deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10712
Published: 2018-02-09
Description: In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a "$uri = stream_get_meta_data(fopen($file, "r"))['uri']" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugs.php.net/bug.php?id=71323; https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=6297a117d77fa3a0df2e21ca926a92c231819cd5; https://usn.ubuntu.com/3566-2/
CVE: CVE-2018-6869
Published: 2018-02-09
Description: In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/103050; https://github.com/gdraheim/zziplib/issues/22; https://lists.debian.org/debian-lts-announce/2018/02/msg00022.html
CVE: CVE-2018-6871
Published: 2018-02-09
Description: LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.
CVSS Score: 9.8 (CRITICAL)
References: https://access.redhat.com/errata/RHSA-2018:0418; https://access.redhat.com/errata/RHSA-2018:0517; https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-5-4-5&id=a916fc0c0e0e8b10cb4158fa0fa173fe205d434a
CVE: CVE-2018-6872
Published: 2018-02-09
Description: The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/103103
CVE: CVE-2018-1052
Published: 2018-02-09
Description: Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/102987; https://www.postgresql.org/about/news/1829/; http://www.securityfocus.com/bid/102987
CVE: CVE-2018-1053
Published: 2018-02-09
Description: In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.
CVSS Score: 7.0 (HIGH)
CWE: CWE-377, CWE-732
References: http://www.securityfocus.com/bid/102986; https://access.redhat.com/errata/RHSA-2018:2511; https://access.redhat.com/errata/RHSA-2018:2566
CVE: CVE-2018-1055
Published: 2018-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-6871.  Reason: This candidate is a reservation duplicate of CVE-2018-6871.  Notes: All CVE users should reference CVE-2018-6871 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-1298
Published: 2018-02-09
Description: A Denial of Service vulnerability was found in Apache Qpid Broker-J 7.0.0 in functionality for authentication of connections for AMQP protocols 0-8, 0-9, 0-91 and 0-10 when PLAIN or XOAUTH2 SASL mechanism is used. The vulnerability allows unauthenticated attacker to crash the broker instance. AMQP 1.0 and HTTP connections are not affected. An authentication of incoming AMQP connections in Apache Qpid Broker-J is performed by special entities called "Authentication Providers". Each Authentication Provider can support several SASL mechanisms which are offered to the connecting clients as part of SASL negotiation process. The client chooses the most appropriate SASL mechanism for authentication. Authentication Providers of following types supports PLAIN SASL mechanism: Plain, PlainPasswordFile, SimpleLDAP, Base64MD5PasswordFile, MD5, SCRAM-SHA-256, SCRAM-SHA-1. XOAUTH2 SASL mechanism is supported by Authentication Providers of type OAuth2. If an AMQP port is configured with any of these Authentication Providers, the Broker may be vulnerable.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E; https://lists.apache.org/thread.html/d9087e9e57c9b6376754e2b4ea8cd5e9ae6449ed17fc384640c9c9e1%40%3Cusers.qpid.apache.org%3E
CVE: CVE-2018-6825
Published: 2018-02-09
Description: An issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a hardcoded vobot account that has root access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://stacksmashing.net/CVE-2018-6825.html; http://stacksmashing.net/CVE-2018-6825.html
CVE: CVE-2018-6826
Published: 2018-02-09
Description: An issue was discovered on VOBOT CLOCK before 0.99.30 devices. Cleartext HTTP is used to download a breakout program, and therefore man-in-the-middle attackers can execute arbitrary code by watching for a local user to launch the Breakout Easter Egg feature, and then sending a crafted HTTP response.
CVSS Score: 7.5 (HIGH)
References: http://stacksmashing.net/CVE-2018-6826.html; http://stacksmashing.net/CVE-2018-6826.html
CVE: CVE-2018-6827
Published: 2018-02-09
Description: VOBOT CLOCK before 0.99.30 devices do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information, and consequently execute arbitrary code, via a crafted certificate, as demonstrated by leveraging a hardcoded --no-check-certificate Wget option.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: http://stacksmashing.net/CVE-2018-6827.html; http://stacksmashing.net/CVE-2018-6827.html
CVE: CVE-2017-1761
Published: 2018-02-09
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136005.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22012416; http://www.securitytracker.com/id/1040333; https://exchange.xforce.ibmcloud.com/vulnerabilities/136005
CVE: CVE-2018-1368
Published: 2018-02-09
Description: IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perform some actions that only an admin should be performing, so there is risk that someone not authorized can change things that they are not suppose to. IBM X-Force ID: 137765.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-269
References: http://www.ibm.com/support/docview.wss?uid=swg22013302; http://www.securitytracker.com/id/1040349; https://exchange.xforce.ibmcloud.com/vulnerabilities/137765
CVE: CVE-2018-1401
Published: 2018-02-09
Description: IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138437.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/102973; http://www.securitytracker.com/id/1040331; https://exchange.xforce.ibmcloud.com/vulnerabilities/138437
CVE: CVE-2018-6876
Published: 2018-02-09
Description: The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103035; https://github.com/ImageMagick/ImageMagick/issues/973; http://www.securityfocus.com/bid/103035
CVE: CVE-2018-6878
Published: 2018-02-09
Description: Cross Site Scripting (XSS) exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43991/; https://www.exploit-db.com/exploits/43991/
CVE: CVE-2018-1307
Published: 2018-02-09
Description: In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD type of attacks. Mitigation is to use 3.3.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://juddi.apache.org/security.html; https://issues.apache.org/jira/browse/JUDDI-987; http://juddi.apache.org/security.html
CVE: CVE-2017-10689
Published: 2018-02-09
Description: In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://access.redhat.com/errata/RHSA-2018:2927; https://puppet.com/security/cve/CVE-2017-10689; https://usn.ubuntu.com/3567-1/
CVE: CVE-2017-10690
Published: 2018-02-09
Description: In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://access.redhat.com/errata/RHSA-2018:2927; https://puppet.com/security/cve/CVE-2017-10690; https://access.redhat.com/errata/RHSA-2018:2927
CVE: CVE-2018-6508
Published: 2018-02-09
Description: Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
CVSS Score: 8.0 (HIGH)
CWE: CWE-134
References: http://www.securityfocus.com/bid/103020; https://puppet.com/security/cve/CVE-2018-6508; http://www.securityfocus.com/bid/103020
CVE: CVE-2012-6346
