deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15918
Published: 2018-09-05
Description: An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/bbalet/jorani/issues/254; https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/; https://www.exploit-db.com/exploits/45340/
CVE: CVE-2018-16144
Published: 2018-09-05
Description: The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to improper sanitization of the rancid_password parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://knowledge.opsview.com/v5.3/docs/whats-new; https://knowledge.opsview.com/v5.4/docs/whats-new; https://seclists.org/fulldisclosure/2018/Sep/3
CVE: CVE-2018-16145
Published: 2018-09-05
Description: The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of the appliance.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://knowledge.opsview.com/v5.3/docs/whats-new; https://knowledge.opsview.com/v5.4/docs/whats-new; https://seclists.org/fulldisclosure/2018/Sep/3
CVE: CVE-2018-16146
Published: 2018-09-05
Description: The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that are triggered under certain configurable events. The value parameter is not properly sanitized, leading to arbitrary command injection with the privileges of the nagios user account.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://knowledge.opsview.com/v5.4/docs/whats-new; https://seclists.org/fulldisclosure/2018/Sep/3; https://www.coresecurity.com/advisories/opsview-monitor-multiple-vulnerabilities
CVE: CVE-2018-16147
Published: 2018-09-05
Description: The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://knowledge.opsview.com/v5.3/docs/whats-new; https://knowledge.opsview.com/v5.4/docs/whats-new; https://seclists.org/fulldisclosure/2018/Sep/3
CVE: CVE-2018-16148
Published: 2018-09-05
Description: The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://knowledge.opsview.com/v5.3/docs/whats-new; https://knowledge.opsview.com/v5.4/docs/whats-new; https://seclists.org/fulldisclosure/2018/Sep/3
CVE: CVE-2018-16252
Published: 2018-09-05
Description: FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
CVSS Score: 3.3 (LOW)
CWE: CWE-611
References: http://hyp3rlinx.altervista.org/advisories/FSPRO-LABS-EVENT-LOG-EXPLORER-XML-INJECTION-INFO-DISCLOSURE.txt; http://packetstormsecurity.com/files/149195/FsPro-Labs-Event-Log-Explorer-4.6.1.2115-XML-Injection.html; https://www.exploit-db.com/exploits/45319/
CVE: CVE-2018-16307
Published: 2018-09-05
Description: An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name (containing a random string) is used in the HTTP Host header, the application performs an HTTP request to the specified domain. The response from that request is then included in the application's own response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/149196/MIWiFi-Xiaomi_55DD-2.8.50-Out-Of-Band-Resource-Load.html; http://packetstormsecurity.com/files/149196/MIWiFi-Xiaomi_55DD-2.8.50-Out-Of-Band-Resource-Load.html
CVE: CVE-2018-16361
Published: 2018-09-05
Description: An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/btiteam/xbtit/pull/58; https://rastating.github.io/xbtit-multiple-vulnerabilities/; https://github.com/btiteam/xbtit/pull/58
CVE: CVE-2018-16381
Published: 2018-09-05
Description: e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dhananjay-bajaj/E107-v2.1.8-XSS-POC; https://github.com/dhananjay-bajaj/E107-v2.1.8-XSS-POC
CVE: CVE-2018-16548
Published: 2018-09-05
Description: An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00065.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00066.html; https://access.redhat.com/errata/RHSA-2019:2196
CVE: CVE-2018-16549
Published: 2018-09-05
Description: HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://packetstormsecurity.com/files/149204; https://packetstormsecurity.com/files/149204
CVE: CVE-2018-16550
Published: 2018-09-05
Description: TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
CVSS Score: 9.8 (CRITICAL)
References: https://twitter.com/vah_13/status/[PII_REDACTED]50291457; https://twitter.com/vah_13/status/[PII_REDACTED]50291457
CVE: CVE-2018-16551
Published: 2018-09-05
Description: LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/LavaLite/cms/issues/259; https://github.com/LavaLite/cms/issues/259
CVE: CVE-2018-16552
Published: 2018-09-05
Description: MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/MicroPyramid/Django-CRM/issues/68; https://github.com/MicroPyramid/Django-CRM/issues/68
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: WordPress version <4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has not been confirmed at this time. This issue appears to have been partially, but not completely fixed in WordPress 4.9
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105305; https://www.theregister.co.uk/2018/08/20/php_unserialisation_wordpress_vuln/; https://youtu.be/GePBmsNJw6Y?t=1763
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED].  Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED].  Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-16459
Published: 2018-09-06
