deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20764
Published: 2019-02-08
Description: A buffer overflow exists in HelpSystems tcpcrypt on Linux, used for BoKS encrypted telnet through BoKS version 6.7.1. Since tcpcrypt is setuid, exploitation leads to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: https://community.helpsystems.com/knowledge-base/fox-technologies/hotfix/515/; https://community.helpsystems.com/knowledge-base/fox-technologies/hotfix/515/
CVE: CVE-2019-1673
Published: 2019-02-08
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to the web-based management interface. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. For information about fixed software releases, consult the Cisco bug ID at https://quickview.cloudapps.cisco.com/quickview/bug/CSCvn64652. When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page, to determine exposure and a complete upgrade solution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106915; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-ise-xss; http://www.securityfocus.com/bid/106915
CVE: CVE-2019-7648
Published: 2019-02-08
Description: controller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on base64 in an attempt to protect password storage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/FantasticLBP/Hotels_Server/issues/2; https://github.com/FantasticLBP/Hotels_Server/issues/2
CVE: CVE-2018-1352
Published: 2019-02-08
Description: A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://fortiguard.com/advisory/FG-IR-18-018; https://fortiguard.com/advisory/FG-IR-18-018
CVE: CVE-2019-1672
Published: 2019-02-08
Description: A vulnerability in the Decryption Policy Default Action functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass a configured drop policy and allow traffic onto the network that should have been denied. The vulnerability is due to the incorrect handling of SSL-encrypted traffic when Decrypt for End-User Notification is disabled in the configuration. An attacker could exploit this vulnerability by sending a SSL connection through the affected device. A successful exploit could allow the attacker to bypass a configured drop policy to block specific SSL connections. Releases 10.1.x and 10.5.x are affected.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/106904; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-wsa-bypass; http://www.securityfocus.com/bid/106904
CVE: CVE-2019-1676
Published: 2019-02-08
Description: A vulnerability in the Session Initiation Protocol (SIP) call processing of Cisco Meeting Server (CMS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session Description Protocol (SDP) messages. An attacker could exploit this vulnerability by sending a crafted SDP message to the CMS call bridge. An exploit could allow the attacker to cause the CMS to reload, causing a DoS condition for all connected clients. Versions prior to 2.3.9 are affected.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/106909; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190206-meeting-sipdos; http://www.securityfocus.com/bid/106909
CVE: CVE-2018-9190
Published: 2019-02-08
Description: A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://fortiguard.com/advisory/FG-IR-18-092; https://fortiguard.com/advisory/FG-IR-18-092
CVE: CVE-2019-7651
Published: 2019-02-08
Description: EPP.sys in Emsisoft Anti-Malware prior to version 2018.12 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\EPP device are not properly protected, leading to unintended impersonation or object creation. This vulnerability has been fixed in version 2018.12 and later.
CVSS Score: 7.5 (HIGH)
References: https://blog.emsisoft.com/en/32517/new-in-2018-12-safe-web-browsing-with-emsisoft-browser-security/; https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-01-09-emsisoft-Anti-Malware-bypass.md; https://help.emsisoft.com/en/1760/vulnerability-report-en/
CVE: CVE-2019-7653
Published: 2019-02-09
Description: The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427
References: https://bugs.debian.org/921751; https://lists.debian.org/debian-lts-announce/2019/03/msg00019.html; https://lists.debian.org/debian-lts-announce/2021/12/msg00026.html
CVE: CVE-2019-7659
Published: 2019-02-09
Description: Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2019/02/msg00027.html; https://outpost24.com/blog/gsoap-vulnerability-identified; https://www.genivia.com/advisory.html#Bug_in_gSOAP_versions_2.7.0_to_2.8.74_for_applications_built_with_the_WITH_COOKIES_flag_enabled_%28Jan_14%2C_2019%29
CVE: CVE-2019-7662
Published: 2019-02-09
Description: An assertion failure was discovered in wasm::WasmBinaryBuilder::getType() in wasm-binary.cpp in Binaryen 1.38.22. This allows remote attackers to cause a denial of service (failed assertion and crash) via a crafted wasm file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/WebAssembly/binaryen/issues/1872; https://github.com/WebAssembly/binaryen/issues/1872
CVE: CVE-2019-7663
Published: 2019-02-09
Description: An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
CVSS Score: 6.5 (MEDIUM)
References: http://bugzilla.maptools.org/show_bug.cgi?id=2833; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html; https://gitlab.com/libtiff/libtiff/commit/802d3cbf3043be5dce5317e140ccb1c17a6a2d39
CVE: CVE-2019-7664
Published: 2019-02-09
Description: In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check. Crafted elf input causes a segmentation fault, leading to denial of service (program crash).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:2197; https://access.redhat.com/errata/RHSA-2019:3575; https://sourceware.org/bugzilla/show_bug.cgi?id=24084
CVE: CVE-2019-7665
Published: 2019-02-09
Description: In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://access.redhat.com/errata/RHSA-2019:3575
CVE: CVE-2009-5154
Published: 2019-02-09
Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of meinsm for the admin account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb; https://www.use-ip.co.uk/forum/threads/mobotix-default-password.76/; https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE: CVE-2019-7673
Published: 2019-02-09
Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb; https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE: CVE-2019-7674
Published: 2019-02-09
Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb; https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE: CVE-2019-7675
Published: 2019-02-09
Description: An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb; https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cb
CVE: CVE-2019-7676
Published: 2019-02-09
Description: A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port 8888 with the admin password for the admin account.
