_cat/newbeecms_xss
CVE: CVE-2018-5689
Published: 2018-01-14
Description: Cross-site scripting (XSS) vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da; https://hg.dotclear.org/dotclear/rev/3b0b868d58b0; http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da
CVE: CVE-2018-5690
Published: 2018-01-14
Description: Cross-site scripting (XSS) vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter (aka the page limit number).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da; https://hg.dotclear.org/dotclear/rev/3b0b868d58b0; http://dev.dotclear.org/2.0/changeset/3b0b868d58b00a1b216e0dc13c461bb3550ed3da
CVE: CVE-2018-5691
Published: 2018-01-14
Description: SonicWall Global Management System (GMS) 8.1 has XSS via the `newName` and `Name` values of the `/sgms/TreeControl` module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://documents.software.dell.com/sonicwall-gms-os/8.2/release-notes/known-issues?ParentProduct=867; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0003; https://www.vulnerability-lab.com/get_content.php?id=1819
CVE: CVE-2018-5692
Published: 2018-01-14
Description: Piwigo v2.8.2 has XSS via the `tab`, `to`, `section`, `mode`, `installstatus`, and `display` parameters of the `admin.php` file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=2005; https://www.vulnerability-lab.com/get_content.php?id=2005
CVE: CVE-2018-5693
Published: 2018-01-14
Description: The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: http://forums.wizard.ca/viewtopic.php?f=17&t=236760; https://www.vulnerability-lab.com/get_content.php?id=2113; http://forums.wizard.ca/viewtopic.php?f=17&t=236760
CVE: CVE-2018-5694
Published: 2018-01-14
Description: The callforward module in User Control Panel (UCP) in Nicolas Gudino (aka Asternic) Flash Operator Panel (FOP) 2.31.03 allows remote authenticated users to execute arbitrary commands via the command parameter.
CVSS Score: 8.8 (HIGH)
References: https://www.vulnerability-lab.com/get_content.php?id=1907; https://www.vulnerability-lab.com/get_content.php?id=1907
CVE: CVE-2018-5695
Published: 2018-01-14
Description: The WpJobBoard plugin 4.4.4 for WordPress allows SQL injection via the order or sort parameter to the wpjb-job or wpjb-alerts module, with a request to wp-admin/admin.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.vulnerability-lab.com/get_content.php?id=1940; https://www.vulnerability-lab.com/get_content.php?id=1940
CVE: CVE-2018-5696
Published: 2018-01-14
Description: The iJoomla com_adagency plugin 6.0.9 for Joomla! allows SQL injection via the `advertiser_status` and `status_select` parameters to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.vulnerability-lab.com/get_content.php?id=1927; https://www.vulnerability-lab.com/get_content.php?id=1927
CVE: CVE-2018-5697
Published: 2018-01-14
Description: Icy Phoenix 2.2.0.105 allows SQL injection via an unapprove request to admin_kb_art.php or the order parameter to admin_jr_admin.php, related to functions_kb.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.vulnerability-lab.com/get_content.php?id=2006; https://www.vulnerability-lab.com/get_content.php?id=2006
CVE: CVE-2018-5698
Published: 2018-01-14
Description: libreadstat.a in WizardMac ReadStat 0.1.1 has a heap-based buffer over-read via an unterminated string.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/WizardMac/ReadStat/issues/108; https://github.com/WizardMac/ReadStat/issues/108
CVE: CVE-2017-15126
Published: 2018-01-14
Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252; http://www.securityfocus.com/bid/102516; https://access.redhat.com/errata/RHSA-2018:0676
CVE: CVE-2017-15127
Published: 2018-01-14
Description: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local denial of service (BUG).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-460
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a[PII_REDACTED]; http://www.securityfocus.com/bid/102517; https://access.redhat.com/errata/RHSA-2018:0676
CVE: CVE-2017-15128
Published: 2018-01-14
Description: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e[PII_REDACTED]244f70fe268586ff94a97a6dd4df; https://access.redhat.com/security/cve/CVE-2017-15128; https://bugzilla.redhat.com/show_bug.cgi?id=1525222
CVE: CVE-2018-5688
Published: 2018-01-14
Description: ILIAS before 5.2.4 has XSS via the cmd parameter to the displayHeader function in setup/classes/class.ilSetupGUI.php in the Setup component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ILIAS-eLearning/ILIAS/commit/c0f326d05231072e33679b84835c03d5043255cb; https://www.exploit-db.com/exploits/43595/; https://www.ilias.de/docu/goto_docu_pg_75029_35.html
CVE: CVE-2018-5700
Published: 2018-01-14
Description: Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php copy_folder_file call (in inc/class.ftpfolder.php) to move a .php file from the FTP folder into a web folder.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/0xWfox/Winmail/blob/master/Winmail_6.2.md; https://github.com/0xWfox/Winmail/blob/master/Winmail_6.2.md
CVE: CVE-2018-5479
Published: 2018-01-15
Description: FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43567/; https://www.exploit-db.com/exploits/43567/
CVE: CVE-2018-5702
Published: 2018-01-15
Description: Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
CVSS Score: 8.8 (HIGH)
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1447; https://github.com/transmission/transmission/pull/468; https://lists.debian.org/debian-lts-announce/2018/01/msg00020.html
CVE: CVE-2018-5328
Published: 2018-01-15
Description: ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-Privilege-Escalations-CVE-2018-5328.html; https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-Privilege-Escalations-CVE-2018-5328.html
CVE: CVE-2018-5329
Published: 2018-01-15
Description: ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages. A successful CSRF attack can force the user to modify state: creating users, changing an email address, and so forth. If the victim is an administrative account, CSRF can compromise the entire web application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-CSRF-CVE-2018-5329.html; https://becomepentester.blogspot.com/2018/01/ZUUSE-BEIMS-ContractorWeb-CSRF-CVE-2018-5329.html
CVE: CVE-2017-18032
Published: 2018-01-16
Description: The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.dxw.com/advisories/xss-download-manager/; https://wordpress.org/plugins/download-manager/#developers; https://security.dxw.com/advisories/xss-download-manager/
CVE: CVE-2018-5703
Published: 2018-01-16
Description: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via vectors involving TLS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://groups.google.com/d/msg/syzkaller-bugs/0PBeVnSzfqQ/5eXAlM46BQAJ; https://groups.google.com/d/msg/syzkaller-bugs/0PBeVnSzfqQ/5eXAlM46BQAJ
CVE: CVE-2018-5704
Published: 2018-01-16
Description: Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-134
References: https://lists.debian.org/debian-lts-announce/2018/01/msg00027.html; https://sourceforge.net/p/openocd/mailman/message/36188041/; https://www.debian.org/security/2018/dsa-4093
CVE: CVE-2018-5709
Published: 2018-01-16
Description: An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://github.com/poojamnit/Kerberos-V5-1.16-Vulnerabilities/tree/master/Integer%20Overflow