deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-1772
Published: 2018-04-04
Description: IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136786.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000369; http://www.securityfocus.com/bid/103735; https://exchange.xforce.ibmcloud.com/vulnerabilities/136786
CVE: CVE-2017-6423
Published: 2018-04-04
Description: An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References: QC-CR#1103158.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97387; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-6424
Published: 2018-04-04
Description: An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References: QC-CR#1102648.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/97396; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-6425
Published: 2018-04-04
Description: An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#1103689.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97362; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2017-6426
Published: 2018-04-04
Description: An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106842.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97355; http://www.securitytracker.com/id/1038201; https://source.android.com/security/bulletin/2017-04-01
CVE: CVE-2018-1421
Published: 2018-04-04
Description: IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22015055; https://exchange.xforce.ibmcloud.com/vulnerabilities/139023; http://www.ibm.com/support/docview.wss?uid=swg22015055
CVE: CVE-2018-1447
Published: 2018-04-04
Description: The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-916
References: http://www.ibm.com/support/docview.wss?uid=swg22014669; http://www.ibm.com/support/docview.wss?uid=swg22014957; http://www.ibm.com/support/docview.wss?uid=swg22015066
CVE: CVE-2018-1469
Published: 2018-04-04
Description: IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HTTP requests. IBM X-Force ID: 140605.
CVSS Score: 9.8 (CRITICAL)
References: http://www.ibm.com/support/docview.wss?uid=swg22014940; https://exchange.xforce.ibmcloud.com/vulnerabilities/140605; http://www.ibm.com/support/docview.wss?uid=swg22014940
CVE: CVE-2018-9119
Published: 2018-04-04
Description: An attacker with physical access to a BrilliantTS FUZE card (MCU firmware 0.1.73, BLE firmware 0.7.4) can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306
References: https://blog.ice9.us/2018/04/stealing-credit-cards-from-fuze-bluetooth.html; https://ice9.us/advisories/ICE9-2018-001.txt; https://www.elttam.com/blog/fuzereview/#content
CVE: CVE-2018-9275
Published: 2018-04-04
Description: In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).
CVSS Score: 8.2 (HIGH)
CWE: CWE-200
References: https://bugzilla.opensuse.org/show_bug.cgi?id=1088027; https://github.com/Yubico/yubico-pam/commit/0f6ceabab0a8849b47f67d727aa526c2656089ba; https://github.com/Yubico/yubico-pam/issues/136
CVE: CVE-2018-8719
Published: 2018-04-04
Description: An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by Google and allows for attackers to possibly find sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-532
References: https://www.exploit-db.com/exploits/44371/; https://www.exploit-db.com/exploits/44371/
CVE: CVE-2018-9034
Published: 2018-04-04
Description: Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/44366/; https://www.exploit-db.com/exploits/44366/
CVE: CVE-2018-9035
Published: 2018-04-04
Description: CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-1236
References: https://www.exploit-db.com/exploits/44367/; https://www.exploit-db.com/exploits/44367/
CVE: CVE-2018-9115
Published: 2018-04-04
Description: Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG interface. An attacker can freeze the Situational Layer, which means that the Situational Picture is no longer updated. Unfortunately, the user cannot notice until he tries to work with that layer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/141099; https://packetstormsecurity.com/files/146982; https://www.exploit-db.com/exploits/44375/
CVE: CVE-2018-9126
Published: 2018-04-04
Description: The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover database credentials, via the /GetCSS.ashx/?CP=%2fweb.config URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://packetstormsecurity.com/files/146999/DotNetNuke-DNNarticle-Directory-Traversal.html; https://www.exploit-db.com/exploits/44414/; http://packetstormsecurity.com/files/146999/DotNetNuke-DNNarticle-Directory-Traversal.html
CVE: CVE-2018-9284
Published: 2018-04-04
Description: authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.dlink.com.sg/dir-868l/#firmware; https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in--d-link-router-dir868.html; http://www.dlink.com.sg/dir-868l/#firmware
CVE: CVE-2018-9285
Published: 2018-04-04
Description: Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/160049/ASUS-TM-AC1900-Arbitrary-Command-Execution.html; https://fortiguard.com/zeroday/FG-VD-17-216; https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in-asus-router.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-04
Description: Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-732
References: https://docs.pagure.org/koji/CVE-2[PII_REDACTED]/; https://pagure.io/koji/issue/850; https://docs.pagure.org/koji/CVE-2[PII_REDACTED]/
CVE: CVE-2018-1081
Published: 2018-04-04
Description: A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified, otherwise admin email can be spammed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103728; https://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61392; https://moodle.org/mod/forum/discuss.php?d=367938
CVE: CVE-2018-1082
Published: 2018-04-04
Description: A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285, CWE-287
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-60101; http://www.securityfocus.com/bid/103725; https://moodle.org/mod/forum/discuss.php?d=367939
CVE: CVE-2018-1097
Published: 2018-04-04
Description: A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200, CWE-200
References: https://access.redhat.com/errata/RHSA-2018:2927; https://bugzilla.redhat.com/show_bug.cgi?id=1561723; https://github.com/theforeman/foreman/pull/5369
