deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-6544
Published: 2018-02-20
Description: Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allows remote attackers to inject arbitrary web script or HTML via a dashboard title.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://sourceforge.net/p/itop/code/3662/; http://sourceforge.net/p/itop/tickets/1114/; https://www.htbridge.com/advisory/HTB23268
CVE: CVE-2004-2779
Published: 2018-02-20
Description: id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=304913; https://bugzilla.gnome.org/show_bug.cgi?id=162647; https://sources.debian.org/patches/libid3tag/0.15.1b-13/10_utf16.dpatch/
CVE: CVE-2018-6487
Published: 2018-02-20
Description: Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097; https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097
CVE: CVE-2018-7263
Published: 2018-02-20
Description: The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870608; https://bugzilla.suse.com/show_bug.cgi?id=1081784; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870608
CVE: CVE-2017-17454
Published: 2018-02-20
Description: Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnerability when a user enters invalid UTF-8 characters. These are now going to be discarded in Mahara along with NULL characters and invalid Unicode characters. Mahara will also avoid direct $_GET and $_POST usage where possible, and instead use param_exists() and the correct param_*() function to fetch the expected value.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1732987; https://mahara.org/interaction/forum/topic.php?id=8149; https://reviews.mahara.org/#/c/8191/
CVE: CVE-2017-17455
Published: 2018-02-20
Description: Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in-the-middle attack, to interact with Mahara on the HTTP protocol rather than HTTPS even when an SSL certificate is present.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://bugs.launchpad.net/mahara/+bug/1734767; https://mahara.org/interaction/forum/topic.php?id=8150; https://reviews.mahara.org/#/c/8312/
CVE: CVE-2018-7265
Published: 2018-02-20
Description: Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shish/shimmie2/issues/631; https://github.com/shish/shimmie2/issues/631
CVE: CVE-2017-12415
Published: 2018-02-20
Description: OXID eShop Community Edition before 6.0.0 RC2 (development), 4.10.x before 4.10.5 (maintenance), and 4.9.x before 4.9.10 (legacy), Enterprise Edition before 6.0.0 RC2 (development), 5.2.x before 5.2.10 (legacy), and 5.3.x before 5.3.5 (maintenance), and Professional Edition before 6.0.0 RC2 (development), 4.9.x before 4.9.10 (legacy) and 4.10.x before 4.10.5 (maintenance) allow remote attackers to hijack the cart session of a client via Cross-Site Request Forgery (CSRF) if the following pre-conditions are met: (1) the attacker knows which shop is presently used by the client, (2) the attacker knows the exact time when the customer will add product items to the cart, (3) the attacker knows which product items are already in the cart (has to know their article IDs), and (4) the attacker would be able to trick user into clicking a button (submit form) of an e-mail or remote site within the period of visiting the shop and placing an order.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: https://bugs.oxid-esales.com/view.php?id=6674; https://oxidforge.org/en/security-bulletin-2017-001.html; https://bugs.oxid-esales.com/view.php?id=6674
CVE: CVE-2017-14993
Published: 2018-02-20
Description: OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.11 (legacy), and 5.3.x before 5.3.6 (maintenance), and Professional Edition before 6.0.0 RC3 (development), 4.9.x before 4.9.11 (legacy) and 4.10.x before 4.10.6 (maintenance) allow remote attackers to crawl specially crafted URLs (aka "forced browsing") in order to overflow the database of the shop and consequently make it stop working. Prerequisite: the shop allows rendering empty categories to the storefront via an admin option.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://bugs.oxid-esales.com/view.php?id=6678; https://oxidforge.org/en/security-bulletin-2017-002.html; https://bugs.oxid-esales.com/view.php?id=6678
CVE: CVE-2018-7271
Published: 2018-02-21
Description: An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://github.com/SQYY/CVE/blob/master/MetInfo_G.txt; https://github.com/SQYY/CVE/blob/master/MetInfo_G.txt
CVE: CVE-2018-7272
Published: 2018-02-21
Description: The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://backstage.forgerock.com/knowledge/kb/book/b21824339; https://hansesecure.de/vulnerability-in-am/; https://backstage.forgerock.com/knowledge/kb/book/b21824339
CVE: CVE-2018-7273
Published: 2018-02-21
Description: In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function show_floppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103088; https://lkml.org/lkml/2018/2/20/669; https://www.exploit-db.com/exploits/44325/
CVE: CVE-2018-7274
Published: 2018-02-21
Description: Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103081; https://github.com/YABhq/Quarx/issues/116; http://www.securityfocus.com/bid/103081
CVE: CVE-2018-7276
Published: 2018-02-21
Description: An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html; http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html
CVE: CVE-2018-7277
Published: 2018-02-21
Description: An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html; http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html
CVE: CVE-2018-7278
Published: 2018-02-21
Description: An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html; http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html
CVE: CVE-2015-0262
Published: 2018-02-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-1164
Published: 2018-02-21
Description: This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by improper access controls that allow access to critical functions without authentication. An attacker can use this vulnerability to reboot affected devices, along with other actions. Was ZDI-CAN-4540.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-732
References: https://zerodayinitiative.com/advisories/ZDI-18-135; https://zerodayinitiative.com/advisories/ZDI-18-135
CVE: CVE-2018-1165
Published: 2018-02-21
Description: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20[PII_REDACTED]0803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.
