deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12463
Published: 2018-07-12
Description: An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.securitytracker.com/id/1041286; https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563; https://www.exploit-db.com/exploits/45027/
CVE: CVE-2018-14009
Published: 2018-07-12
Description: Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/161944/Codiad-2.8.4-Remote-Code-Execution.html; https://github.com/Codiad/Codiad/issues/1078; https://github.com/WangYihang/Codiad-Remote-Code-Execute-Exploit
CVE: CVE-2018-12979
Published: 2018-07-12
Description: An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user to overwrite critical files by abusing the unrestricted file upload in the WBM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2018/Jul/38; https://cert.vde.com/en-us/advisories/vde-2018-010; https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02
CVE: CVE-2018-12980
Published: 2018-07-12
Description: An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to upload arbitrary files to the file system with the permissions of the web server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2018/Jul/38; https://cert.vde.com/en-us/advisories/vde-2018-010; https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02
CVE: CVE-2018-12981
Published: 2018-07-12
Description: An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and unauthenticated users by sending special crafted requests to the web server allowing injecting code within the WBM. The code will be rendered and/or executed in the browser of the user's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Jul/38; https://cert.vde.com/en-us/advisories/vde-2018-010; https://ics-cert.us-cert.gov/advisories/ICSA-18-198-02
CVE: CVE-2018-13441
Published: 2018-07-12
Description: qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html; https://gist.github.com/fakhrizulkifli/8df4a174158df69ebd765f824bd736b8
CVE: CVE-2018-13457
Published: 2018-07-12
Description: qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html; https://gist.github.com/fakhrizulkifli/87cf1c1ad403b4d40a86d90c9c9bf7ab
CVE: CVE-2018-13458
Published: 2018-07-12
Description: qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html; https://gist.github.com/fakhrizulkifli/40f3daf52950cca6de28ebec2498ff6e
CVE: CVE-2018-13796
Published: 2018-07-12
Description: An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugs.launchpad.net/mailman/+bug/1780874; https://lists.debian.org/debian-lts-announce/2018/07/msg00034.html; https://security.gentoo.org/glsa/201904-10
CVE: CVE-2018-5529
Published: 2018-07-12
Description: The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/104730; https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txt; https://support.f5.com/csp/article/K52171282
CVE: CVE-2018-14012
Published: 2018-07-12
Description: WolfSight CMS 3.2 allows SQL injection via the PATH_INFO to the default URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/44997/; https://www.exploit-db.com/exploits/44997/
CVE: CVE-2018-14014
Published: 2018-07-12
Description: In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/caokang/waimai/issues/2; https://github.com/caokang/waimai/issues/2
CVE: CVE-2018-14015
Published: 2018-07-12
Description: The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/radare/radare2/issues/10465; https://github.com/radareorg/radare2/commit/d37d2b858ac47f2f108034be0bcecadaddfbc8b3; https://github.com/radare/radare2/issues/10465
CVE: CVE-2018-14016
Published: 2018-07-12
Description: The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/10464; https://github.com/radareorg/radare2/commit/eb7deb281df54771fb8ecf5890dc325a7d22d3e2; https://github.com/radare/radare2/issues/10464
CVE: CVE-2018-14017
Published: 2018-07-12
Description: The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/10498; https://github.com/radareorg/radare2/commit/e9ce0d64faf19fa4e9c260250fbdf25e3c11e152; https://github.com/radare/radare2/issues/10498
CVE: CVE-2018-14029
Published: 2018-07-13
Description: CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's email field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Creatiwity/wityCMS/issues/153; https://www.exploit-db.com/exploits/45127/; https://github.com/Creatiwity/wityCMS/issues/153
CVE: CVE-2018-14031
Published: 2018-07-13
Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md; https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
CVE: CVE-2018-14032
Published: 2018-07-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-14033
Published: 2018-07-13
Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDmemcpy.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md; https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
CVE: CVE-2018-14034
Published: 2018-07-13
Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md; https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
CVE: CVE-2018-14035
Published: 2018-07-13
Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md; https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md
CVE: CVE-2018-14036
Published: 2018-07-13
Description: Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2018/07/02/2; http://www.securityfocus.com/bid/104757; https://bugs.freedesktop.org/show_bug.cgi?id=107085
CVE: CVE-2018-6969
Published: 2018-07-13
Description: VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information disclosure or may allow attackers to escalate their privileges on the guest VMs. In order to be able to exploit this issue, file sharing must be enabled.
