deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18064
Published: 2018-10-08
Description: cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://gitlab.freedesktop.org/cairo/cairo/issues/341; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E; https://gitlab.freedesktop.org/cairo/cairo/issues/341
CVE: CVE-2018-18065
Published: 2018-10-08
Description: _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/106265; https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf; https://dumpco.re/blog/net-snmp-5.7.3-remote-dos
CVE: CVE-2018-18066
Published: 2018-10-08
Description: snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://dumpco.re/blog/net-snmp-5.7.3-remote-dos; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
CVE: CVE-2016-7475
Published: 2018-10-08
Description: Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K01587042; https://support.f5.com/csp/article/K01587042
CVE: CVE-2018-14656
Published: 2018-10-08
Description: A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securitytracker.com/id/1041804; https://bugs.chromium.org/p/project-zero/issues/detail?id=1650; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14656
CVE: CVE-2018-18069
Published: 2018-10-08
Description: process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (such as locale_file_name_en) in an authenticated theme-localization.php request to wp-admin/admin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0x62626262.wordpress.com/2018/10/08/sitepress-multilingual-cms-plugin-unauthenticated-stored-xss/; https://0x62626262.wordpress.com/2018/10/08/sitepress-multilingual-cms-plugin-unauthenticated-stored-xss/
CVE: CVE-2018-18070
Published: 2018-10-09
Description: An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route, which will cause a boot loop. (Under certain circumstances, it is possible to quickly overwrite the malicious route to regain the stability of the system.)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-835
References: https://vuldb.com/?id.125080; https://vuldb.com/?id.125080
CVE: CVE-2018-18071
Published: 2018-10-09
Description: An issue was discovered in the Daimler Mercedes-Benz Me app 2.11.0-846 for iOS. The encrypted Connected Vehicle API data exchange between the app and a server might be intercepted. The app can be used to operate the Remote Parking Pilot, unlock the vehicle, or obtain sensitive information such as latitude, longitude, and direction of travel.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://vuldb.com/?id.125081; https://www.scip.ch/en/?labs.20180405; https://vuldb.com/?id.125081
CVE: CVE-2018-12474
Published: 2018-10-09
Description: Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Open Build Service: versions prior to 51a17c553b6ae2598820b7a90fd0c11502a49106.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.suse.com/show_bug.cgi?id=1107507; https://github.com/openSUSE/obs-service-tar_scm/pull/254; https://bugzilla.suse.com/show_bug.cgi?id=1107507
CVE: CVE-2018-12477
Published: 2018-10-09
Description: A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause deletion of directories by tricking obs-service-refresh_patches to delete them. Affected releases are openSUSE Open Build Service: versions prior to d6244245dda5367767efc989446fe4b5e4609cce.
CVSS Score: 3.5 (LOW)
CWE: CWE-93, CWE-93
References: https://bugzilla.suse.com/show_bug.cgi?id=1108189; https://lwn.net/Articles/766535/; https://bugzilla.suse.com/show_bug.cgi?id=1108189
CVE: CVE-2018-12478
Published: 2018-10-09
Description: A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.suse.com/show_bug.cgi?id=1108280; https://bugzilla.suse.com/show_bug.cgi?id=1108280
CVE: CVE-2018-12479
Published: 2018-10-09
Description: A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.suse.com/show_bug.cgi?id=1108435; https://bugzilla.suse.com/show_bug.cgi?id=1108435
CVE: CVE-2018-2466
Published: 2018-10-09
Description: In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105529; https://launchpad.support.sap.com/#/notes/2618337; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2467
Published: 2018-10-09
Description: In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105544; https://launchpad.support.sap.com/#/notes/2623618; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2468
Published: 2018-10-09
Description: Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105527; https://launchpad.support.sap.com/#/notes/2678615; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2469
Published: 2018-10-09
Description: Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105526; https://launchpad.support.sap.com/#/notes/2679789; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2470
Published: 2018-10-09
Description: In SAP NetWeaver Application Server for ABAP, from 7.0 to 7.02, 7.30, 7.31, 7.40 and from 7.50 to 7.53, applications do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105551; https://launchpad.support.sap.com/#/notes/2684760; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2471
Published: 2018-10-09
Description: Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105530; https://launchpad.support.sap.com/#/notes/2654905; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2472
Published: 2018-10-09
Description: SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 (Web Intelligence DHTML client) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105531; https://launchpad.support.sap.com/#/notes/2667103; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2474
Published: 2018-10-09
Description: SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105534; https://launchpad.support.sap.com/#/notes/2696889; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=500633095
CVE: CVE-2018-2475
Published: 2018-10-09
Description: Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing network isolation a shoot's apiserver can access services/endpoints in the private network of its corresponding seed cluster. Combined with other minor Kubernetes security issues, the missing network isolation theoretically can lead to compromise other shoot or seed clusters in the "Gardener" context. The issue is rated high due to the high impact of a potential exploitation in "Gardener" context. This was fixed in Gardener release 0.12.4.