CVSS Score: 7.0 (HIGH)
CWE: CWE-122, CWE-787
References: https://help.joyent.com/hc/en-us/articles/[PII_REDACTED]28; https://www.oracle.com/security-alerts/cpuapr2020.html; https://zerodayinitiative.com/advisories/ZDI-18-158
CVE: CVE-2018-1166
Published: 2018-02-21
Description: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20[PII_REDACTED]0803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMBIOC_TREE_RELE ioctl. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4984.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-20
References: https://help.joyent.com/hc/en-us/articles/[PII_REDACTED]28; https://zerodayinitiative.com/advisories/ZDI-18-159; https://help.joyent.com/hc/en-us/articles/[PII_REDACTED]28
CVE: CVE-2018-1168
Published: 2018-02-21
Description: This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of the access controls for the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. Was ZDI-CAN-5097.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-732
References: https://library.e.abb.com/public/7a88a74b12bb492ea138b1f2365d00f6/ABBVU-PGGA-33888_ABB_SoftwareVulnerabilityHandlingAdvisory_Rev_A.pdf?x-sign=MJfu9cHtRUUubpLAYzyWFTmW5W+mg3kZ/nm7F/Jw5HlFTQf4eNyfLAgE8HozRJEC; https://zerodayinitiative.com/advisories/ZDI-18-141; https://library.e.abb.com/public/7a88a74b12bb492ea138b1f2365d00f6/ABBVU-PGGA-33888_ABB_SoftwareVulnerabilityHandlingAdvisory_Rev_A.pdf?x-sign=MJfu9cHtRUUubpLAYzyWFTmW5W+mg3kZ/nm7F/Jw5HlFTQf4eNyfLAgE8HozRJEC
CVE: CVE-2013-0267
Published: 2018-02-21
Description: The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2, 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin, manageGroup, resourceGrant, or userGrant permissions to gain privileges, cause a denial of service, or conduct cross-site scripting (XSS) attacks by leveraging improper data validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-264
References: https://github.com/apache/vcl/commit/56c0f040056d6ad8693b20cfd3351367c2ffeabc#diff-2567a5ec9705eb7ac2c984033e06189d; https://lists.apache.org/thread.html/632da9e45fce333f21782f1fe10b1d8e77a63811a34fe8e286dedc99%40%3Ccommits.vcl.apache.org%3E; https://lists.apache.org/thread.html/944592973c91cd106a42095271c3f6c7ab9c8d70077b8c6a8d4d92d0%40%3Ccommits.vcl.apache.org%3E
CVE: CVE-2015-0203
Published: 2018-02-21
Description: The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, or (3) a session-gap control before a corresponding session-attach.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-19
References: http://www.securityfocus.com/bid/72030; https://access.redhat.com/errata/RHBA-2016:1500; https://issues.apache.org/jira/browse/QPID-6310
CVE: CVE-2015-6569
Published: 2018-02-21
Description: Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-476
References: http://www.securityfocus.com/bid/103132; https://floodlight.atlassian.net/wiki/spaces/floodlightcontroller/pages/24805419/Floodlight+v1.2; https://github.com/floodlight/floodlight/pull/563
CVE: CVE-2018-5716
Published: 2018-02-21
Description: An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/edit_lf_get_data URI, the attacker can retrieve the content of a file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://www.0x90.zone/web/path-traversal/2018/02/16/Path-Traversal-Reprise-LM.html; http://www.0x90.zone/web/path-traversal/2018/02/16/Path-Traversal-Reprise-LM.html
CVE: CVE-2018-7260
Published: 2018-02-21
Description: Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103099; https://github.com/phpmyadmin/phpmyadmin/commit/d2886a3; https://udiniya.wordpress.com/2018/02/21/a-tale-of-stealing-session-cookie-in-phpmyadmin/
CVE: CVE-2013-4891
Published: 2018-02-21
Description: The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an unclosed HTML tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bcit-ci/CodeIgniter/issues/4020; https://nealpoole.com/blog/2013/07/codeigniter-21-xss-clean-filter-bypass/; https://www.codeigniter.com/userguide2/changelog.html
CVE: CVE-2015-5314
Published: 2018-02-21
Description: The eap_pwd_process function in eap_server/eap_server_pwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with (1) an internal EAP server or (2) a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://w1.fi/security/2015-7/eap-pwd-missing-last-fragment-length-validation.txt; http://www.openwall.com/lists/oss-security/2015/11/10/10; http://www.ubuntu.com/usn/USN-2808-1
CVE: CVE-2015-5315
Published: 2018-02-21
Description: The eap_pwd_process function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service (process termination) via a large final fragment in an EAP-pwd message.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://w1.fi/security/2015-7/eap-pwd-missing-last-fragment-length-validation.txt; http://www.openwall.com/lists/oss-security/2015/11/10/10; http://www.ubuntu.com/usn/USN-2808-1