CVSS Score: 7.2 (HIGH)
CWE: CWE-521
References: https://github.com/pudding2/enphase-energy/blob/master/weak_password.txt; https://github.com/pudding2/enphase-energy/blob/master/weak_password_1.png; https://github.com/pudding2/enphase-energy/blob/master/weak_password_2.png
CVE: CVE-2019-7677
Published: 2019-02-09
Description: XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pudding2/enphase-energy/blob/master/XSS-exp.txt; https://github.com/pudding2/enphase-energy/blob/master/XSS.png; https://github.com/pudding2/enphase-energy/blob/master/XSS-exp.txt
CVE: CVE-2019-7678
Published: 2019-02-09
Description: A directory traversal vulnerability was discovered in Enphase Envoy R3.*.* via images/, include/, include/js, or include/css on TCP port 8888.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/pudding2/enphase-energy/blob/master/directory_traversal_1.png; https://github.com/pudding2/enphase-energy/blob/master/directory_traversal_exp.txt; https://github.com/pudding2/enphase-energy/blob/master/directory_traversal_1.png
CVE: CVE-2019-7684
Published: 2019-02-09
Description: inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadController#gok4 (com/inxedu/os/common/controller/VideoUploadController.java). The attacker uses the /video/uploadvideo fileType parameter to change the list of acceptable extensions from jpg,gif,png,jpeg to jpg,gif,png,jsp,jpeg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://gitee.com/inxeduopen/inxedu/issues/IQJUH; https://gitee.com/inxeduopen/inxedu/issues/IQJUH
CVE: CVE-2018-13792
Published: 2019-02-10
Description: Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.abbyydownloads.com/fc12/ReleaseNotes_FC12_R2_U6_1299.29_build_12.0.2.1420.pdf; http://www.abbyydownloads.com/fc12/ReleaseNotes_FC12_R2_U6_1299.29_build_12.0.2.1420.pdf
CVE: CVE-2019-7692
Published: 2019-02-10
Description: install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call to the PHP fputs function that creates a .php file in the public folder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/AvaterXXX/CVEs/blob/master/cim.md#getshell; https://github.com/AvaterXXX/CVEs/blob/master/cim.md#getshell
CVE: CVE-2018-20767
Published: 2019-02-10
Description: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf
CVE: CVE-2018-20768
Published: 2019-02-10
Description: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf
CVE: CVE-2018-20769
Published: 2019-02-10
Description: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf
CVE: CVE-2018-20770
Published: 2019-02-10
Description: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf
CVE: CVE-2018-20771
Published: 2019-02-10
Description: An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf; https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf
CVE: CVE-2019-7693
Published: 2019-02-10
Description: Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete (con server)" for offline operation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://storage.axiositalia.com/Quick_Guide/Manuale_Avviamento.pdf; https://pastebin.com/raw/nQ648Dif; http://storage.axiositalia.com/Quick_Guide/Manuale_Avviamento.pdf
CVE: CVE-2019-7697
Published: 2019-02-10
Description: An issue was discovered in Bento4 v1.5.1-627. There is an assertion failure in AP4_AtomListWriter::Action in Core/Ap4Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42hls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/axiomatic-systems/Bento4/issues/351; https://github.com/axiomatic-systems/Bento4/issues/351
CVE: CVE-2019-7698
Published: 2019-02-10
Description: An issue was discovered in AP4_Array<AP4_CttsTableEntry>::EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls, a related issue to CVE-2018-20095.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/axiomatic-systems/Bento4/issues/354; https://github.com/axiomatic-systems/Bento4/issues/354
CVE: CVE-2019-7699
Published: 2019-02-10
Description: A heap-based buffer over-read occurs in AP4_BitStream::WriteBytes in Codecs/Ap4BitStream.cpp in Bento4 v1.5.1-627. Remote attackers could leverage this vulnerability to cause an exception via crafted mp4 input, which leads to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/axiomatic-systems/Bento4/issues/355; https://github.com/axiomatic-systems/Bento4/issues/355
CVE: CVE-2019-7700
Published: 2019-02-10
Description: A heap-based buffer over-read was discovered in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-merge.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/WebAssembly/binaryen/issues/1864; https://github.com/WebAssembly/binaryen/issues/1864
