deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15573
Published: 2018-08-20
Description: An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter. By default, the web interface is on port 5054, and does not require authentication. NOTE: the vendor has stated "We do not consider this a vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2021/Dec/18; https://bittherapy.net/rce-with-arbitrary-file-write-and-xss-in-reprise-license-manager/; http://seclists.org/fulldisclosure/2021/Dec/18
CVE: CVE-2018-15574
Published: 2018-08-20
Description: An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/edit_lf_get_data lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bittherapy.net/rce-with-arbitrary-file-write-and-xss-in-reprise-license-manager/; https://reprisesoftware.com/docs/whats-new.html; https://bittherapy.net/rce-with-arbitrary-file-write-and-xss-in-reprise-license-manager/
CVE: CVE-2018-15594
Published: 2018-08-20
Description: arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5800dc5c19f34e6e03b5adab1282535cb102fafd; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html; http://www.securityfocus.com/bid/105120
CVE: CVE-2011-2765
Published: 2018-08-20
Description: pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://bugs.debian.org/631912; https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e; https://pythonhosted.org/Pyro/12-changes.html
CVE: CVE-2018-5243
Published: 2018-08-20
Description: The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/105062; http://www.securitytracker.com/id/1041527; https://support.symantec.com/en_US/article.SYMSA1458.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-91
References: https://access.redhat.com/errata/RHSA-2019:0362; https://access.redhat.com/errata/RHSA-2019:0364; https://access.redhat.com/errata/RHSA-2019:0365
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's password being revealed. Attacker can log in as that user. This attack appear to be exploitable via an attacker reading the web server log. This vulnerability appears to have been fixed in 5.4.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-200
References: http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html; http://www.openmicroscopy.org/security/advisories/2018-SV1-post-password/; http://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html; https://www.openmicroscopy.org/security/advisories/2018-SV3-modify-user-password/; https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administrative access to server and may be able to disable it. This vulnerability appears to have been fixed in 5.4.7.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200
References: https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html; https://www.openmicroscopy.org/security/advisories/2018-SV2-script-name-uuid/; https://www.openmicroscopy.org/2018/07/26/omero-5-4-7.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contains a CWE-476: NULL Pointer Dereference vulnerability in Triggering undefined behavior at jerry-core/ecma/builtin-objects/typedarray/ecma-builtin-typedarray-prototype.c:598 (passing NULL to memcpy as 2nd argument) results in null pointer dereference (segfault) at jerry-core/jmem/jmem-heap.c:463 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute specially crafted javascript code. This vulnerability appears to have been fixed in after commit 87897849f6879df10e8ad68a41bf8cf507edf710.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/jerryscript-project/jerryscript/issues/2435; https://github.com/jerryscript-project/jerryscript/issues/2435
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploitable via the victim openning a crafted compressed file. This vulnerability appears to have been fixed in 1.8-pre2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://bugs.debian.org/904819; https://lists.debian.org/debian-lts-announce/2018/09/msg00016.html; https://lists.nongnu.org/archive/html/zutils-bug/2018-08/msg00000.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/20; https://github.com/bg5sbk/MiniCMS/issues/20
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce. This attack appear to be exploitable via Specially crafted SVG file.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/08/05/LatexDraw-XXE/; https://github.com/arnobl/latexdraw/issues/10; https://0dd.zone/2018/08/05/LatexDraw-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be exploitable via Malicious input passed in GET parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0dd.zone/2018/08/05/OpenCart-Overclocked-Reflected-XSS/; https://github.com/villagedefrance/OpenCart-Overclocked/issues/190; https://0dd.zone/2018/08/05/OpenCart-Overclocked-Reflected-XSS/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://0dd.zone/2018/08/05/YesWiki-Object-Injection/; https://github.com/YesWiki/yeswiki/issues/356; https://0dd.zone/2018/08/05/YesWiki-Object-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/; https://github.com/Ysurac/FlightAirMap/issues/410; https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/08/05/rdf4j-XXE/; https://github.com/eclipse/rdf4j/issues/1056; https://0dd.zone/2018/08/05/rdf4j-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO lh-ehr version <REL-2.0.0 contains an Authenticated Local File Disclosure vulnerability in Importing of templates allows local file disclosure that can result in Disclosure of sensitive files on the server. This attack appear to be exploitable via User controlled variable in import templates function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://0dd.zone/2018/08/05/lh-ehr-Authenticated-Local-File-Disclosure/; https://github.com/LibreHealthIO/lh-ehr/issues/1210; https://0dd.zone/2018/08/05/lh-ehr-Authenticated-Local-File-Disclosure/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO LH-EHR version REL-2.0.0 contains an Authenticated Unrestricted File Write vulnerability in Import template that can result in write files with malicious content and may lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write/; https://github.com/LibreHealthIO/lh-ehr/issues/1211; https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of service. This attack appear to be exploitable via User controlled parameter.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20, CWE-22
