deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16968
Published: 2018-09-26
Description: Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
CVSS Score: 3.1 (LOW)
CWE: CWE-22
References: http://www.securityfocus.com/bid/105377; https://support.citrix.com/article/CTX238022; http://www.securityfocus.com/bid/105377
CVE: CVE-2018-16969
Published: 2018-09-26
Description: Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105377; https://support.citrix.com/article/CTX238022; http://www.securityfocus.com/bid/105377
CVE: CVE-2018-17081
Published: 2018-09-26
Description: e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/himanshurahi/e107_2.1.9_CSRF_POC; https://github.com/himanshurahi/e107_2.1.9_CSRF_POC
CVE: CVE-2018-17215
Published: 2018-09-26
Description: An information-disclosure issue was discovered in Postman through 6.3.0. It validates a server's X.509 certificate and presents an error if the certificate is not valid. Unfortunately, the associated HTTPS request data is sent anyway. Only the response is not displayed. Thus, all contained information of the HTTPS request is disclosed to a man-in-the-middle attacker (for example, user credentials).
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://seclists.org/bugtraq/2018/Sep/56; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-016.txt; https://seclists.org/bugtraq/2018/Sep/56
CVE: CVE-2018-17365
Published: 2018-09-26
Description: SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://blog.51cto.com/13770310/2177226; https://github.com/sfh320/seacms/issues/1; http://blog.51cto.com/13770310/2177226
CVE: CVE-2018-17410
Published: 2018-09-26
Description: Horus CMS allows SQL Injection, as demonstrated by a request to the /busca or /home URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://lab.insightsecurity.com.br/horus-cms/; https://exchange.xforce.ibmcloud.com/vulnerabilities/150531; https://lab.insightsecurity.com.br/horus-cms/
CVE: CVE-2018-17566
Published: 2018-09-26
Description: In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/top-think/think/issues/858; https://github.com/top-think/think/issues/858
CVE: CVE-2018-14327
Published: 2018-09-26
Description: The installer for the Alcatel OSPREY3_MINI Modem component on EE EE40VB 4G mobile broadband modems with firmware before EE40_00_02.00_45 sets weak permissions (Everyone:Full Control) for the "Web Connecton\EE40" and "Web Connecton\EE40\BackgroundService" directories, which allows local users to gain privileges, as demonstrated by inserting a Trojan horse ServiceManager.exe file into the "Web Connecton\EE40\BackgroundService" directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://blog.zerodaylab.com/2018/09/zerodaylab-discovers-ee-unquoted.html; http://packetstormsecurity.com/files/149492/EE-4GEE-Mini-Local-Privilege-Escalation.html; http://www.securityfocus.com/bid/105385
CVE: CVE-2018-15531
Published: 2018-09-26
Description: JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2018/09/25/3; https://github.com/javamelody/javamelody/commit/ef111822562d0b9365bd3e671a75b65bd0613353; https://github.com/javamelody/javamelody/wiki/ReleaseNotes
CVE: CVE-2018-16055
Published: 2018-09-26
Description: An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to its passing user input from the $_POST parameters "ifdescr" and "ipv" to a shell without escaping the contents of the variables. This allows an authenticated WebGUI user with privileges for the affected page to execute commands in the context of the root user when submitting a request to relinquish a DHCP lease for an interface which is configured to obtain its address via DHCP.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://doddsecurity.com/190/command-injection-on-pfsense-firewalls/; https://www.pfsense.org/security/advisories/pfSense-SA-18_08.webgui.asc; https://doddsecurity.com/190/command-injection-on-pfsense-firewalls/
CVE: CVE-2018-16588
Published: 2018-09-26
Description: Privilege escalation can occur in the SUSE useradd.c code in useradd, as distributed in the SUSE shadow package through 4.2.1-27.9.1 for SUSE Linux Enterprise 12 (SLE-12) and through 4.5-5.39 for SUSE Linux Enterprise 15 (SLE-15). Non-existing intermediate directories are created with mode 0777 during user creation. Given that they are world-writable, local attackers might use this for privilege escalation and other unspecified attacks.  NOTE: this would affect non-SUSE users who took useradd.c code from a 2014-04-02 upstream pull request; however, no non-SUSE distribution is known to be affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2018-09/msg00073.html; http://lists.opensuse.org/opensuse-security-announce/2018-09/msg00073.html
CVE: CVE-2018-16711
Published: 2018-09-26
Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-16712
Published: 2018-09-26
Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-16713
Published: 2018-09-26
Description: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402084) with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for input, and provide output from the instruction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-17309
Published: 2018-09-26
Description: On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149493/RICOH-MP-C406Z-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149493/RICOH-MP-C406Z-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17310
Published: 2018-09-26
Description: On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149494/RICOH-MP-C1803-JPN-Printer-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45526/; http://packetstormsecurity.com/files/149494/RICOH-MP-C1803-JPN-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17311
Published: 2018-09-26