CVE: CVE-2015-5316
Published: 2018-02-21
Description: The eap_pwd_perform_confirm_exchange function in eap_peer/eap_pwd.c in wpa_supplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an EAP-pwd Confirm message followed by the Identity exchange.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://w1.fi/security/2015-8/eap-pwd-unexpected-confirm.txt; http://www.openwall.com/lists/oss-security/2015/11/10/11; http://www.securityfocus.com/bid/77538
CVE: CVE-2015-5725
Published: 2018-02-21
Description: SQL injection vulnerability in the offset method in the Active Record class in CodeIgniter before 2.2.4 allows remote attackers to execute arbitrary SQL commands via vectors involving the offset variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://forum.codeigniter.com/thread-62743.html; https://github.com/bcit-ci/CodeIgniter/commit/0dde92def6b9f276f05ff77abb07ead318f9ec23; https://github.com/bcit-ci/CodeIgniter/issues/4020
CVE: CVE-2016-0343
Published: 2018-02-21
Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 111784.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21980229; https://exchange.xforce.ibmcloud.com/vulnerabilities/111784; http://www-01.ibm.com/support/docview.wss?uid=swg21980229
CVE: CVE-2016-0344
Published: 2018-02-21
Description: Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://exchange.xforce.ibmcloud.com/vulnerabilities/111785; http://www-01.ibm.com/support/docview.wss?uid=swg21980234; http://exchange.xforce.ibmcloud.com/vulnerabilities/111785
CVE: CVE-2016-0345
Published: 2018-02-21
Description: IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote authenticated users to obtain the installation path via vectors involving Birt report rendering. IBM X-Force ID: 111786.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://exchange.xforce.ibmcloud.com/vulnerabilities/111786; http://www-01.ibm.com/support/docview.wss?uid=swg21980233; http://exchange.xforce.ibmcloud.com/vulnerabilities/111786
CVE: CVE-2016-0348
Published: 2018-02-21
Description: Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www-01.ibm.com/support/docview.wss?uid=swg21980237; https://exchange.xforce.ibmcloud.com/vulnerabilities/111813; http://www-01.ibm.com/support/docview.wss?uid=swg21980237
CVE: CVE-2016-0351
Published: 2018-02-21
Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID: 111890.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21989198; https://exchange.xforce.ibmcloud.com/vulnerabilities/111890; http://www-01.ibm.com/support/docview.wss?uid=swg21989198
CVE: CVE-2016-0366
Published: 2018-02-21
Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attackers to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 112071.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21986260; https://exchange.xforce.ibmcloud.com/vulnerabilities/112071; http://www-01.ibm.com/support/docview.wss?uid=swg21986260
CVE: CVE-2016-0367
Published: 2018-02-21
Description: IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21989198; https://exchange.xforce.ibmcloud.com/vulnerabilities/112072; http://www-01.ibm.com/support/docview.wss?uid=swg21989198
CVE: CVE-2016-0369
Published: 2018-02-21
Description: XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.
CVSS Score: 2.7 (LOW)
CWE: CWE-611
References: http://www-01.ibm.com/support/docview.wss?uid=swg21988727; https://exchange.xforce.ibmcloud.com/vulnerabilities/112088; http://www-01.ibm.com/support/docview.wss?uid=swg21988727
CVE: CVE-2018-7261
Published: 2018-02-21
Description: There are multiple Persistent XSS vulnerabilities in Radiant CMS 1.1.4. They affect Personal Preferences (Name and Username) and Configuration (Site Title, Dev Site Domain, Page Parts, and Page Fields).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/541798/100/0/threaded; http://www.securityfocus.com/bid/103080; http://www.securityfocus.com/archive/1/541798/100/0/threaded
CVE: CVE-2018-7280
Published: 2018-02-21
Description: The Ninja Forms plugin before 3.2.14 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/ninja-forms/#developers; https://wordpress.org/plugins/ninja-forms/#developers
CVE: CVE-2017-12161
Published: 2018-02-21
Description: It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-602, CWE-640
References: https://bugzilla.redhat.com/show_bug.cgi?id=1484564; https://github.com/keycloak/keycloak-documentation/pull/268/commits/a2b58aadee42af2c375b72e86dffc2cf23cc3770; https://bugzilla.redhat.com/show_bug.cgi?id=1484564