deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18808
Published: 2019-03-07
Description: The domain management component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a race-condition vulnerability that may allow any users with domain save privileges to gain superuser privileges. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/107350; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-18808
CVE: CVE-2018-18809
Published: 2019-03-07
Description: The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions up to and including 6.3.4; 6.4.1; 6.4.2; 6.4.21; 7.1.0; 7.2.0, TIBCO JasperReports Library Community Edition: versions up to and including 6.7.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.21, TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.3; 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/154406/Tibco-JasperSoft-Path-Traversal.html; http://seclists.org/fulldisclosure/2019/Sep/17; http://www.securityfocus.com/bid/107351
CVE: CVE-2018-18815
Published: 2019-03-07
Description: The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability that theoretically allows unauthenticated users to bypass authorization checks for portions of the HTTP interface to the JasperReports Server. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-863
References: http://www.securityfocus.com/bid/107346; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809
CVE: CVE-2018-18816
Published: 2019-03-07
Description: The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross site scripting vulnerability. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi- Tenancy versions up to and including 7.1.0, and TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107348; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-2018-18816
CVE: CVE-2019-8986
Published: 2019-03-07
Description: The SOAP API component vulnerability of TIBCO Software Inc.'s TIBCO JasperReports Server, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that may allow a malicious authenticated user to copy text files from the host operating system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3.
CVSS Score: 7.7 (HIGH)
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-server-2018-8986; http://www.tibco.com/services/support/advisories
CVE: CVE-2013-7466
Published: 2019-03-07
Description: Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html; http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html
CVE: CVE-2013-7467
Published: 2019-03-07
Description: Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html; http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html
CVE: CVE-2013-7468
Published: 2019-03-07
Description: Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt; https://packetstormsecurity.com/files/121391/public_phpInjection-smf204.txt
CVE: CVE-2017-12447
Published: 2019-03-07
Description: GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.gnome.org/show_bug.cgi?id=785979; https://github.com/hackerlib/hackerlib-vul/tree/master/gnome; https://usn.ubuntu.com/3912-1/
CVE: CVE-2018-14038
Published: 2019-03-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7642. Reason: This candidate is a reservation duplicate of CVE-2018-7642. Notes: All CVE users should reference CVE-2018-7642 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-14498
Published: 2019-03-07
Description: get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html; https://access.redhat.com/errata/RHSA-2019:2052
CVE: CVE-2018-14499
Published: 2019-03-07
Description: An issue was found in HYBBS through 2016-03-08. There is an XSS vulnerablity via an article title to post.html.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hyyyp/HYBBS/issues/1; https://github.com/hyyyp/HYBBS/issues/1
CVE: CVE-2018-16804
Published: 2019-03-07
Description: An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Stephen-Tech/UCMS/blob/master/README.md; https://github.com/Stephen-Tech/UCMS/blob/master/README.md
CVE: CVE-2018-16808
Published: 2019-03-07
Description: An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/issues/9449; https://github.com/Dolibarr/dolibarr/issues/9449
CVE: CVE-2018-16809
Published: 2019-03-07
Description: An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/issues/9449; https://github.com/Dolibarr/dolibarr/issues/9449
CVE: CVE-2018-17412
Published: 2019-03-07
Description: zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/seedis/zzcms/blob/master/README.md; https://github.com/seedis/zzcms/blob/master/README.md
CVE: CVE-2018-17413
Published: 2019-03-07
Description: XSS exists in zzcms v8.3 via the /uploadimg_form.php noshuiyin parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/seedis/zzcms-xss/blob/master/README.md; https://github.com/seedis/zzcms-xss/blob/master/README.md
CVE: CVE-2018-17414
Published: 2019-03-07
Description: zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/seedis/zzcms/blob/master/SQL%20injection.md; https://github.com/seedis/zzcms/blob/master/SQL%20injection.md
CVE: CVE-2018-17415
Published: 2019-03-07
Description: zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/seedis/zzcms/blob/master/SQL%20injection%20in%20zs_elite.php.md; https://github.com/seedis/zzcms/blob/master/SQL%20injection%20in%20zs_elite.php.md
CVE: CVE-2018-17416
Published: 2019-03-07
Description: A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/seedis/zzcms/blob/master/SQL%20injection%20in%20%20addclass.md; https://github.com/seedis/zzcms/blob/master/SQL%20injection%20in%20%20addclass.md
CVE: CVE-2018-17418
Published: 2019-03-07
Description: Monstra CMS 3.0.4 allows remote attackers to execute arbitrary PHP code via a mixed-case file extension, as demonstrated by the 123.PhP filename, because plugins\box\filesmanager\filesmanager.admin.php mishandles the forbidden_types variable.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/AlwaysHereFight/monstra_cms-3.0.4--getshell/blob/master/README.md; https://github.com/AlwaysHereFight/monstra_cms-3.0.4--getshell/blob/master/README.md
CVE: CVE-2018-17419
Published: 2019-03-07
Description: An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation, leading to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/miekg/dns/issues/742; https://github.com/miekg/dns/issues/742
CVE: CVE-2018-17420
Published: 2019-03-07
Description: An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/94fzb/zrlog/issues/37; https://github.com/94fzb/zrlog/issues/37