Description: An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/356809; https://hackerone.com/reports/356809
CVE: CVE-2018-11263
Published: 2018-09-06
Description: In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: https://source.android.com/security/bulletin/pixel/2018-08-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=476ad571ec5b42c42bb1ce9468f18c7e996646ed; https://www.codeaurora.org/security-bulletin/2018/08/06/august-2018-code-aurora-security-bulletin
CVE: CVE-2018-14624
Published: 2018-09-06
Description: A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(). An attacker could send a flood of modifications to a very large DN, which would cause slapd to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html; https://access.redhat.com/errata/RHSA-2018:2757; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14624
CVE: CVE-2018-14632
Published: 2018-09-06
Description: An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/errata/RHBA-2018:2652; https://access.redhat.com/errata/RHSA-2018:2654; https://access.redhat.com/errata/RHSA-2018:2709
CVE: CVE-2018-16585
Published: 2018-09-06
Description: An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even though it is not intended for use during document processing (e.g., after the startup phase). This leads to memory corruption, allowing remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. Note: A reputable source believes that the CVE is potentially a duplicate of CVE-2018-15910 as explained in Red Hat bugzilla (https://bugzilla.redhat.com/show_bug.cgi?id=1626193)
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=1497d65039885a52b598b137dd8622bd4672f9be; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=971472c83a345a16dac9f90f91258bb22dd77f22; https://bugzilla.redhat.com/show_bug.cgi?id=1626193
CVE: CVE-2018-1695
Published: 2018-09-06
Description: IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 145769.
CVSS Score: 7.3 (HIGH)
CWE: CWE-290
References: http://www.securitytracker.com/id/1041643; https://exchange.xforce.ibmcloud.com/vulnerabilities/145769; https://www-01.ibm.com/support/docview.wss?uid=ibm10716523
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remote code execution due to an incomplete fix for CVE-2[PII_REDACTED]. This attack appears to be exploitable via thumbnail upload by an authenticated user and may require additional plugins in order to be exploited however this has not been confirmed at this time.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105306; https://www.theregister.co.uk/2018/08/20/php_unserialisation_wordpress_vuln/; https://youtu.be/GePBmsNJw6Y?t=1763
CVE: CVE-2018-16604
Published: 2018-09-06
Description: An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username because the username is surrounded by double quotes (e.g., "${phpinfo()}").
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/dignajar/nibbleblog/issues/131; https://github.com/dignajar/nibbleblog/issues/131
CVE: CVE-2018-16606
Published: 2018-09-06
Description: In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of Paper ID (the pid parameter).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://blog.ziaurrashid.com/idor-on-proconf-peer-reviewand-conference-management-system/; https://packetstormsecurity.com/files/149259/IDOR-On-ProConf-Peer-Review-And-Conference-Management-6.0-File-Disclosure.html; https://blog.ziaurrashid.com/idor-on-proconf-peer-reviewand-conference-management-system/
CVE: CVE-2011-0705
Published: 2018-09-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an attacker gaining code execution via webshell. This attack appear to be exploitable via an authenticated user uploading a zip archive which can contains malicious php files that can be called under certain circumstances. This vulnerability appears to have been fixed in after commit 91d143230eb357260a19c8424b3005deb49a47f7 / version 3.14.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/LimeSurvey/LimeSurvey/commit/20fc85edccc80e7e7f[PII_REDACTED]2380c44446a; https://github.com/LimeSurvey/LimeSurvey/commit/91d143230eb357260a19c8424b3005deb49a47f7; https://github.com/LimeSurvey/LimeSurvey/commit/20fc85edccc80e7e7f[PII_REDACTED]2380c44446a
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality that can result in remote code execution as authenticated user. This attack appear to be exploitable via An authenticated user can upload a specially crafted zip file to get remote code execution. This vulnerability appears to have been fixed in after commit 72a02ebaaf95a80e26127ee7ee2b123cccce05a7 / version 3.14.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/LimeSurvey/LimeSurvey/commit/72a02ebaaf95a80e26127ee7ee2b123cccce05a7; https://github.com/LimeSurvey/LimeSurvey/commit/72a02ebaaf95a80e26127ee7ee2b123cccce05a7
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: TOCK version prior to commit 42f7f36e[PII_REDACTED]8d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482b85d contains a Insecure Permissions vulnerability in Function get_package_name in the file kernel/src/tbfheader.rs, variable "pub package_name: &'static str," in the file process.rs that can result in A tock capsule (untrusted driver) could access arbitrary memory by using only safe code. This vulnerability appears to have been fixed in commit 42f7f36e[PII_REDACTED]8d62253e1d8fb26605feed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/tock/tock/issues/1147; https://github.com/tock/tock/issues/1147