CVE: CVE-2018-9303
Published: 2018-04-04
Description: In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md; https://security.gentoo.org/glsa/201811-14; https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md
CVE: CVE-2018-9304
Published: 2018-04-04
Description: In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/Exiv2/exiv2/issues/262; https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md; https://security.gentoo.org/glsa/201811-14
CVE: CVE-2018-9305
Published: 2018-04-04
Description: In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/263
CVE: CVE-2018-9306
Published: 2018-04-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17724.  Reason: This candidate is a reservation duplicate of CVE-2017-17724.  Notes: All CVE users should reference CVE-2017-17724 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9307
Published: 2018-04-04
Description: dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xuheunbaicai/cangku/blob/master/cve/%E9%AD%94%E6%96%B9%E5%8A%A8%E5%8A%9B_Latest%20version_bug.md; https://github.com/xuheunbaicai/cangku/blob/master/cve/%E9%AD%94%E6%96%B9%E5%8A%A8%E5%8A%9B_Latest%20version_bug.md
CVE: CVE-2018-9309
Published: 2018-04-05
Description: An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dl_sendsms.php request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/lihonghuyang/vulnerability/blob/master/dl_sendsms.php.md; https://github.com/lihonghuyang/vulnerability/blob/master/dl_sendsms.php.md
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-261; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-261
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-262
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseAction#doDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these files to attack Jenkins users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-308; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-308
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with local file system access to obtain encrypted Perforce passwords and decrypt them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-373; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-373
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An arbitrary code execution vulnerability exists in Liquibase Runner Plugin version 1.3.0 and older that allows an attacker with permission to configure jobs to load and execute arbitrary code on the Jenkins master JVM.
CVSS Score: 8.8 (HIGH)
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-519; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-519
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that disables host key verification by default.
CVSS Score: 5.6 (MEDIUM)
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-630; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-630
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An exposure of sensitive information vulnerability exists in Jenkins Reverse Proxy Auth Plugin 1.5 and older in ReverseProxySecurityRealm#authContext that allows attackers with local file system access to obtain a list of authorities for logged in users.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-736; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-736
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-295
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-504; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-504
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745; https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-05
Description: Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page (CWE-80) vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser. This attack appear to be exploitable via the victim openning a ticket. This vulnerability appears to have been fixed in 2.3.1, 2.2.2 and 2.1.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zammad/zammad/issues/1869; https://zammad.com/news/release-2-4; https://zammad.com/news/security-advisory-zaa-2018-01
CVE: CVE-2018-1282
Published: 2018-04-05
Description: This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/103751; https://lists.apache.org/thread.html/74bd2bff1827febb348dfb323986fa340d3bb97a315ab93c3ccc8299%40%3Cdev.hive.apache.org%3E; https://exchange.xforce.ibmcloud.com/vulnerabilities/141253
CVE: CVE-2018-1284
Published: 2018-04-05
Description: In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs (xpath/xpath_string/xpath_boolean/xpath_number/xpath_double/xpath_float/xpath_long/xpath_int/xpath_short) to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user (usually hive) if hive.server2.enable.doAs=false.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103750; https://lists.apache.org/thread.html/29184dbce4a37be2af36e539ecb479b1d27868f73ccfdff46c7174b4%40%3Cdev.hive.apache.org%3E; http://www.securityfocus.com/bid/103750
CVE: CVE-2018-1315
Published: 2018-04-05
Description: In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FTP client code in HPL/SQL does not verify the destination location of the downloaded file. This does not affect hive cli user and hiveserver2 user as hplsql is a separate command line script and needs to be invoked differently.
CVSS Score: 3.7 (LOW)
CWE: CWE-732
References: https://lists.apache.org/thread.html/d5da94ef60312c01a8d[PII_REDACTED]d1b5fb70702c71a3e84e94f7933%40%3Cdev.hive.apache.org%3E; https://lists.apache.org/thread.html/d5da94ef60312c01a8d[PII_REDACTED]d1b5fb70702c71a3e84e94f7933%40%3Cdev.hive.apache.org%3E
CVE: CVE-2018-7035
Published: 2018-04-05
Description: Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode in an Add Blog action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/gleez/cms/issues/794; https://github.com/gleez/cms/issues/794
CVE: CVE-2018-9243
Published: 2018-04-05
Description: GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validation in the merge request component leads to cross site scripting (specifically, filenames in changes tabs of merge requests). This is fixed in 10.6.3, 10.5.7, and 10.4.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/04/04/security-release-gitlab-10-dot-6-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/42028; https://about.gitlab.com/2018/04/04/security-release-gitlab-10-dot-6-dot-3-released/