CVSS Score: 7.0 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104737; http://www.securitytracker.com/id/1041291; https://www.vmware.com/security/advisories/VMSA-2018-0017.html
CVE: CVE-2018-14040
Published: 2018-07-13
Description: In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html; http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html; http://seclists.org/fulldisclosure/2019/May/10
CVE: CVE-2018-14041
Published: 2018-07-13
Description: In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html; http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html; http://seclists.org/fulldisclosure/2019/May/10
CVE: CVE-2018-14042
Published: 2018-07-13
Description: In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html; http://seclists.org/fulldisclosure/2019/May/10; http://seclists.org/fulldisclosure/2019/May/11
CVE: CVE-2018-14043
Published: 2018-07-13
Description: mstdlib (aka the M Standard Library for C) 1.2.0 has incorrect file access control in situations where M_fs_perms_can_access attempts to delete an existing file (that lacks public read/write access) during a copy operation, related to fs/m_fs.c and fs/m_fs_path.c. An attacker could create the file and then would have access to the data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/Monetra/mstdlib/commit/db124b8f607dd0a40a9aef2d4d468fad433522a7; https://github.com/Monetra/mstdlib/issues/2; https://github.com/Monetra/mstdlib/commit/db124b8f607dd0a40a9aef2d4d468fad433522a7
CVE: CVE-2018-14044
Published: 2018-07-13
Description: The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md; https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md
CVE: CVE-2018-14045
Published: 2018-07-13
Description: The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md; https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/readme.md
CVE: CVE-2018-14046
Published: 2018-07-13
Description: Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/378; https://access.redhat.com/errata/RHSA-2019:2101
CVE: CVE-2017-1367
Published: 2018-07-13
Description: IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126860.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22016869; https://exchange.xforce.ibmcloud.com/vulnerabilities/126860; http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE: CVE-2017-1395
Published: 2018-07-13
Description: IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 127341.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22016869; https://exchange.xforce.ibmcloud.com/vulnerabilities/127341; http://www.ibm.com/support/docview.wss?uid=swg22016869
CVE: CVE-2018-14047
Published: 2018-07-13
Description: An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed for reading untrusted files with it. Do NOT use this in sensitive environments, especially DO NOT read PNGs from unknown sources with it!" statement in the master/README.md file
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/fouzhe/security/tree/master/pngwriter; https://github.com/pngwriter/pngwriter/issues/129; https://github.com/fouzhe/security/tree/master/pngwriter
CVE: CVE-2018-14048
Published: 2018-07-13
Description: An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.
CVSS Score: 6.5 (MEDIUM)
References: http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; https://github.com/fouzhe/security/tree/master/libpng
CVE: CVE-2018-14049
Published: 2018-07-13
Description: An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/fouzhe/security/tree/master/libwav; https://github.com/marc-q/libwav/issues/22; https://github.com/fouzhe/security/tree/master/libwav
CVE: CVE-2018-14050
Published: 2018-07-13
Description: An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/fouzhe/security/tree/master/libwav; https://github.com/marc-q/libwav/issues/20; https://github.com/fouzhe/security/tree/master/libwav
CVE: CVE-2018-14051
Published: 2018-07-13
Description: The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/fouzhe/security/tree/master/libwav; https://github.com/marc-q/libwav/issues/21; https://github.com/fouzhe/security/tree/master/libwav
CVE: CVE-2018-14052
Published: 2018-07-13
Description: An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/fouzhe/security/tree/master/libwav; https://github.com/marc-q/libwav/issues/19; https://github.com/fouzhe/security/tree/master/libwav
CVE: CVE-2018-9067
Published: 2018-07-13
Description: The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI.