CVE: CVE-2019-7701
Published: 2019-02-10
Description: A heap-based buffer over-read was discovered in wasm::SExpressionParser::skipWhitespace() in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm2js.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/WebAssembly/binaryen/issues/1863; https://github.com/WebAssembly/binaryen/issues/1863
CVE: CVE-2019-7702
Published: 2019-02-10
Description: A NULL pointer dereference was discovered in wasm::SExpressionWasmBuilder::parseExpression in wasm-s-parser.cpp in Binaryen 1.38.22. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/WebAssembly/binaryen/issues/1867; https://github.com/WebAssembly/binaryen/issues/1867
CVE: CVE-2019-7703
Published: 2019-02-10
Description: In Binaryen 1.38.22, there is a use-after-free problem in wasm::WasmBinaryBuilder::visitCall in wasm-binary.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service via a wasm file, as demonstrated by wasm-merge.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/WebAssembly/binaryen/issues/1865; https://github.com/WebAssembly/binaryen/issues/1865
CVE: CVE-2019-7704
Published: 2019-02-10
Description: wasm::WasmBinaryBuilder::readUserSection in wasm-binary.cpp in Binaryen 1.38.22 triggers an attempt at excessive memory allocation, as demonstrated by wasm-merge and wasm-opt.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/WebAssembly/binaryen/issues/1866; https://github.com/WebAssembly/binaryen/issues/1866
CVE: CVE-2018-20772
Published: 2019-02-11
Description: Frog CMS 0.9.5 allows PHP code execution via <?php to the admin/?/layout/edit/1 URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/philippe/FrogCMS/issues/24; https://github.com/philippe/FrogCMS/issues/24
CVE: CVE-2018-20773
Published: 2019-02-11
Description: Frog CMS 0.9.5 allows PHP code execution by visiting admin/?/page/edit/1 and inserting additional <?php lines.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/philippe/FrogCMS/issues/23; https://github.com/philippe/FrogCMS/issues/23
CVE: CVE-2018-20774
Published: 2019-02-11
Description: Frog CMS 0.9.5 has XSS via the admin/?/layout/edit/1 Body field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/26; https://github.com/philippe/FrogCMS/issues/26
CVE: CVE-2018-20775
Published: 2019-02-11
Description: admin/?/plugin/file_manager in Frog CMS 0.9.5 allows PHP code execution by creating a new .php file containing PHP code, and then visiting this file under the public/ URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/philippe/FrogCMS/issues/27; https://github.com/philippe/FrogCMS/issues/27
CVE: CVE-2018-20776
Published: 2019-02-11
Description: Frog CMS 0.9.5 provides a directory listing for a /public request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/philippe/FrogCMS/issues/21; https://github.com/philippe/FrogCMS/issues/21
CVE: CVE-2018-20777
Published: 2019-02-11
Description: Frog CMS 0.9.5 has XSS via the admin/?/snippet/edit/1 Body field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/25; https://github.com/philippe/FrogCMS/issues/25
CVE: CVE-2018-20778
Published: 2019-02-11
Description: admin/?/plugin/file_manager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/28; https://github.com/philippe/FrogCMS/issues/28
CVE: CVE-2018-20779
Published: 2019-02-11
Description: Traq 3.7.1 allows SQL Injection via a tickets?search= URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/149894; https://packetstormsecurity.com/files/149894
CVE: CVE-2018-20780
Published: 2019-02-11
Description: Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://packetstormsecurity.com/files/149894; https://packetstormsecurity.com/files/149894
CVE: CVE-2019-7718
Published: 2019-02-11
Description: An issue was discovered in Metinfo 6.x. An attacker can leverage a race condition in the backend database backup function to execute arbitrary PHP code via admin/index.php?n=databack&c=index&a=dogetsql&tables=<?php and admin/databack/bakup_tables.php?2=file_put_contents URIs because app/system/databack/admin/index.class.php creates bakup_tables.php temporarily.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://github.com/jadacheng/vulnerability/blob/master/Metinfo6.x/MetInfo.md; https://github.com/jadacheng/vulnerability/blob/master/Metinfo6.x/MetInfo.md
CVE: CVE-2019-7719
Published: 2019-02-11
Description: Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/dignajar/nibbleblog/issues/138; https://github.com/dignajar/nibbleblog/issues/138