deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-2293
Published: 2018-03-26
Description: Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitrary PHP code via crafted serialized data in the (1) authentication_method_ser or (2) authentication_info_ser parameter to index.php, or (3) zikulaMobileTheme parameter to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://karmainsecurity.com/KIS-2014-02; https://exchange.xforce.ibmcloud.com/vulnerabilities/91786; https://exchange.xforce.ibmcloud.com/vulnerabilities/91787
CVE: CVE-2014-2312
Published: 2018-03-26
Description: The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2014/03/08/4; http://www.openwall.com/lists/oss-security/2014/03/09/2; http://www.openwall.com/lists/oss-security/2014/03/08/4
CVE: CVE-2015-5039
Published: 2018-03-26
Description: The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.
CVSS Score: 7.4 (HIGH)
CWE: CWE-310
References: http://www-01.ibm.com/support/docview.wss?uid=swg21976566; https://exchange.xforce.ibmcloud.com/vulnerabilities/106715; http://www-01.ibm.com/support/docview.wss?uid=swg21976566
CVE: CVE-2015-5045
Published: 2018-03-26
Description: The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21982895; https://exchange.xforce.ibmcloud.com/vulnerabilities/106938; http://www-01.ibm.com/support/docview.wss?uid=swg21982895
CVE: CVE-2015-7401
Published: 2018-03-26
Description: IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by guessing the document id. IBM X-Force ID: 107106.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21977425; https://exchange.xforce.ibmcloud.com/vulnerabilities/107106; http://www-01.ibm.com/support/docview.wss?uid=swg21977425
CVE: CVE-2015-7423
Published: 2018-03-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21971543; http://www.securityfocus.com/bid/103687; https://exchange.xforce.ibmcloud.com/vulnerabilities/107771
CVE: CVE-2015-7424
Published: 2018-03-26
Description: IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information by leveraging Catalogs access. IBM X-Force ID: 107780.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21971542; https://exchange.xforce.ibmcloud.com/vulnerabilities/107780; http://www-01.ibm.com/support/docview.wss?uid=swg21971542
CVE: CVE-2015-7432
Published: 2018-03-26
Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and parameter.txt. IBM X-Force ID: 107861.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21974558; https://exchange.xforce.ibmcloud.com/vulnerabilities/107861; http://www-01.ibm.com/support/docview.wss?uid=swg21974558
CVE: CVE-2015-7433
Published: 2018-03-26
Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107862.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21974556; https://exchange.xforce.ibmcloud.com/vulnerabilities/107862; http://www-01.ibm.com/support/docview.wss?uid=swg21974556
CVE: CVE-2015-7434
Published: 2018-03-26
Description: IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107863.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21974559; https://exchange.xforce.ibmcloud.com/vulnerabilities/107863; http://www-01.ibm.com/support/docview.wss?uid=swg21974559
CVE: CVE-2018-1186
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1187
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerability in the Network Configuration page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1188
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1189
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1201
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1202
Published: 2018-03-26
Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1203
Published: 2018-03-26
Description: In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1204
Published: 2018-03-26
Description: Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary code with root privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-1213
Published: 2018-03-26
Description: Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2018/Mar/50; http://www.securityfocus.com/bid/103033; https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
CVE: CVE-2018-7543
Published: 2018-03-26
Description: Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://snapcreek.com/duplicator/docs/changelog/?lite; https://www.exploit-db.com/exploits/44288/; https://snapcreek.com/duplicator/docs/changelog/?lite
CVE: CVE-2018-1348
Published: 2018-03-26
Description: NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/103530; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; http://www.securityfocus.com/bid/103530
CVE: CVE-2018-1349
Published: 2018-03-26
Description: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration.
CVSS Score: 2.3 (LOW)
CWE: CWE-532
References: http://www.securityfocus.com/bid/103531; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; http://www.securityfocus.com/bid/103531
CVE: CVE-2018-1350
Published: 2018-03-26
Description: The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration.