References: https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/; https://github.com/LibreHealthIO/lh-ehr/issues/1212; https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Deletion/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP/; https://github.com/LibreHealthIO/lh-ehr/issues/1213; https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Write in letter.php (2) vulnerability in Patient file letter functions that can result in Write files with malicious content and may lead to remote code execution. This attack appear to be exploitable via User controlled input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP-2/; https://github.com/LibreHealthIO/lh-ehr/issues/1214; https://0dd.zone/2018/08/07/lh-ehr-Authenticated-File-Write-Letter-PHP-2/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: LibreHealthIO lh-ehr version REL-2.0.0 contains a SQL Injection vulnerability in Show Groups Popup SQL query functions that can result in Ability to perform malicious database queries. This attack appear to be exploitable via User controlled parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://0dd.zone/2018/08/08/lh-ehr-Authenticated-SQL-Injection/; https://github.com/LibreHealthIO/lh-ehr/issues/1215; https://0dd.zone/2018/08/08/lh-ehr-Authenticated-SQL-Injection/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted XML file.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/08/08/stroom-XXE/; https://github.com/gchq/stroom/issues/813; https://0dd.zone/2018/08/08/stroom-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file. This vulnerability appears to have been fixed in after commit 89f855d.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/08/08/JabRef-XXE/; https://github.com/JabRef/jabref/issues/4229; https://0dd.zone/2018/08/08/JabRef-XXE/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c; https://gist.github.com/Lz1y/3388fa886a3e10edd2a7e93d3c3e5b6c
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
CVSS Score: 5.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html; http://www.securityfocus.com/bid/105151
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. This vulnerability appears to have been fixed in 2.4.67.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://jsish.org/fossil/jsi/tktview/3b8f95574f2c9dddf5ffea71e0086b2e6f6dd71e; https://jsish.org/fossil/jsi/tktview/3b8f95574f2c9dddf5ffea71e0086b2e6f6dd71e
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2[PII_REDACTED].
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/pallets/flask/pull/2691; https://github.com/pallets/flask/releases/tag/0.12.3; https://lists.debian.org/debian-lts-announce/2019/08/msg00025.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function that can result in Arbitrary code execution, but no proof-of-concept exploit is currently published.. This vulnerability appears to have been fixed in after commit fdfafb510b1a38f727e920dccbeeb638d39a8e60; stable release 1.22.0 and later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105188; https://github.com/rust-lang/rust/commit/f71b37bc28326e272a37b938e835d4f99113eec2; https://github.com/rust-lang/rust/issues/44800
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED].  Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED].  Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/DaveGamble/cJSON/issues/267; https://github.com/DaveGamble/cJSON/issues/267
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON library is used this could be either local or over a network. This vulnerability appears to have been fixed in 1.7.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://github.com/DaveGamble/cJSON/issues/241; https://github.com/DaveGamble/cJSON/issues/241
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Dave Gamble cJSON version 1.7.3 and earlier contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON library. If application provides network interface then can be exploited over a network, otherwise just local.. This vulnerability appears to have been fixed in 1.7.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/DaveGamble/cJSON/issues/248; https://github.com/DaveGamble/cJSON/issues/248
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file' parameter in line #43 of interface/fax/fax_view.php that can result in The vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.. This attack appear to be exploitable via The victim must visit on a specially crafted URL..
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/blob/1b495b0b3cd16daf1e5f085145d9e19dea479c7f/interface/fax/fax_view.php#L43; https://github.com/openemr/openemr/issues/1781; https://github.com/openemr/openemr/blob/1b495b0b3cd16daf1e5f085145d9e19dea479c7f/interface/fax/fax_view.php#L43
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: OpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan' parameter in line #41 of interface/fax/fax_view.php that can result in The vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.. This attack appear to be exploitable via The victim must visit on a specially crafted URL..
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/blob/1b495b0b3cd16daf1e5f085145d9e19dea479c7f/interface/fax/fax_view.php#L41; https://github.com/openemr/openemr/issues/1781; https://github.com/openemr/openemr/blob/1b495b0b3cd16daf1e5f085145d9e19dea479c7f/interface/fax/fax_view.php#L41
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2014-5462.  Reason: This candidate is a reservation duplicate of CVE-2014-5462.  Notes: All CVE users should reference CVE-2014-5462 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vulnerability in dequote() that can result in dequote() function returns 1-byte allocation if initial length is 0, leading to buffer overflow. This attack appear to be exploitable via specially crafted .pc file. This vulnerability appears to have been fixed in 1.5.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://git.dereferenced.org/pkgconf/pkgconf/pulls/3; https://git.dereferenced.org/pkgconf/pkgconf/pulls/3
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted Jpeg Image can trigger double free. This vulnerability appears to have been fixed in after commit ac16bdf2d41724b5a65255d4c28fb0ec46bc42f5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://github.com/libgd/libgd/issues/447; https://lists.debian.org/debian-lts-announce/2019/01/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CZ2QADQTKRHTGB2AHD7J4QQNDLBEMM6/
CVE: CVE-2[PII_REDACTED]
Published: 2018-08-20
Description: soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This attack appear to be exploitable via victim must open maliocius file in soundstretch utility.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://gitlab.com/soundtouch/soundtouch/issues/6; https://gitlab.com/soundtouch/soundtouch/issues/6