CVSS Score: 7.5 (HIGH)
References: https://support.lenovo.com/us/en/solutions/LEN-21561; https://support.lenovo.com/us/en/solutions/LEN-21561
CVE: CVE-2018-9070
Published: 2018-07-13
Description: For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific button sequence, enter factory test mode and enable a web service intended for testing the device. As with most test modes, this provides extra privileges, including changing settings and running code. Lenovo Smart Assistant is an Amazon Alexa-enabled smart speaker developed by Lenovo.
CVSS Score: 6.4 (MEDIUM)
References: https://support.lenovo.com/us/en/solutions/LEN-22172; https://support.lenovo.com/us/en/solutions/LEN-22172
CVE: CVE-2018-10018
Published: 2018-07-13
Description: The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/55; https://www.exploit-db.com/exploits/45017/; http://seclists.org/fulldisclosure/2018/Jul/55
CVE: CVE-2018-10098
Published: 2018-07-13
Description: In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \\.\econceal to cause a denial of service (BSOD).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Jul/53; http://seclists.org/fulldisclosure/2018/Jul/53
CVE: CVE-2018-1245
Published: 2018-07-13
Description: RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a malicious user could potentially run arbitrary system commands at the OS level with application owner privileges on the affected system.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-863
References: http://seclists.org/fulldisclosure/2018/Jul/46; http://www.securitytracker.com/id/1041287; http://seclists.org/fulldisclosure/2018/Jul/46
CVE: CVE-2018-1255
Published: 2018-07-13
Description: RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Jul/46; http://www.securitytracker.com/id/1041287; http://seclists.org/fulldisclosure/2018/Jul/46
CVE: CVE-2018-14054
Published: 2018-07-13
Description: A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is triggered.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://www.openwall.com/lists/oss-security/2018/07/13/1; https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/
CVE: CVE-2018-7535
Published: 2018-07-13
Description: An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: http://seclists.org/fulldisclosure/2018/Jul/54; http://seclists.org/fulldisclosure/2018/Jul/54
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-13
Description: JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allowing an attacker to perform actions as logged in user. This attack appear to be exploitable via The victim must run maliciously crafted flash component. This vulnerability appears to have been fixed in 6.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.geekboy.ninja/blog/exploiting-json-cross-site-request-forgery-csrf-using-flash/; https://www.jfrog.com/jira/browse/RTFACT-17004; https://www.jfrog.com/jira/secure/ReleaseNote.jspa?projectId=10070&version=19581
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-13
Description: MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can result in Creating file with custom a filename and content. This attack appear to be exploitable via Web request. This vulnerability appears to have been fixed in commit 06bc94257408f6a575de20ddb955aca505ef6e68.
CVSS Score: 7.2 (HIGH)
CWE: CWE-732
References: https://github.com/a2u/CVE-2[PII_REDACTED]; https://github.com/modxcms/revolution/commit/06bc94257408f6a575de20ddb955aca505ef6e68; https://github.com/modxcms/revolution/pull/13979
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-13
Description: MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. This attack appear to be exploitable via web request via security/login processor. This vulnerability appears to have been fixed in pull 13980.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/modxcms/revolution/pull/13980; https://github.com/modxcms/revolution/pull/13980
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-13
Description: Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that can result in Unprivileged users may execute code in context of Sensu service account. This attack appear to be exploitable via Unprivileged user may place an arbitrary DLL in the c:\opt\sensu\embedded\bin directory in order to exploit standard Windows DLL load order behavior. This vulnerability appears to have been fixed in 1.4.2-3 and later.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://docs.sensu.io/sensu-core/1.4/changelog/#core-v1-4-2; https://docs.sensu.io/sensu-core/1.4/changelog/#core-v1-4-2