CVSS Score: 2.3 (LOW)
CWE: CWE-532
References: http://www.securityfocus.com/bid/103532; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; http://www.securityfocus.com/bid/103532
CVE: CVE-2018-7673
Published: 2018-03-26
Description: The NetIQ Identity Manager communication channel, in versions prior to 4.7, is susceptible to a DoS attack.
CVSS Score: 5.1 (MEDIUM)
References: http://www.securityfocus.com/bid/103533; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; http://www.securityfocus.com/bid/103533
CVE: CVE-2017-18249
Published: 2018-03-26
Description: The add_free_nid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service (race condition) or possibly have unspecified other impact via concurrent threads.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=30a61ddf8117c26ac5b295e1233eaa9629a94ca3; http://www.securitytracker.com/id/1041432; https://github.com/torvalds/linux/commit/30a61ddf8117c26ac5b295e1233eaa9629a94ca3
CVE: CVE-2017-12410
Published: 2018-03-26
Description: It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of arbitrary programs with "NT AUTHORITY\SYSTEM" privileges.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/archive/1/541884/100/0/threaded; http://www.securityfocus.com/archive/1/541884/100/0/threaded
CVE: CVE-2017-12815
Published: 2018-03-26
Description: Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain/api/content/JavaStart.jar and is callable from an arbitrary website using <object> and/or <appletHTML> tags. Successful exploitation results in file creation/modification/deletion in the operating system and with privileges of the user that ran the Java applet.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/541885/100/0/threaded; http://www.securityfocus.com/archive/1/541885/100/0/threaded
CVE: CVE-2018-7658
Published: 2018-03-26
Description: NTSServerSvc.exe in the server in Softros Network Time System 2.3.4 allows remote attackers to cause a denial of service (daemon crash) by sending exactly 11 bytes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/146645/Softros-Network-Time-System-Server-2.3.4-Denial-Of-Service.html; https://www.exploit-db.com/exploits/44255/; http://packetstormsecurity.com/files/146645/Softros-Network-Time-System-Server-2.3.4-Denial-Of-Service.html
CVE: CVE-2018-8802
Published: 2018-03-26
Description: SQL injection vulnerability in the management interface in ePortal  Manager allows remote attackers to execute arbitrary SQL commands  via unspecified parameters.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49; https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=49
CVE: CVE-2017-18250
Published: 2018-03-27
Description: An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/793; https://github.com/ImageMagick/ImageMagick/issues/793
CVE: CVE-2017-18251
Published: 2018-03-27
Description: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/809; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/809
CVE: CVE-2017-18252
Published: 2018-03-27
Description: An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion failure and application exit in ReplaceImageInList) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/ImageMagick/ImageMagick/issues/802; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-18253
Published: 2018-03-27
Description: An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/794; https://github.com/ImageMagick/ImageMagick/issues/794
CVE: CVE-2017-18254
Published: 2018-03-27
Description: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/808; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/808
CVE: CVE-2018-9032
Published: 2018-03-27
Description: An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.exploit-db.com/exploits/44378/; https://www.youtube.com/watch?v=Wmm4p8znS3s; https://www.exploit-db.com/exploits/44378/
CVE: CVE-2018-9039
Published: 2018-03-27
Description: In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/OctopusDeploy/Issues/issues/4407; https://octopus.com/downloads/compare?from=2018.3.6&to=2018.3.7; https://github.com/OctopusDeploy/Issues/issues/4407
CVE: CVE-2018-9040
Published: 2018-03-27
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060c4; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060c4
CVE: CVE-2018-9041
Published: 2018-03-27
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402004; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402004
CVE: CVE-2018-9042
Published: 2018-03-27
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402000; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c402000
CVE: CVE-2018-9043
Published: 2018-03-27
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060d0; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060d0
CVE: CVE-2018-9044
Published: 2018-03-27
Description: In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060cc; https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win10_x64.sys-0x9c4060cc
CVE: CVE-2018-9045
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002849.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002849; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002849
CVE: CVE-2018-9046
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282d.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282d; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282d
CVE: CVE-2018-9047
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002841.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002841; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002841
CVE: CVE-2018-9048
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282C; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100282C