deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-16342
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c254 the value for the s_vol_dim_delta key is copied using strcpy to the buffer at 0xa0000514. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16343
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c284 the value for the s_vol_brt_delta key is copied using strcpy to the buffer at 0xa0000510. This buffer is 4 bytes large, sending anything longer will cause a buffer overflow.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16344
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for the s_url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16345
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c318 the value for the s_port key is copied using strcpy to the buffer at 0xa00017f4. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16346
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c368 the value for the s_mac key is copied using strcpy to the buffer at 0xa000170c. This buffer is 25 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16347
Published: 2018-08-02
Description: An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01e7d4 the value for the s_vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0484
CVE: CVE-2017-16349
Published: 2018-08-02
Description: An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://www.talosintelligence.com/vulnerability_reports/SAP; https://www.talosintelligence.com/vulnerability_reports/SAP
CVE: CVE-2018-1154
Published: 2018-08-02
Description: In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.
CVSS Score: 8.8 (HIGH)
References: http://www.securitytracker.com/id/1041431; https://www.tenable.com/security/tns-2018-11; http://www.securitytracker.com/id/1041431
CVE: CVE-2018-1155
Published: 2018-08-02
Description: In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041431; https://www.tenable.com/security/tns-2018-11; http://www.securitytracker.com/id/1041431
CVE: CVE-2018-14851
Published: 2018-08-02
Description: exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; http://www.securityfocus.com/bid/104871
CVE: CVE-2018-3834
Published: 2018-08-02
Description: An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going to be installed and thus allows for flashing any signed firmware into any MCU. Since the device contains different and incompatible MCUs, flashing one firmware to the wrong MCU will result in a permanent brick condition. To trigger this vulnerability, an attacker needs to impersonate the remote server "cache.insteon.com" and serve a signed firmware image.
CVSS Score: 7.4 (HIGH)
CWE: CWE-346
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0513; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0513
CVE: CVE-2018-14858
Published: 2018-08-02
Description: An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private and reserved IP addresses such as 10.0.0.0/8. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-14514.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/idreamsoft/iCMS/issues/33; https://github.com/idreamsoft/iCMS/issues/33
CVE: CVE-2017-6213
Published: 2018-08-02
Description: paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/paypal/invoice-sdk-php/issues/13; https://github.com/paypal/invoice-sdk-php/issues/13
CVE: CVE-2017-6215
Published: 2018-08-02
Description: paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/paypal/permissions-sdk-php/issues/19; https://github.com/paypal/permissions-sdk-php/issues/19
CVE: CVE-2018-14872
Published: 2018-08-03
Description: An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and another file named commonPages.php allows an attacker to reinstall the product, with all data reset.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/havysec/Useful_Code/blob/master/mycve/004.md; https://github.com/havysec/Useful_Code/blob/master/mycve/004.md
CVE: CVE-2018-14873
Published: 2018-08-03
Description: An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named commonPages.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/havysec/Useful_Code/blob/master/mycve/006.md; https://github.com/havysec/Useful_Code/blob/master/mycve/006.md
CVE: CVE-2018-14876
Published: 2018-08-03
Description: An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers can trigger a longjmp that leads to an uninitialized stack frame after a libpng error concerning the IHDR image width.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/FLIF-hub/FLIF/issues/520; https://github.com/FLIF-hub/FLIF/issues/520
CVE: CVE-2018-14877
Published: 2018-08-03
Description: An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywords on the SETTINGS page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/alterebro/WeaselCMS/issues/5; https://github.com/alterebro/WeaselCMS/issues/5
CVE: CVE-2018-14883
Published: 2018-08-03
Description: An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_thumbnail_extract of exif.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-190
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; http://www.securityfocus.com/bid/104871
CVE: CVE-2018-14884
Published: 2018-08-03
Description: An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsing an HTTP response leads to a segmentation fault because http_header_value in ext/standard/http_fopen_wrapper.c can be a NULL value that is mishandled in an atoi call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://php.net/ChangeLog-7.php; https://access.redhat.com/errata/RHSA-2019:2519; https://bugs.php.net/bug.php?id=75535
CVE: CVE-2018-5489
Published: 2018-08-03
Description: NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have been intended to be restricted to administrators or privileged users. 7MTT versions below 2.0 do not enforce user authorization rules on file information and status that it has previously collected. The released version of 7MTT has been updated to maintain and verify authorization rules for file information, status and utilities.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-6590
Published: 2018-08-03
Description: CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securitytracker.com/id/1041416; https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180802-01--security-notice-for-ca-api-developer-portal.html; http://www.securitytracker.com/id/1041416
CVE: CVE-2017-8316
Published: 2018-08-03
Description: IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://git.jetbrains.org/?p=idea/adt-tools-base.git%3Ba=commit%3Bh=a778b2b[PII_REDACTED]4e002cd51cbe8eb8226e96b; https://research.checkpoint.com/parsedroid-targeting-android-development-research-community/; https://youtrack.jetbrains.com/issue/IDEA-175381
CVE: CVE-2018-1524
Published: 2018-08-03
Description: IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1188
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/142116; https://www.ibm.com/support/docview.wss?uid=swg22017452; https://exchange.xforce.ibmcloud.com/vulnerabilities/142116
