deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-7720
Published: 2019-02-11
Description: taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php db_name parameter and then making a config.php request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/taogogo/taocms/issues/1; https://github.com/taogogo/taocms/issues/1
CVE: CVE-2019-7721
Published: 2019-02-11
Description: lib/NCCms.class.php in nc-cms 3.5 allows upload of .php files via the index.php?action=save name and editordata parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/gnat/nc-cms/issues/14; https://github.com/gnat/nc-cms/issues/14
CVE: CVE-2018-20587
Published: 2019-02-11
Description: Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.
CVSS Score: 5.5 (MEDIUM)
References: https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20587; https://medium.com/%40lukedashjr/cve-2018-20587-advisory-and-full-disclosure-a3105551e78b; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-20587
CVE: CVE-2019-6975
Published: 2019-02-11
Description: Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.securityfocus.com/bid/106964; https://docs.djangoproject.com/en/dev/releases/security/; https://groups.google.com/forum/#%21topic/django-announce/WTwEAprR0IQ
CVE: CVE-2019-7722
Published: 2019-02-11
Description: PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process, allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure, denial of service, or request forgery attacks. (PMD 6.x is unaffected because of a 2017-09-15 change.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://github.com/pmd/pmd/issues/1650; https://github.com/pmd/pmd/issues/1650
CVE: CVE-2018-11847
Published: 2019-02-11
Description: Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106475; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106475
CVE: CVE-2018-11855
Published: 2019-02-11
Description: If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM630, SDM660.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11888
Published: 2019-02-11
Description: Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/106475; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106475
CVE: CVE-2018-11899
Published: 2019-02-11
Description: While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11962
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap while loading audio effects config in audio effects factory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/106496; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106496
CVE: CVE-2018-12006
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no extra privileges can potentially access leaked data due to uninitialized padding present in display function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin
CVE: CVE-2018-12010
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin
CVE: CVE-2018-12011
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin
CVE: CVE-2018-12014
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT module of freed pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-476
References: http://www.securityfocus.com/bid/106496; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106496
CVE: CVE-2018-12547
Published: 2019-02-11
Description: In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-119
References: https://access.redhat.com/errata/RHSA-2019:0469; https://access.redhat.com/errata/RHSA-2019:0472; https://access.redhat.com/errata/RHSA-2019:0473
CVE: CVE-2018-12549
Published: 2019-02-11
Description: In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-111, CWE-20
References: https://access.redhat.com/errata/RHSA-2019:0469; https://access.redhat.com/errata/RHSA-2019:0472; https://access.redhat.com/errata/RHSA-2019:0640
CVE: CVE-2018-13888
Published: 2019-02-11
Description: There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106475; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106475
CVE: CVE-2018-13889
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/106496; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; http://www.securityfocus.com/bid/106496
CVE: CVE-2018-13893
Published: 2019-02-11
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2019/01/07/january-2019-code-aurora-security-bulletin
CVE: CVE-2018-15586
Published: 2019-02-11
Description: Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html; http://seclists.org/fulldisclosure/2019/Apr/38; http://www.openwall.com/lists/oss-security/2019/04/30/4
CVE: CVE-2018-15587
Published: 2019-02-11
Description: GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-347
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00061.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00024.html
CVE: CVE-2018-15588
Published: 2019-02-11
Description: MailMate before 1.11.3 mishandles a suspicious HTML/MIME structure in a signed/encrypted email.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html; http://seclists.org/fulldisclosure/2019/Apr/38; http://www.openwall.com/lists/oss-security/2019/04/30/4
CVE: CVE-2019-7730
Published: 2019-02-11
Description: MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-352
References: https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/CSRF/readme.md; https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/CSRF/readme.md
CVE: CVE-2019-7731
Published: 2019-02-11
Description: MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-706
References: https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/RCE/readme.md; https://github.com/eddietcc/CVEnotes/blob/master/MyWebSQL/RCE/readme.md
CVE: CVE-2019-7732
Published: 2019-02-11
