deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-3838
Published: 2019-03-25
Description: It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-648
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00018.html; http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
CVE: CVE-2019-3856
Published: 2019-03-25
Description: An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787, CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; https://access.redhat.com/errata/RHSA-2019:0679
CVE: CVE-2019-3857
Published: 2019-03-25
Description: An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787, CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; https://access.redhat.com/errata/RHSA-2019:0679
CVE: CVE-2019-3860
Published: 2019-03-25
Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html
CVE: CVE-2019-3861
Published: 2019-03-25
Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; https://access.redhat.com/errata/RHSA-2019:2136
CVE: CVE-2019-3874
Published: 2019-03-25
Description: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://access.redhat.com/errata/RHSA-2019:3309; https://access.redhat.com/errata/RHSA-2019:3517; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3874
CVE: CVE-2019-3879
Published: 2019-03-25
Description: It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862, CWE-862
References: http://www.securityfocus.com/bid/107561; https://access.redhat.com/errata/RHBA-2019:0802; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3879
CVE: CVE-2019-4046
Published: 2019-03-25
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers. A remote attacker could exploit this vulnerability to cause the consumption of Memory. IBM X-Force ID: 156242.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/107623; https://exchange.xforce.ibmcloud.com/vulnerabilities/156242; https://www.ibm.com/support/docview.wss?uid=ibm10869570
CVE: CVE-2019-7608
Published: 2019-03-25
Description: Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHBA-2019:2824; https://access.redhat.com/errata/RHSA-2019:2860; https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
CVE: CVE-2019-7609
Published: 2019-03-25
Description: Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.html; https://access.redhat.com/errata/RHBA-2019:2824; https://access.redhat.com/errata/RHSA-2019:2860
CVE: CVE-2019-7610
Published: 2019-03-25
Description: Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-94, CWE-77
References: https://access.redhat.com/errata/RHBA-2019:2824; https://access.redhat.com/errata/RHSA-2019:2860; https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
CVE: CVE-2019-7611
Published: 2019-03-25
Description: A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _aliases, _shrink, or _split endpoints are used . If the elasticsearch.yml file has xpack.security.dls_fls.enabled set to false, certain permission checks are skipped when users perform one of the actions mentioned above, to make existing data available under a new index/alias name. This could result in an attacker gaining additional permissions against a restricted index.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
CVE: CVE-2019-7612
Published: 2019-03-25
Description: A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209, CWE-532
References: https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.elastic.co/community/security
CVE: CVE-2019-7613
Published: 2019-03-25
Description: Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.
CVSS Score: 7.5 (HIGH)
CWE: CWE-778
References: https://discuss.elastic.co/t/elastic-stack-6-6-2-and-5-6-16-security-update/173180; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-stack-6-6-2-and-5-6-16-security-update/173180
CVE: CVE-2014-9187
Published: 2019-03-25
Description: Multiple heap-based buffer overflow vulnerabilities exist in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules, which could lead to possible remote code execution or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE: CVE-2014-9189
Published: 2019-03-25
Description: Multiple stack-based buffer overflow vulnerabilities were found in Honeywell Experion PKS all versions prior to R400.6, all versions prior to R410.6, and all versions prior to R430.2 modules that could lead to possible remote code execution, dynamic memory corruption, or denial of service. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01; https://ics-cert.us-cert.gov/advisories/ICSA-14-352-01
CVE: CVE-2019-10044
Published: 2019-03-25
Description: Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if (for example) Latin and Cyrillic characters exist in the same domain name, and the available font has an identical representation of characters from different alphabets.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/107610; https://github.com/blazeinfosec/advisories/blob/master/telegram-advisory.txt; http://www.securityfocus.com/bid/107610
CVE: CVE-2017-7340
Published: 2019-03-25
Description: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2018-15583
Published: 2019-03-25
Description: Cross-Site Scripting (XSS) vulnerability in point_list.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-6e31fc60ba119c0f830f8a22fe1925dc; https://github.com/gnuboard/gnuboard5/commits/master?after=831219e2c233b2d721a049b7aeb054936d000dc2+69; https://github.com/gnuboard/gnuboard5/commit/b1fc952c7600b825c4b02e2789ddafdea18c8d13#diff-6e31fc60ba119c0f830f8a22fe1925dc
CVE: CVE-2017-7342
Published: 2019-03-25
Description: A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2019-0204
Published: 2019-03-25
Description: A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/107605; https://access.redhat.com/errata/RHSA-2019:3892; https://lists.apache.org/thread.html/b162dd624dc088cd634292f0402282a1d1d0ce853baeae8205bc033c%40%3Cdev.mesos.apache.org%3E
CVE: CVE-2019-6538
Published: 2019-03-25
Description: The Conexus telemetry protocol utilized within Medtronic MyCareLink Monitor versions 24950 and 24952, CareLink Monitor version 2490C, CareLink 2090 Programmer, Amplia CRT-D, Claria CRT-D, Compia CRT-D, Concerto CRT-D, Concerto II CRT-D, Consulta CRT-D, Evera ICD, Maximo II CRT-D and ICD, Mirro ICD, Nayamed ND ICD, Primo ICD, Protecta ICD and CRT-D, Secura ICD, Virtuoso ICD, Virtuoso II ICD, Visia AF ICD, and Viva CRT-D does not implement authentication or authorization. An attacker with adjacent short-range access to an affected product, in situations where the product’s radio is turned on, can inject, replay, modify, and/or intercept data within the telemetry communication. This communication protocol provides the ability to read and write memory values to affected implanted cardiac devices; therefore, an attacker could exploit this communication protocol to change memory in the implanted cardiac device.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-284, CWE-306, CWE-862