CVE: CVE-2018-13416
Published: 2018-08-03
Description: In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running UMS, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack to cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/Jul/94; https://www.exploit-db.com/exploits/45133/; http://seclists.org/fulldisclosure/2018/Jul/94
CVE: CVE-2018-14574
Published: 2018-08-03
Description: django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/104970; http://www.securitytracker.com/id/1041403; https://access.redhat.com/errata/RHSA-2019:0265
CVE: CVE-2018-14773
Published: 2018-08-03
Description: An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a (legacy) IIS header that lets users override the path in the request URL via the X-Original-URL or X-Rewrite-URL HTTP request header. These headers are designed for IIS support, but it's not verified that the server is in fact running IIS, which means anybody who can send these requests to an application can trigger this. This affects \Symfony\Component\HttpFoundation\Request::prepareRequestUri() where X-Original-URL and X_REWRITE_URL are both used. The fix drops support for these methods so that they cannot be used as attack vectors such as web cache poisoning.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/104943; http://www.securitytracker.com/id/1041405; https://github.com/symfony/symfony/commit/e447e8b92148ddb3d1956b96638600ec95e08f6b
CVE: CVE-2018-14774
Published: 2018-08-03
Description: An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implicitly set as trusted while this should be forbidden, leading to potential host header injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://github.com/symfony/symfony/commit/725dee4cd8b4ccd52e335ae4b4522242cea9bd4a; https://symfony.com/blog/cve-2018-14774-possible-host-header-injection-when-using-httpcache; https://github.com/symfony/symfony/commit/725dee4cd8b4ccd52e335ae4b4522242cea9bd4a
CVE: CVE-2017-15358
Published: 2018-08-03
Description: Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html; https://www.exploit-db.com/exploits/45107/; https://m4.rkw.io/blog/cve201715358-local-root-privesc-in-charles-proxy-42.html
CVE: CVE-2018-12605
Published: 2018-08-03
Description: An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to it allowing arbitrary protocols as a parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/45168; https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE: CVE-2018-12606
Published: 2018-08-03
Description: An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The wiki contains a persistent XSS issue due to a lack of output encoding affecting a specific markdown feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/46957; https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE: CVE-2018-12607
Published: 2018-08-03
Description: An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.x before 11.0.1. The charts feature contained a persistent XSS issue due to a lack of output encoding.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/45903; https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE: CVE-2018-12989
Published: 2018-08-03
Description: The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-281
References: https://certiport.pearsonvue.com/Support/Console-system-updates; https://computeco.de/2018-07-29_1.html; https://certiport.pearsonvue.com/Support/Console-system-updates
CVE: CVE-2018-13055
Published: 2018-08-03
Description: A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://github.com/mantisbt/mantisbt/commit/4efac90ed89a5c009108b641e2e95683791a165a; https://mantisbt.org/blog/archives/mantisbt/602; https://mantisbt.org/bugs/view.php?id=24580
CVE: CVE-2018-14504
Published: 2018-08-03
Description: An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allows execution of arbitrary code (if CSP settings permit it) when displaying a filter with a crafted name (e.g., 'foobar" onclick="alert(1)').
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://github.com/mantisbt/mantisbt/commit/8b5fa243dbf04344a55fe880135ec149fc1f439f; https://mantisbt.org/blog/archives/mantisbt/602; https://mantisbt.org/bugs/view.php?id=24608
CVE: CVE-2018-14576
Published: 2018-08-03
Description: The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://seclists.org/fulldisclosure/2018/Jul/93; https://etherscan.io/address/0xF4134146AF2d511Dd5EA8cDB1C4AC88C57D60404#code; https://github.com/SunContract/SmartContracts/issues/1
CVE: CVE-2018-14715
Published: 2018-08-03
Description: The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://medium.com/%40jonghyk.song/attack-on-pseudo-random-number-generator-prng-used-in-cryptogs-an-ethereum-cve-2018-14715-f63a51ac2eb9; https://medium.com/%40jonghyk.song/attack-on-pseudo-random-number-generator-prng-used-in-cryptogs-an-ethereum-cve-2018-14715-f63a51ac2eb9
CVE: CVE-2018-14728
Published: 2018-08-03
Description: upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html; https://www.exploit-db.com/exploits/45103/; http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html
CVE: CVE-2018-14904
Published: 2018-08-03
Description: Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as demonstrated by ruiFw_pid.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df; https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df
CVE: CVE-2018-14905
Published: 2018-08-03
Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79; https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE: CVE-2018-14906
Published: 2018-08-03
Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79; https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE: CVE-2018-14907
Published: 2018-08-03
Description: The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79; https://medium.com/stolabs/security-issues-on-3cx-web-service-d9dc7f1bea79
CVE: CVE-2018-14908
Published: 2018-08-03
Description: Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printinformation/printReportSetupView.sws for a "Print emails sent" action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df; https://medium.com/stolabs/security-issues-on-samsung-syncthru-web-service-cc86467d2df
CVE: CVE-2018-7748
Published: 2018-08-03
Description: report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://telekomsecurity.github.io/2018/07/servicenow-privilege-escalation.html; https://telekomsecurity.github.io/assets/advisories/20180104_ServiceNow_GlideInjection.txt; https://telekomsecurity.github.io/2018/07/servicenow-privilege-escalation.html
CVE: CVE-2018-14910
Published: 2018-08-03
Description: SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php). The code is executed by visiting adm1n/admin_ip.php or data/admin/ip.php. This can also be exploited through CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-352
References: https://github.com/MichaelWayneLIU/seacms/blob/master/seacms2.md; https://github.com/MichaelWayneLIU/seacms/blob/master/seacms2.md