Description: On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149495/RICOH-MP-C6503-Plus-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149495/RICOH-MP-C6503-Plus-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17312
Published: 2018-09-26
Description: On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149496/RICOH-Aficio-MP-301-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149496/RICOH-Aficio-MP-301-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17313
Published: 2018-09-26
Description: On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149497/RICOH-MP-C307-Printer-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45526/; http://packetstormsecurity.com/files/149497/RICOH-MP-C307-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17314
Published: 2018-09-26
Description: On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149501/RICOH-MP-305-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149501/RICOH-MP-305-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17315
Published: 2018-09-26
Description: On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149502/RICOH-MP-C2003-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149502/RICOH-MP-C2003-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17316
Published: 2018-09-26
Description: On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149505/RICOH-MP-C6003-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149505/RICOH-MP-C6003-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17411
Published: 2018-09-26
Description: An XML External Entity (XXE) vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/MrR3boot/CVE-Hunting/blob/master/iWay%20DQS%20XXE.pdf; https://github.com/MrR3boot/CVE-Hunting/blob/master/iWay%20DQS%20XXE.pdf
CVE: CVE-2018-17568
Published: 2018-09-26
Description: utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-0c23effa84a7b85053bac7981a8580c8; https://github.com/viabtc/viabtc_exchange_server/pull/131; https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-0c23effa84a7b85053bac7981a8580c8
CVE: CVE-2018-17569
Published: 2018-09-26
Description: network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-9fabc53ea796ec492aef432594298baa; https://github.com/viabtc/viabtc_exchange_server/pull/131; https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-9fabc53ea796ec492aef432594298baa
CVE: CVE-2018-17570
Published: 2018-09-26
Description: utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-515c81af848352583bff286d6224875f; https://github.com/viabtc/viabtc_exchange_server/pull/131; https://github.com/viabtc/viabtc_exchange_server/commit/4a7c27bfe98f409623d4d857894d017ff0672cc9#diff-515c81af848352583bff286d6224875f
CVE: CVE-2018-7101
Published: 2018-09-27
Description: A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30.
CVSS Score: 7.5 (HIGH)
References: http://www.securitytracker.com/id/1041488; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03875en_us; http://www.securitytracker.com/id/1041488
CVE: CVE-2018-7102
Published: 2018-09-27
Description: A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03887en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03887en_us
CVE: CVE-2018-7103
Published: 2018-09-27
Description: A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us
CVE: CVE-2018-7104
Published: 2018-09-27
Description: A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than version IMC WSM 7.3 E0506P02.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03893en_us
CVE: CVE-2018-7105
Published: 2018-09-27
Description: A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2.61, HPE Integrated Lights-Out 3 (iLO 3) prior to v1.90 could be remotely exploited to execute arbitrary code leading to disclosure of information.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/105425; http://www.securitytracker.com/id/1041649; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03866en_us
CVE: CVE-2018-7106
Published: 2018-09-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-7107
Published: 2018-09-27
Description: A potential security vulnerability has been identified in HPE Device Entitlement Gateway (DEG) v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03889en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03889en_us
CVE: CVE-2018-7108
Published: 2018-09-27
Description: HPE StorageWorks XP7 Automation Director (AutoDir) version 8.5.2-02 to earlier than 8.6.1-00 has a local and remote authentication bypass vulnerability that exposed the user authentication information of the storage system. This problem sometimes occurred under specific conditions when running a service template.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://www.securitytracker.com/id/1041696; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03879en_us; http://www.securitytracker.com/id/1041696
CVE: CVE-2018-7109
Published: 2018-09-27
Description: HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105422; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03896en_us; http://www.securityfocus.com/bid/105422
CVE: CVE-2018-1660
Published: 2018-09-27
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 144886.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105446; http://www.securitytracker.com/id/1041755; https://exchange.xforce.ibmcloud.com/vulnerabilities/144886
CVE: CVE-2018-1716
Published: 2018-09-27
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147164.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041754; https://exchange.xforce.ibmcloud.com/vulnerabilities/147164; https://www.ibm.com/support/docview.wss?uid=ibm10729323
CVE: CVE-2018-1736
Published: 2018-09-27
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 147906.
