deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-8996
Published: 2018-03-25
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002007.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002007; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002007
CVE: CVE-2018-8997
Published: 2018-03-25
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002004.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002004; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002004
CVE: CVE-2018-8998
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060cc; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060cc
CVE: CVE-2018-8999
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060c4; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060c4
CVE: CVE-2018-9000
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402004; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402004
CVE: CVE-2018-9001
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402000; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402000
CVE: CVE-2018-9002
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060cc; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060cc
CVE: CVE-2018-9003
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402000; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402000
CVE: CVE-2018-9004
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060d0; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060d0
CVE: CVE-2018-9005
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060d0; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060d0
CVE: CVE-2018-9006
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402004; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c402004
CVE: CVE-2018-9007
Published: 2018-03-25
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060c4; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060c4
CVE: CVE-2018-9009
Published: 2018-03-25
Description: In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/libming/libming/issues/131; https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/
CVE: CVE-2018-7719
Published: 2018-03-25
Description: Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://support.acrolinx.com/hc/en-us/articles/213987685-Acrolinx-Server-Version-5-1-including-subsequent-service-releases-; https://www.exploit-db.com/exploits/44345/; https://support.acrolinx.com/hc/en-us/articles/213987685-Acrolinx-Server-Version-5-1-including-subsequent-service-releases-
CVE: CVE-2018-8947
Published: 2018-03-25
Description: rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357; https://github.com/rap2hpoutre/laravel-log-viewer/releases/tag/v0.13.0; https://www.exploit-db.com/exploits/44343/
CVE: CVE-2018-9010
Published: 2018-03-25
Description: Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/44317/; https://www.exploit-db.com/exploits/44317/
CVE: CVE-2018-9014
Published: 2018-03-25
Description: dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug4.md; https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug4.md
CVE: CVE-2018-9015
Published: 2018-03-25
Description: dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug5.md; https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug5.md
CVE: CVE-2018-9016
Published: 2018-03-25
Description: dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug2.md; https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug2.md
CVE: CVE-2018-9017
Published: 2018-03-25
Description: dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug3.md; https://github.com/xuheunbaicai/cangku/blob/master/cve/dsmall_v20180320_bug3.md
CVE: CVE-2018-8817
Published: 2018-03-25
Description: Wampserver before 3.1.3 has CSRF in add_vhost.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://forum.wampserver.com/read.php?2%2C138295%2C150722%2Cpage=6#msg-150722; https://seclists.org/bugtraq/2019/Jun/10; https://www.exploit-db.com/exploits/44385/
CVE: CVE-2018-8978
Published: 2018-03-25
Description: Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html; https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html
CVE: CVE-2018-8979
Published: 2018-03-25
Description: Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html; https://www.exploit-db.com/exploits/44360/; https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html
CVE: CVE-2018-9018
Published: 2018-03-25
Description: In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.securityfocus.com/bid/103526; https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE: CVE-2018-9020
Published: 2018-03-26
Description: The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://wp-events-plugin.com/blog/2018/01/15/events-manager-5-8-1-2-security-release/; https://wordpress.org/plugins/events-manager/#developers; https://www.gubello.me/blog/events-manager-authenticated-stored-xss/
CVE: CVE-2018-5454
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability where code debugging methods are enabled, which could allow an attacker to remotely execute arbitrary code during runtime.
CVSS Score: 8.1 (HIGH)
CWE: CWE-489
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5458
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a vulnerability using SSL legacy encryption that could allow an attacker to gain unauthorized access to resources and information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-327
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5462
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an SSL incorrect hostname certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-295
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5464
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an untrusted SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-295
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5466
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have a self-signed SSL certificate vulnerability this could allow an attacker to gain unauthorized access to resources and information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310, CWE-295
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5468
Published: 2018-03-26
Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5470
Published: 2018-03-26
Description: Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428, CWE-426
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5472
Published: 2018-03-26
Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-5474
Published: 2018-03-26
Description: Philips Intellispace Portal all versions 7.0.x and 8.0.x have an input validation vulnerability that could allow a remote attacker to execute arbitrary code or cause the application to crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/103182; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2017-15710
Published: 2018-03-26
Description: In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2018/03/24/8; http://www.securityfocus.com/bid/103512; http://www.securitytracker.com/id/1040569
CVE: CVE-2017-15715
Published: 2018-03-26
Description: In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2018/03/24/6; http://www.securityfocus.com/bid/103525; http://www.securitytracker.com/id/1040570
CVE: CVE-2018-1283
Published: 2018-03-26
Description: In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.
CVSS Score: 5.3 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2018/03/24/4; http://www.securityfocus.com/bid/103520; http://www.securitytracker.com/id/1040568
CVE: CVE-2018-1301
Published: 2018-03-26
Description: A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2018/03/24/2; http://www.securityfocus.com/bid/103515; http://www.securitytracker.com/id/1040573
CVE: CVE-2018-1302
Published: 2018-03-26
Description: When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2018/03/24/5; http://www.securityfocus.com/bid/103528; http://www.securitytracker.com/id/1040567
CVE: CVE-2018-1303
Published: 2018-03-26
Description: A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2018/03/24/3; http://www.securityfocus.com/bid/103522; http://www.securitytracker.com/id/1040572
CVE: CVE-2018-1312
Published: 2018-03-26
Description: In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2018/03/24/7; http://www.securityfocus.com/bid/103524; http://www.securitytracker.com/id/1040571
CVE: CVE-2017-15534
Published: 2018-03-26
Description: The Norton App Lock prior to version 1.3.0.13 can be susceptible to an authentication bypass exploit. In this type of circumstance, the exploit can allow the user to kill the app to prevent it from locking the device, thereby allowing the individual to gain device access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/103377; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20180326_00; http://www.securityfocus.com/bid/103377
CVE: CVE-2017-6278
Published: 2018-03-26
Description: NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4635; https://nvidia.custhelp.com/app/answers/detail/a_id/4787; http://nvidia.custhelp.com/app/answers/detail/a_id/4635
CVE: CVE-2017-18248
Published: 2018-03-26
Description: The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b[PII_REDACTED]df3; https://github.com/apple/cups/issues/5143; https://github.com/apple/cups/releases/tag/v2.2.6
CVE: CVE-2018-8937
Published: 2018-03-26
Description: An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html; https://nileshsapariya.blogspot.ae/2018/03/open-redirect-to-reflected-xss-open.html
CVE: CVE-2014-2048
Published: 2018-03-26
Description: The user_openid app in ownCloud Server before 5.0.15 allows remote attackers to obtain access by leveraging an insecure OpenID implementation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/91973; https://owncloud.org/security/advisories/insecure-openid-implementation/; https://exchange.xforce.ibmcloud.com/vulnerabilities/91973