CVSS Score: 8.5 (HIGH)
References: http://www.securityfocus.com/bid/105579; https://groups.google.com/forum/#%21topic/gardener/OjfKEe1LwXo; https://launchpad.support.sap.com/#/notes/2699726
CVE: CVE-2018-7928
Published: 2018-10-09
Description: There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an attacker can replace the old account with a new one through special steps by exploit this vulnerability. As a result, the FRP function is bypassed.
CVSS Score: 4.6 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180930-01-mycloud-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180930-01-mycloud-en
CVE: CVE-2018-14080
Published: 2018-10-09
Description: An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-dispositivo/; https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-dispositivo/
CVE: CVE-2018-14081
Published: 2018-10-09
Description: An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin password and the WPA key, are stored in cleartext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-dispositivo/; https://blog.nivel4.com/investigaciones/nuevas-vulnerabilidades-en-router-d-link-permiten-tomar-control-remoto-del-dispositivo/
CVE: CVE-2018-14649
Published: 2018-10-09
Description: It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell and escalate privileges. Once an attacker has successfully connected to this debug shell they will be able to execute arbitrary commands remotely. These commands will run with the same privileges as of user executing the application which is using python-werkzeug with debug shell mode enabled. In - Red Hat Ceph Storage 2 and 3, ceph-isci-cli package runs python-werkzeug library with root level permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/105434; https://access.redhat.com/articles/3623521; https://access.redhat.com/errata/RHSA-2018:2837
CVE: CVE-2018-15542
Published: 2018-10-09
Description: An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode.  NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: https://gist.github.com/tanprathan/18d0f692a2485acfb5693e2f6dabeb5d; https://gist.github.com/tanprathan/18d0f692a2485acfb5693e2f6dabeb5d
CVE: CVE-2018-15543
Published: 2018-10-09
Description: An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in conjunction with the Android keyGenerator class is not implemented. In other words, an attacker could authenticate with an arbitrary fingerprint.  NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://gist.github.com/tanprathan/d286c0d5b02e[PII_REDACTED]74304a1ccd; https://gist.github.com/tanprathan/d286c0d5b02e[PII_REDACTED]74304a1ccd
CVE: CVE-2018-18029
Published: 2018-10-09
Description: Navigate CMS has Stored XSS via the navigate.php Title field in an edit action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866; https://bitbucket.org/navigatecms/navigatecms/issues/3/stored-xss-in-navigatecms; https://bitbucket.org/navigatecms/navigatecms/commits/586e67ce1c43d459f6b00221fb30be26fcbfb866
CVE: CVE-2018-18074
Published: 2018-10-09
Description: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://docs.python-requests.org/en/master/community/updates/#release-and-version-history; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.html; https://access.redhat.com/errata/RHSA-2019:2035
CVE: CVE-2018-18075
Published: 2018-10-09
Description: WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://seccops.com/wikidforum-2-20-multiple-sql-injection-vulnerabilities/; https://www.exploit-db.com/exploits/45564/; https://seccops.com/wikidforum-2-20-multiple-sql-injection-vulnerabilities/
CVE: CVE-2018-18082
Published: 2018-10-09
Description: XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/6; https://github.com/caokang/waimai/issues/6
CVE: CVE-2018-18083
Published: 2018-10-09
Description: An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Mochazz/Mochazz.github.io/blob/master/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/index.html; https://mochazz.github.io/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/; https://github.com/Mochazz/Mochazz.github.io/blob/master/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/index.html
CVE: CVE-2018-18084
Published: 2018-10-09