References: http://www.securityfocus.com/bid/107544; https://ics-cert.us-cert.gov/advisories/ICSMA-19-080-01; http://www.securityfocus.com/bid/107544
CVE: CVE-2019-7642
Published: 2019-03-25
Description: D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md; https://github.com/xw77cve/CVE-2019-7642/blob/master/README.md
CVE: CVE-2019-10060
Published: 2019-03-26
Description: The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2019-002.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2019-002.md
CVE: CVE-2019-10061
Published: 2019-03-26
Description: utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/peterbraden/node-opencv/commit/81a4b8620188e89f7e4fc985f3c89b58d4bcc86b; https://github.com/peterbraden/node-opencv/commit/aaece6921d[PII_REDACTED]f06c94c99dd4e9653563; https://www.npmjs.com/advisories/789
CVE: CVE-2019-7711
Published: 2019-03-26
Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell command "prompt" sets the (user controlled) shell's prompt value, which is used as a format string input to printf, resulting in an information leak of memory addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://github.com/bl4ckic3/GHS-Bugs; https://www.ghs.com/products/rtos/integrity.html; https://github.com/bl4ckic3/GHS-Bugs
CVE: CVE-2019-7712
Published: 2019-03-26
Description: An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf() without a proper check. An attacker may thus forge a path containing format string modifiers to get a custom format string evaluated. This results in an information leak of memory addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://github.com/bl4ckic3/GHS-Bugs; https://www.ghs.com/products/rtos/integrity.html; https://github.com/bl4ckic3/GHS-Bugs
CVE: CVE-2019-7713
Published: 2019-03-26
Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or current working directory. Modifier expansion triggers this overflow, causing memory corruption or a crash (and also leaks memory address information).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/bl4ckic3/GHS-Bugs; https://www.ghs.com/products/rtos/integrity.html; https://github.com/bl4ckic3/GHS-Bugs
CVE: CVE-2019-7714
Published: 2019-03-26
Description: An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/bl4ckic3/GHS-Bugs; https://www.ghs.com/products/rtos/integrity.html; https://github.com/bl4ckic3/GHS-Bugs
CVE: CVE-2019-7715
Published: 2019-03-26
Description: An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf(). Setting this variable using the sysvar command results in a user-controlled format string during login, resulting in an information leak of memory addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://github.com/bl4ckic3/GHS-Bugs; https://www.ghs.com/products/rtos/integrity.html; https://github.com/bl4ckic3/GHS-Bugs
CVE: CVE-2019-8981
Published: 2019-03-26
Description: tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://axtls.sourceforge.net; https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842; https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf
CVE: CVE-2019-10063
Published: 2019-03-26
Description: Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the controlling terminal so that they would be executed outside the sandbox after the sandboxed app exits. This fix was incomplete: on 64-bit platforms, the seccomp filter could be bypassed by an ioctl request number that has TIOCSTI in its 32 least significant bits and an arbitrary nonzero value in its 32 most significant bits, which the Linux kernel would treat as equivalent to TIOCSTI.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2019:1024; https://access.redhat.com/errata/RHSA-2019:1143; https://github.com/flatpak/flatpak/issues/2782
CVE: CVE-2019-9764
Published: 2019-03-26
Description: HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.
CVSS Score: 7.4 (HIGH)
CWE: CWE-346
References: https://github.com/hashicorp/consul/issues/5519; https://github.com/hashicorp/consul/issues/5519
CVE: CVE-2014-5434
Published: 2019-03-26
Description: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
CVE: CVE-2014-5431
Published: 2019-03-26
Description: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password may allow an attacker with physical access to the device to access management functions to make unauthorized configuration changes to biomedical settings such as turn on and off wireless connections and the phase-complete audible alarm that indicates the end of an infusion phase. Baxter has released a new version of the SIGMA Spectrum Infusion System, version 8, which incorporates hardware and software changes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-259, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
CVE: CVE-2014-5432
Published: 2019-03-26
Description: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access account credentials and shared keys. Baxter asserts that this vulnerability only allows access to features and functionality on the WBM and that the SIGMA Spectrum infusion pump cannot be controlled from the WBM. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-592, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
CVE: CVE-2014-5433
Published: 2019-03-26
Description: An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16, which may allow an attacker to gain access the host network. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312, CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
CVE: CVE-2018-19856
Published: 2019-03-26
Description: GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://about.gitlab.com/2018/12/06/critical-security-release-gitlab-11-dot-5-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/54857; https://about.gitlab.com/2018/12/06/critical-security-release-gitlab-11-dot-5-dot-3-released/
CVE: CVE-2019-7646
Published: 2019-03-26
Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the add_package module parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151630/CentOS-Web-Panel-0.9.8.763-Cross-Site-Scripting.html; https://www.dineshmohanty.com/centos-web-panel-xss; https://www.exploit-db.com/exploits/46349/