deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19858
Published: 2019-01-30
Description: PrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against external entities. If an attacker passes HTML referencing an XML file (e.g., in an IFRAME element), PrinceXML will fetch the XML and parse it, thus giving an attacker file-read access and full-fledged SSRF.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://hacking.us.com/blog/XSS-to-XXE-in-Prince/; https://www.lynxsecurity.io/; https://www.youtube.com/watch?v=-7YIzYtWhzM
CVE: CVE-2018-19027
Published: 2019-01-30
Description: Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-704
References: http://www.securityfocus.com/bid/106524; https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02; http://www.securityfocus.com/bid/106524
CVE: CVE-2018-20748
Published: 2019-01-30
Description: LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf; https://github.com/LibVNC/libvncserver/commit/a64c3b37af9a6c8f8009d7516874b8d266b42bae; https://github.com/LibVNC/libvncserver/commit/c2c4b81e6cb3b485fb1ec7ba9e7defeb889f6ba7
CVE: CVE-2018-20749
Published: 2019-01-30
Description: LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106825; https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf; https://github.com/LibVNC/libvncserver/commit/15bb719c03cc70f14c36a843dcb16ed69b405707
CVE: CVE-2018-20750
Published: 2019-01-30
Description: LibVNC through 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106825; https://cert-portal.siemens.com/productcert/pdf/ssa-390195.pdf; https://github.com/LibVNC/libvncserver/commit/09e8fc02f59f16e2583b34fe1a270c238bd9ffec
CVE: CVE-2019-1565
Published: 2019-01-30
Description: The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106752; https://security.paloaltonetworks.com/CVE-2019-1565; http://www.securityfocus.com/bid/106752
CVE: CVE-2019-1566
Published: 2019-01-30
Description: The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106750; https://security.paloaltonetworks.com/CVE-2019-1566; https://www.purplemet.com/blog/palo-alto-firewall-multiple-xss-vulnerabilities
CVE: CVE-2019-3911
Published: 2019-01-30
Description: Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.tenable.com/security/research/tra-2019-03; https://www.tenable.com/security/research/tra-2019-03
CVE: CVE-2019-3912
Published: 2019-01-30
Description: An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.tenable.com/security/research/tra-2019-03; https://www.tenable.com/security/research/tra-2019-03
CVE: CVE-2019-3913
Published: 2019-01-30
Description: Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://www.tenable.com/security/research/tra-2019-03; https://www.tenable.com/security/research/tra-2019-03
CVE: CVE-2019-7233
Published: 2019-01-30
Description: In libdoc through 2019-01-28, doc2text in catdoc.c has a NULL pointer dereference.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/uvoteam/libdoc/issues/6; https://github.com/uvoteam/libdoc/issues/6
CVE: CVE-2019-7234
Published: 2019-01-30
Description: An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to begin the process of creating a ZIP archive file with the complete contents of any directory because of an apps.admincp.php error. This ZIP archive file can then be downloaded via an admincp.php?app=apps&do=pack request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/idreamsoft/iCMS/issues/51; https://github.com/idreamsoft/iCMS/issues/51
CVE: CVE-2019-7235
Published: 2019-01-30
Description: An issue was discovered in idreamsoft iCMS 7.0.13. admincp.php?app=apps&do=save allows directory traversal via _app=/../ to designate an arbitrary directory because of an apps.admincp.php error. This directory can then be deleted via an admincp.php?app=apps&do=uninstall request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/idreamsoft/iCMS/issues/52; https://github.com/idreamsoft/iCMS/issues/52
CVE: CVE-2019-7236
Published: 2019-01-30
Description: An issue was discovered in idreamsoft iCMS 7.0.13. editor/editor.admincp.php allows admincp.php?app=editor&do=fileManager dir=../ Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/idreamsoft/iCMS/issues/53; https://github.com/idreamsoft/iCMS/issues/53
CVE: CVE-2019-7237
Published: 2019-01-30
Description: An issue was discovered in idreamsoft iCMS 7.0.13 on Windows. editor/editor.admincp.php allows admincp.php?app=files&do=browse ..\ Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/idreamsoft/iCMS/issues/54; https://github.com/idreamsoft/iCMS/issues/54
CVE: CVE-2018-17189
Published: 2019-01-30
Description: In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/106685; https://access.redhat.com/errata/RHSA-2019:3932; https://access.redhat.com/errata/RHSA-2019:3933