Published: 2018-02-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expression/validate.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-012-008; https://www.vulnerability-lab.com/get_content.php?id=702; https://fortiguard.com/psirt/FG-IR-012-008
CVE: CVE-2012-6347
Published: 2018-02-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the conversationContext parameter to (1) admin/auditTrail.jsf, (2) mapolicymgmt/targetsMonitorView.jsf, (3) vascan/globalsummary.jsf, (4) vaerrorlog/vaErrorLog.jsf, (5) database/listTargetGroups.jsf, (6) sysconfig/listSystemInfo.jsf, (7) vascan/list.jsf, (8) network/router.jsf, (9) mapolicymgmt/editPolicyProfile.jsf, or (10) mapolicymgmt/maPolicyMasterList.jsf.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-012-007; https://www.vulnerability-lab.com/get_content.php?id=558; https://fortiguard.com/psirt/FG-IR-012-007
CVE: CVE-2014-3219
Published: 2018-02-09
Description: fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132751.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00071.html
CVE: CVE-2014-8171
Published: 2018-02-09
Description: The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained cgroup.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://rhn.redhat.com/errata/RHSA-2015-0864.html; http://rhn.redhat.com/errata/RHSA-2015-2152.html; http://rhn.redhat.com/errata/RHSA-2015-2411.html
CVE: CVE-2015-1862
Published: 2018-02-09
Description: The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environment.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html; http://packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html; http://packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.html
CVE: CVE-2017-0911
Published: 2018-02-09
Description: Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication information is passed back to the application using the registered custom URL scheme (typically twitterkit-<consumer-key>) on iOS. Because the callback handler did not verify the authenticity of the response, this step is vulnerable to forgery, potentially allowing attacker to associate a Twitter account with a third-party service.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-360, CWE-287
References: https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.html; https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71; https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411
CVE: CVE-2018-3600
Published: 2018-02-09
Description: A external entity processing information disclosure (XXE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to disclose sensitive information on vulnerable installations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-111/; https://success.trendmicro.com/solution/1119158
CVE: CVE-2018-3601
Published: 2018-02-09
Description: A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-113/; https://success.trendmicro.com/solution/1119158
CVE: CVE-2018-3602
Published: 2018-02-09
Description: An AdHocQuery_Processor SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-068/; https://success.trendmicro.com/solution/1119158
CVE: CVE-2018-3603
Published: 2018-02-09
Description: A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-112/; https://success.trendmicro.com/solution/1119158
CVE: CVE-2018-3604
Published: 2018-02-09
Description: GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-067/; https://www.zerodayinitiative.com/advisories/ZDI-18-084/
CVE: CVE-2018-3605
Published: 2018-02-09
Description: TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-069/; https://www.zerodayinitiative.com/advisories/ZDI-18-070/
CVE: CVE-2018-3606
Published: 2018-02-09
Description: XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-083/; https://www.zerodayinitiative.com/advisories/ZDI-18-085/
CVE: CVE-2018-3607
Published: 2018-02-09
Description: XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119158; https://www.zerodayinitiative.com/advisories/ZDI-18-090/; https://www.zerodayinitiative.com/advisories/ZDI-18-094/
CVE: CVE-2018-5306
Published: 2018-02-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Feb/23; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]68; https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.html
CVE: CVE-2018-5307
Published: 2018-02-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via (1) the repoId or (2) format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; (3) the filename in the "File Upload" functionality of the Staging Upload; (4) the username when creating a new user; or (5) the IQ Server URL field in the IQ Server Connection functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Feb/23; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]28; https://www.sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-vulnerabilities-in-sonatype-nexus-repository-manager-oss-pro/index.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mautic/mautic/issues/5222; https://github.com/mautic/mautic/issues/5222
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cnvs/canvas/issues/359; https://github.com/cnvs/canvas/issues/359
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: Invoice Plane version 1.5.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Client's details that can result in execution of javascript code . This vulnerability appears to have been fixed in 1.5.5 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/InvoicePlane/InvoicePlane/pull/557; https://github.com/InvoicePlane/InvoicePlane/pull/557/commits/3fc256ccef403f5be9982f02ef340d9e01daabb2; https://github.com/InvoicePlane/InvoicePlane/pull/557
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) vulnerability in Product details that can result in execution of javascript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/issues/7727; https://github.com/Dolibarr/dolibarr/issues/7727
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in execution of javascript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/croogo/croogo/issues/847; https://github.com/croogo/croogo/issues/847
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command injection by an authenticated attacker with any role. This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.open-emr.org/wiki/index.php/OpenEMR_Patches; https://www.sec-consult.com/en/blog/advisories/os-command-injection-reflected-cross-site-scripting-in-openemr/index.html; http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: OpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf and _posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.open-emr.org/wiki/index.php/OpenEMR_Patches; https://www.sec-consult.com/en/blog/advisories/os-command-injection-reflected-cross-site-scripting-in-openemr/index.html; http://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-09
Description: GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.batterystapl.es/2018/01/security-implications-of-ansi-escape.html; http://www.batterystapl.es/2018/01/security-implications-of-ansi-escape.html