Description: An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Mochazz/Mochazz.github.io/blob/master/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/index.html; https://mochazz.github.io/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/; https://github.com/Mochazz/Mochazz.github.io/blob/master/2018/09/30/DuomiCms3.0%E6%9C%80%E6%96%B0%E7%89%88%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98/index.html
CVE: CVE-2018-18086
Published: 2018-10-09
Description: EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/SukaraLin/php_code_audit_project/issues/1; https://github.com/SukaraLin/php_code_audit_project/issues/1
CVE: CVE-2018-18087
Published: 2018-10-09
Description: The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the Image URL field in the portfolio editor. The vulnerability is triggered by visiting /portfolio/${project_title}.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Bixie/pagekit-portfolio/issues/44; https://github.com/Bixie/pagekit-portfolio/issues/44
CVE: CVE-2018-18088
Published: 2018-10-09
Description: OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/uclouvain/openjpeg/issues/1152; https://lists.debian.org/debian-lts-announce/2018/11/msg00018.html; https://usn.ubuntu.com/4109-1/
CVE: CVE-2018-18190
Published: 2018-10-09
Description: An issue was discovered in GoPro gpmf-parser before 1.2.1. There is a divide-by-zero error in GPMF_ScaledData in GPMF_parser.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/gopro/gpmf-parser/issues/41; https://github.com/gopro/gpmf-parser/releases/tag/v1.2.1; https://github.com/gopro/gpmf-parser/issues/41
CVE: CVE-2018-18191
Published: 2018-10-09
Description: Cross-site request forgery (CSRF) vulnerability in /admin.php?c=member&m=edit&uid=1 in dayrui FineCms 5.4 allows remote attackers to change the administrator's password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/49/; http://www.iwantacve.cn/index.php/archives/49/
CVE: CVE-2018-18192
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample() in DLS.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-18193
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-18194
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in DLS::Region::GetSample() in DLS.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-18195
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is an FPE (divide-by-zero error) in DLS::Sample::Sample in DLS.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-18196
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer over-read in RIFF::List::GetListTypeString in RIFF.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-18197
Published: 2018-10-09
Description: An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README-1008.md
CVE: CVE-2018-6977
Published: 2018-10-09
Description: VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop in a 3D-rendering shader. Successfully exploiting this issue may allow an attacker with normal user privileges in the guest to make the VM unresponsive, and in some cases, possibly result other VMs on the host or the host itself becoming unresponsive.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/105549; http://www.securitytracker.com/id/1041821; http://www.securitytracker.com/id/1041822
CVE: CVE-2018-10610
Published: 2018-10-09
Description: An out-of-bounds vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03
CVE: CVE-2018-10614
Published: 2018-10-09
Description: An XXE vulnerability in LeviStudioU, Versions 1.8.29 and 1.8.44 can be exploited when the application processes specially crafted project XML files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611, CWE-611
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03
CVE: CVE-2018-17855
Published: 2018-10-09
Description: An issue was discovered in Joomla! before 3.8.13. If an attacker gets access to the mail account of an user who can approve admin verifications in the registration process, he can activate himself.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/105559; http://www.securitytracker.com/id/1041914; https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-acl-violation-in-com-users-for-the-admin-verification