CVE: CVE-2018-17199
Published: 2019-01-30
Description: In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: http://www.securityfocus.com/bid/106742; https://access.redhat.com/errata/RHSA-2019:3932; https://access.redhat.com/errata/RHSA-2019:3933
CVE: CVE-2018-3956
Published: 2019-01-30
Description: An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger an out-of-bounds read, which can disclose sensitive memory content and aid in exploitation when coupled with another vulnerability. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0626; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0626
CVE: CVE-2019-0190
Published: 2019-01-30
Description: A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106743; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E
CVE: CVE-2017-18360
Published: 2019-01-31
Description: In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6aeb75e6adfaed16e[PII_REDACTED]3a578fe1ee90b; http://www.securityfocus.com/bid/106802; https://bugzilla.suse.com/show_bug.cgi?id=1123706
CVE: CVE-2019-6438
Published: 2019-01-31
Description: SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00090.html; https://lists.debian.org/debian-lts-announce/2020/03/msg00016.html; https://lists.schedmd.com/pipermail/slurm-announce/2019/000018.html
CVE: CVE-2019-7216
Published: 2019-01-31
Description: An issue was discovered in FileChucker 4.99e-free-e02. filechucker.cgi has a filter bypass that allows a malicious user to upload any type of file by using % characters within the extension, e.g., file.%ph%p becomes file.php.
CVSS Score: 7.8 (HIGH)
References: https://encodable.com/filechucker/changelog/; https://github.com/ekultek/cve-2019-7216; https://encodable.com/filechucker/changelog/
CVE: CVE-2019-7249
Published: 2019-01-31
Description: In Keybase before 2.12.6 on macOS, the move RPC to the Helper was susceptible to time-to-check-time-to-use bugs and would also allow one user of the system (who didn't have root access) to tamper with another's installs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-367
References: http://www.securityfocus.com/bid/106824; https://hackerone.com/reports/471739; https://keybase.io/docs/secadv/kb004
CVE: CVE-2019-7250
Published: 2019-01-31
Description: An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/davidrthorn/cross_reference/issues/32; https://github.com/davidrthorn/cross_reference/issues/32
CVE: CVE-2019-4040
Published: 2019-01-31
Description: IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10869384; http://www.securityfocus.com/bid/106811; https://exchange.xforce.ibmcloud.com/vulnerabilities/156164
CVE: CVE-2018-11790
Published: 2019-01-31
Description: When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic Overflow at a string length calculation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-682
References: http://www.securityfocus.com/bid/106803; https://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3E; https://usn.ubuntu.com/3883-1/
CVE: CVE-2018-17926
Published: 2019-01-31
Description: The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/106243; https://ics-cert.us-cert.gov/advisories/ICSA-18-352-07; http://www.securityfocus.com/bid/106243
CVE: CVE-2019-6109
Published: 2019-01-31
Description: An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-116
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html; https://access.redhat.com/errata/RHSA-2019:3702; https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE: CVE-2019-6110
Published: 2019-01-31
Description: In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-838, CWE-838
References: https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf; https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c; https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
CVE: CVE-2019-6111
Published: 2019-01-31
Description: An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html; http://www.openwall.com/lists/oss-security/2019/04/18/1; http://www.openwall.com/lists/oss-security/2022/08/02/1
CVE: CVE-2019-7282
Published: 2019-01-31
Description: In NetKit through 0.17, rcp.c in the rcp client allows remote rsh servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. This is similar to CVE-2018-20685.
CVSS Score: 5.9 (MEDIUM)
References: https://bugs.debian.org/920486; https://lists.debian.org/debian-lts-announce/2021/11/msg00016.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DU33YVEDGFDMAZPSRQTRVKSKG4FAX7QB/
CVE: CVE-2019-7283
Published: 2019-01-31
Description: An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server (or Man-in-The-Middle attacker) can overwrite arbitrary files in a directory on the rcp client machine. This is similar to CVE-2019-6111.