CVE: CVE-2018-17421
Published: 2019-03-07
Description: An issue was discovered in ZrLog 2.0.3. There is stored XSS in the file upload area via a crafted attached/file/ pathname.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/94fzb/zrlog/issues/39; https://github.com/94fzb/zrlog/issues/39
CVE: CVE-2018-17422
Published: 2019-03-07
Description: dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWARD_URL parameter or the html/portlet/ext/common/page_preview_popup.jsp hostname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/dotCMS/core/issues/15286; https://github.com/dotCMS/core/issues/15286
CVE: CVE-2018-17425
Published: 2019-03-07
Description: WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/153; https://github.com/wuzhicms/wuzhicms/issues/153
CVE: CVE-2018-17426
Published: 2019-03-07
Description: WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/154; https://github.com/wuzhicms/wuzhicms/issues/154
CVE: CVE-2018-17429
Published: 2019-03-07
Description: /console/account/manage.php?type=action&action=add in JTBC v3.0(C) has CSRF for adding an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/jetiben/jtbc/issues/4; https://github.com/jetiben/jtbc/issues/4
CVE: CVE-2018-17988
Published: 2019-03-07
Description: LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/AndyRixon/LayerBB/issues/51; https://www.exploit-db.com/exploits/45530/; https://github.com/AndyRixon/LayerBB/issues/51
CVE: CVE-2018-18449
Published: 2019-03-07
Description: EmpireCMS 7.5 allows CSRF for adding a user account via an enews=AddUser action to e/admin/user/ListUser.php, a similar issue to CVE-2018-16339.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/w3irdo001/demo/blob/master/3.html; https://github.com/w3irdo001/demo/blob/master/3.html
CVE: CVE-2018-20710
Published: 2019-03-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6285. Reason: This candidate is a duplicate of CVE-2019-6285. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2019-6285 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-6710
Published: 2019-03-07
Description: Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://alicangonullu.biz/konu/3; https://twitter.com/god3err/status/[PII_REDACTED]32631809; https://www.exploit-db.com/exploits/46240/
CVE: CVE-2019-7175
Published: 2019-03-07
Description: In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; https://github.com/ImageMagick/ImageMagick/commit/1e6a3ace073c9ec9c71e439c111d23c6e66cb6ae
CVE: CVE-2019-7660
Published: 2019-03-07
Description: An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-2; https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-2
CVE: CVE-2019-7661
Published: 2019-03-07
Description: An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-1; https://github.com/0xUhaw/CVE-Bins/tree/master/PHPMyWind/XSS-1
CVE: CVE-2019-8437
Published: 2019-03-07
Description: njiandan-cms through 2013-05-23 has index.php/admin/user_new CSRF to add an administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/beyond7176/njiandan-cms/issues/1; https://github.com/beyond7176/njiandan-cms/issues/1
CVE: CVE-2019-8438
Published: 2019-03-07
Description: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka site_name.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/chekun/DiliCMS/issues/61; https://github.com/chekun/DiliCMS/issues/61
CVE: CVE-2019-8439
Published: 2019-03-07
Description: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka site_domain.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/chekun/DiliCMS/issues/62; https://github.com/chekun/DiliCMS/issues/62
CVE: CVE-2019-8440
Published: 2019-03-07
Description: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/chekun/DiliCMS/issues/63; https://github.com/chekun/DiliCMS/issues/63
CVE: CVE-2019-9117
Published: 2019-03-07
Description: An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNetworkTomographySettings API function, as demonstrated by shell metacharacters in the tomography_ping_number field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNetworkTomographySettings.md; https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNetworkTomographySettings.md
CVE: CVE-2019-9118
Published: 2019-03-07
Description: An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNTPServerSettings.md; https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNTPServerSettings.md
CVE: CVE-2019-9119
Published: 2019-03-07
Description: An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteSettings API function, as demonstrated by shell metacharacters in the staticroute_list field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetStaticRouteSettings.md; https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetStaticRouteSettings.md
CVE: CVE-2019-9120
Published: 2019-03-07
Description: An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWLanACLSettings API function, as demonstrated by shell metacharacters in the wl(0).(0)_maclist field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetWLanACLSettings.md; https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetWLanACLSettings.md
CVE: CVE-2019-9121
Published: 2019-03-07
Description: An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetSmartQoSSettings API function, as demonstrated by shell metacharacters in the smartqos_priority_devices field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetSmartQoSSettings.md; https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetSmartQoSSettings.md
CVE: CVE-2019-9185
Published: 2019-03-07
Description: Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bolt/bolt/blob/v3.6.5/changelog.md; https://github.com/bolt/bolt/pull/7745; https://github.com/bolt/bolt/releases/tag/v3.6.5
CVE: CVE-2019-9598
Published: 2019-03-07
Description: An issue was discovered in Cscms 4.1.0. There is an admin.php/pay CSRF vulnerability that can change the payment account to redirect funds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/chshcms/cscms/issues/4; https://github.com/chshcms/cscms/issues/4
CVE: CVE-2019-9631
Published: 2019-03-08
Description: Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/issues/736
CVE: CVE-2019-9632
Published: 2019-03-08
Description: ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
CVSS Score: 7.5 (HIGH)
References: http://www.iwantacve.cn/index.php/archives/132/; http://www.iwantacve.cn/index.php/archives/132/