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascript code. This vulnerability appears to have been fixed in 2.4.69.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://jsish.org/fossil/jsi/tktview/2adeb066894695b38309d92771aea11c8e0a56a8; https://jsish.org/fossil/jsi/tktview/2adeb066894695b38309d92771aea11c8e0a56a8
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://jsish.org/fossil/jsi/tktview/c253f6d80c9018d841e857b69e7ad6436ed95cb9; https://jsish.org/fossil/jsi/tktview/c253f6d80c9018d841e857b69e7ad6436ed95cb9
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate, including self signed and expired, are accepted by the client. This attack appear to be exploitable via The victim connects to a server that's MITM/Proxied by an attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/daneren2005/Subsonic/issues/60; https://github.com/daneren2005/Subsonic/issues/60
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in Victim attacked through their browser - deliver malware, steal HTTP cookies, bypass CORS trust. This attack appear to be exploitable via Victims are typically lured to a web site under the attacker's control; the XSS vulnerability on the target domain is silently exploited without the victim's knowledge. This vulnerability appears to have been fixed in 1.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://dojotoolkit.org/blog/dojo-1-14-released; https://github.com/dojo/dojo/pull/307; https://dojotoolkit.org/blog/dojo-1-14-released
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in method: notifySpaceModification; that can result in Improper validation of parameters results in command execution. This attack appear to be exploitable via Network connectivity, required minimal auth privileges (everyone can register an account). This vulnerability appears to have been fixed in After commit 15443122ed2b1cbfd7bdefc048bf106f075becdb.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/0-complexity/openvcloud/issues/1207; https://github.com/jumpscale7/jumpscale_portal/blob/c997bb1824862b08246d60e34e950df06ebac68c/apps/portalbase/system/system__contentmanager/methodclass/system_contentmanager.py#L293-L315; https://github.com/jumpscale7/jumpscale_portal/pull/108
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm.c:482. vulnerability in function assemble_file(inname, depend_ptr) at asm/nasm.c:482. that can result in aborting/crash nasm program. This attack appear to be exploitable via a specially crafted asm file..
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392507
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to have been fixed in 2.4.71.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://jsish.org/fossil/jsi/tktview?name=9602dbd997; https://jsish.org/fossil/jsi/tktview?name=9602dbd997
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear to be exploitable via a malicious application call the vulnerable kernel APIs (system sys_ring_buf_get() and sys_ring_buf_put).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/zephyrproject-rtos/zephyr/issues/7638; https://github.com/zephyrproject-rtos/zephyr/issues/7638
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Open redirection and reflected XSS via data URIs. This attack appear to be exploitable via Victim's browser must follow a URL supplied by the attacker. This vulnerability appears to have been fixed in none available.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/sympa-community/sympa/issues/268; https://lists.debian.org/debian-lts-announce/2018/09/msg00023.html; https://lists.debian.org/debian-lts-announce/2020/11/msg00015.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://bugs.kde.org/show_bug.cgi?id=398096; https://cgit.kde.org/okular.git/commit/?id=8ff7abc14d41906ad978b6bc67e69693863b9d47; https://lists.debian.org/debian-lts-announce/2018/09/msg00027.html
CVE: CVE-2017-14026
Published: 2018-09-06
Description: In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticate users which may allow an attacker to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/105303; https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01; http://www.securityfocus.com/bid/105303
CVE: CVE-2017-16714
Published: 2018-09-06
Description: In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-256, CWE-522
References: http://www.securityfocus.com/bid/105303; https://ics-cert.us-cert.gov/advisories/ICSA-18-249-01; http://www.securityfocus.com/bid/105303
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments as paid for certain users on behalf of Administrators. This attack appear to be exploitable via The victim must be socially engineered into clicking a link, usually via email. This vulnerability appears to have been fixed in 17.11.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19117; https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19117