CVSS Score: 7.4 (HIGH)
CWE: CWE-601
References: http://www.securityfocus.com/bid/105490; http://www.securitytracker.com/id/1041753; https://exchange.xforce.ibmcloud.com/vulnerabilities/147906
CVE: CVE-2018-1820
Published: 2018-09-27
Description: IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150096.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041751; https://exchange.xforce.ibmcloud.com/vulnerabilities/150096; https://www.ibm.com/support/docview.wss?uid=ibm10732287
CVE: CVE-2018-14650
Published: 2018-09-27
Description: It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-732, CWE-276
References: https://access.redhat.com/errata/RHSA-2018:3663; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14650; https://github.com/sosreport/sos-collector/commit/72058f9253e7ed8c7243e2ff76a16d97b03d65ed
CVE: CVE-2018-14824
Published: 2018-09-27
Description: Delta Electronics Delta Industrial Automation PMSoft v2.11 or prior has an out-of-bounds read vulnerability that can be executed when processing project files, which may allow an attacker to read confidential information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.deltaww.com/services/DownloadCenter2.aspx?secID=8&pid=2&tid=0&CID=06&itemID=060301&typeID=1&downloadID=%2C&title=--%20Select%20Product%20Series%20--&dataType=8%3B&check=1&hl=en-US; http://www.securityfocus.com/bid/105409; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-04
CVE: CVE-2018-15611
Published: 2018-09-27
Description: A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://downloads.avaya.com/css/P8/documents/101052550; https://downloads.avaya.com/css/P8/documents/101052550
CVE: CVE-2018-14037
Published: 2018-09-28
Description: Cross-site scripting (XSS) vulnerability in Progress Kendo UI Editor v2018.1.221 allows remote attackers to inject arbitrary JavaScript into the DOM of the WYSIWYG editor because of the editorNS.Serializer toEditableHtml function in kendo.all.min.js. If the victim accesses the editor, the payload gets executed. Furthermore, if the payload is reflected at any other resource that does rely on the sanitisation of the editor itself, the JavaScript payload will be executed in the context of the application. This allows attackers (in the worst case) to take over user sessions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Sep/49; http://seclists.org/fulldisclosure/2018/Sep/50; https://www.sec-consult.com/en/blog/advisories/stored-cross-site-scripting-in-kendo-ui-editor-cve-2018-14037/
CVE: CVE-2018-14956
Published: 2018-09-28
Description: CMS ISWEB 3.5.3 is vulnerable to multiple SQL injection flaws. An attacker can inject malicious queries into the application and obtain sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/149571/CMS-ISWEB-3.5.3-SQL-Injection.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://imgur.com/a/buXJJKC
CVE: CVE-2018-14957
Published: 2018-09-28
Description: CMS ISWEB 3.5.3 is vulnerable to directory traversal and local file download, as demonstrated by moduli/downloadFile.php?file=oggetto_documenti/../.././inc/config.php (one can take the control of the application because credentials are present in that config.php file).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-16277
Published: 2018-09-28
Description: The Image Import function in XWiki through 10.7 has XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mksec.tk/index.php/2018/09/27/cve-2018-16277-xss-in-xwiki/; https://mksec.tk/index.php/2018/09/27/cve-2018-16277-xss-in-xwiki/
CVE: CVE-2018-16586
Published: 2018-09-28
Description: In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources.
CVSS Score: 4.3 (MEDIUM)
References: https://community.otrs.com/security-advisory-2018-05-security-update-for-otrs-framework/; https://github.com/OTRS/otrs/commit/09e80c7752b0d9080688e4597c7495dd109e0963; https://github.com/OTRS/otrs/commit/a808859a75c59ae3b7568f5cc4708c53462aa4c7