CVSS Score: 7.4 (HIGH)
References: https://bugs.debian.org/920486; https://lists.debian.org/debian-lts-announce/2021/11/msg00016.html; https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
CVE: CVE-2018-15515
Published: 2019-01-31
Description: The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe subdirectory under the D-Link directory, which allows unprivileged local users to gain SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/150244/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-DLL-Hijacking.html; http://seclists.org/fulldisclosure/2018/Nov/29; http://packetstormsecurity.com/files/150244/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-DLL-Hijacking.html
CVE: CVE-2018-15516
Published: 2019-01-31
Description: The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: http://packetstormsecurity.com/files/150242/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-Man-In-The-Middle.html; http://seclists.org/fulldisclosure/2018/Nov/27; https://vimeo.com/299797225
CVE: CVE-2018-15517
Published: 2019-01-31
Description: The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ URI.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://packetstormsecurity.com/files/150243/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-Server-Side-Request-Forgery.html; http://seclists.org/fulldisclosure/2018/Nov/28; http://packetstormsecurity.com/files/150243/D-LINK-Central-WifiManager-CWM-100-1.03-r0098-Server-Side-Request-Forgery.html
CVE: CVE-2018-18940
Published: 2019-01-31
Description: servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string. A remote unauthenticated attacker could potentially exploit this vulnerability to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.  NOTE: this product is discontinued.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150262/Netscape-Enterprise-3.63-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Nov/31; http://packetstormsecurity.com/files/150262/Netscape-Enterprise-3.63-Cross-Site-Scripting.html
CVE: CVE-2018-18941
Published: 2019-01-31
Description: In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account.  NOTE: this product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.html; http://seclists.org/fulldisclosure/2018/Nov/32; http://packetstormsecurity.com/files/150263/Vignette-Content-Management-6-Security-Bypass.html
CVE: CVE-2018-19040
Published: 2019-01-31
Description: The Media File Manager plugin 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45809/; https://www.exploit-db.com/exploits/45809/
CVE: CVE-2018-19041
Published: 2019-01-31
Description: The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/45809/; https://www.exploit-db.com/exploits/45809/
CVE: CVE-2018-19042
Published: 2019-01-31
Description: The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to parameters of an mrelocator_move action to the wp-admin/admin-ajax.php URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45809/; https://www.exploit-db.com/exploits/45809/
CVE: CVE-2018-19043
Published: 2019-01-31
Description: The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directory traversal in the dir parameter of an mrelocator_rename action to the wp-admin/admin-ajax.php URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45809/; https://www.exploit-db.com/exploits/45809/
CVE: CVE-2018-12548
Published: 2019-01-31
Description: In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-822, CWE-119
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=543792; https://bugs.eclipse.org/bugs/show_bug.cgi?id=543792
CVE: CVE-2018-6241
Published: 2019-01-31
Description: NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, which may lead to arbitrary code execution, denial of service, or escalation of privileges. Android ID: A-62540032 Severity Rating: High Version: N/A.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106476; https://nvidia.custhelp.com/app/answers/detail/a_id/4804; https://source.android.com/security/bulletin/2019-01-01
CVE: CVE-2018-17928
Published: 2019-01-31
Description: The product CMS-770 (Software Versions 1.7.1 and prior)is vulnerable that an attacker can read sensitive configuration files by bypassing the user authentication mechanism.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/106244; https://ics-cert.us-cert.gov/advisories/ICSA-18-352-06; http://www.securityfocus.com/bid/106244
CVE: CVE-2018-5560
Published: 2019-01-31
Description: A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/; https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/; https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/
CVE: CVE-2019-7295
Published: 2019-01-31
Description: typora through 0.9.63 has XSS, with resultant remote command execution, during block rendering of a mathematical formula.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/typora/typora-issues/issues/2129; https://github.com/typora/typora-issues/issues/2129
CVE: CVE-2019-7296
Published: 2019-01-31
Description: typora through 0.9.64 has XSS, with resultant remote command execution, during inline rendering of a mathematical formula.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/typora/typora-issues/issues/2131; https://github.com/typora/typora-issues/issues/2131