Description: In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response), only the last instance can ever be freed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/rgaufman/live555/issues/20; https://github.com/rgaufman/live555/issues/20
CVE: CVE-2019-7733
Published: 2019-02-11
Description: In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/rgaufman/live555/issues/21; https://security.gentoo.org/glsa/202005-06; https://github.com/rgaufman/live555/issues/21
CVE: CVE-2019-7736
Published: 2019-02-11
Description: D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://www.youtube.com/watch?v=uaT8vX06Jjs; https://www.youtube.com/watch?v=uaT8vX06Jjs
CVE: CVE-2018-16099
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16100
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16101
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16102
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16103
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16104
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16105
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16106
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2019-5736
Published: 2019-02-11
Description: runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
CVSS Score: 8.6 (HIGH)
CWE: CWE-78
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html
CVE: CVE-2018-16107
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16108
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16109
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16110
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16111
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16112
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-16113
Published: 2019-02-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none
CVE: CVE-2018-17542
Published: 2019-02-11
Description: SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?id=73; https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?lang=en-US&id=28; https://twcert.org.tw/subpages/ServeThePublic/public_document_details.aspx?id=73
CVE: CVE-2018-18569
Published: 2019-02-11
Description: The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain restrictions) that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. This could be leveraged to provide a proxy to attack other servers (internal or external) or to perform network scans of external or internal networks.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://www.shorebreaksecurity.com/blog/ssrfs-up-real-world-server-side-request-forgery-ssrf/; https://www.shorebreaksecurity.com/blog/ssrfs-up-real-world-server-side-request-forgery-ssrf/
CVE: CVE-2018-20242
Published: 2019-02-11
Description: A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106804; https://lists.apache.org/thread.html/8ee4644432c0a433c5c514a57d940cf6dcb0a0094acd97b36290f0b4%40%3Cuser.jspwiki.apache.org%3E; https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E
CVE: CVE-2019-6489
Published: 2019-02-11
Description: Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.
CVSS Score: 5.3 (MEDIUM)
References: http://support.lexmark.com/index?page=content&id=TE912; http://support.lexmark.com/index?page=content&id=TE912
CVE: CVE-2019-7737
Published: 2019-02-11
Description: A CSRF vulnerability was found in Verydows v2.0 that can add an admin account via index.php?m=backend&c=admin&a=add&step=submit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Verytops/verydows/issues/10; https://github.com/Verytops/verydows/issues/10
CVE: CVE-2019-7738
Published: 2019-02-11
Description: C.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/cooltey/C.P.Sub/commit/b2be52fd89b6fd4d69d63d504bc11742cd679ebe; https://github.com/cooltey/C.P.Sub/issues/3; https://github.com/cooltey/C.P.Sub/commit/b2be52fd89b6fd4d69d63d504bc11742cd679ebe
CVE: CVE-2019-7747
Published: 2019-02-11
Description: DbNinja 3.2.7 allows session fixation via the data.php sessid parameter.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-384
References: https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Broken_Authentication/readme.md; https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Broken_Authentication/readme.md
CVE: CVE-2019-7748
Published: 2019-02-11
Description: _includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Reflect_XSS/readme.md; https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Reflect_XSS/readme.md
CVE: CVE-2018-9582
Published: 2019-02-11
Description: In package installer in Android-8.0, Android-8.1 and Android-9, there is a possible bypass of the unknown source warning due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112031362.
CVSS Score: 7.8 (HIGH)
CWE: CWE-610
References: http://www.securityfocus.com/bid/106474; https://source.android.com/security/bulletin/2019-01-01.html; http://www.securityfocus.com/bid/106474
CVE: CVE-2018-9583
Published: 2019-02-11
Description: In bta_ag_parse_cmer of bta_ag_cmd.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution in the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-112860487.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106495; https://source.android.com/security/bulletin/2019-01-01.html; http://www.securityfocus.com/bid/106495
CVE: CVE-2018-9584
Published: 2019-02-11
Description: In nfc_ncif_set_config_status of nfc_ncif.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Android ID: A-114047681.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106495; https://source.android.com/security/bulletin/2019-01-01.html; http://www.securityfocus.com/bid/106495