deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7509
Published: 2018-05-04
Description: WPLSoft in Delta Electronics versions 2.45.0 and prior writes data from a file outside the bounds of the intended buffer space, which could cause memory corruption or may allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/103179; https://ics-cert.us-cert.gov/advisories/ICSA-18-058-02; http://www.securityfocus.com/bid/103179
CVE: CVE-2011-0704
Published: 2018-05-04
Description: 389 Directory Server 1.2.7.5, when built with mozldap, allows remote attackers to cause a denial of service (replica crash) by sending an empty modify request.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=675320; https://bugzilla.redhat.com/show_bug.cgi?id=676876; https://bugzilla.redhat.com/show_bug.cgi?id=675320
CVE: CVE-2012-5628
Published: 2018-05-04
Description: gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-275
References: https://bugzilla.redhat.com/show_bug.cgi?id=884854; https://bugzilla.redhat.com/show_bug.cgi?id=884854
CVE: CVE-2013-2233
Published: 2018-05-04
Description: Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.
CVSS Score: 7.4 (HIGH)
CWE: CWE-320
References: http://www.openwall.com/lists/oss-security/2013/07/01/2; http://www.openwall.com/lists/oss-security/2013/07/02/6; https://bugzilla.redhat.com/show_bug.cgi?id=980821
CVE: CVE-2017-15043
Published: 2018-05-04
Description: A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/; https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/swi-psa-2018-003-technical-bulletin-reaper/
CVE: CVE-2018-10229
Published: 2018-05-04
Description: A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104084; https://www.kb.cert.org/vuls/id/283803; https://www.vusec.net/wp-content/uploads/2018/05/glitch.pdf
CVE: CVE-2018-10251
Published: 2018-05-04
Description: A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.7 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9.3 could allow an unauthenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-1188
References: https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---cve-2018-10251/; https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---cve-2018-10251/
CVE: CVE-2018-9154
Published: 2018-05-04
Description: There is a reachable abort in the function jpc_dec_process_sot in libjasper/jpc/jpc_dec.c of JasPer 2.0.14 that will lead to a remote denial of service attack by triggering an unexpected jas_alloc2 return value, a different vulnerability than CVE-2017-13745.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://drive.google.com/drive/u/2/folders/1YuxdfbZrw79kfzoQz0PpxIutZ7pkf_kW; https://security.gentoo.org/glsa/201908-03; https://www.oracle.com/security-alerts/cpuapr2020.html
CVE: CVE-2018-10752
Published: 2018-05-05
Description: The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/ZGr5tyP2; https://www.exploit-db.com/exploits/45225/; https://pastebin.com/ZGr5tyP2
CVE: CVE-2018-10753
Published: 2018-05-05
Description: Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/drive/u/2/folders/1DvBEh5D-eW4UkvX3947UQh62i7hUIFN1; https://github.com/leesavide/abcm2ps/issues/16; https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE: CVE-2018-10754
Published: 2018-05-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-10757
Published: 2018-05-05
Description: CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/dukereborn/cmum/commit/c89158ec646c4e8e95587b650f6fd86b502ff8b5; https://packetstormsecurity.com/files/147501/cspmysqlum231-sql.txt; https://www.exploit-db.com/exploits/44589/
CVE: CVE-2018-10758
Published: 2018-05-05
Description: The edit/ URI in Datenstrom Yellow 0.7.3 has CSRF via a delete action that can delete articles.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/datenstrom/yellow/issues/322; https://github.com/datenstrom/yellow/issues/322
CVE: CVE-2018-10723
Published: 2018-05-05
Description: Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT statement in api/schema.sql.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/llandeilocymro/2438a0b5aba8b387c86d7e3181ecbe76; https://gist.github.com/llandeilocymro/2438a0b5aba8b387c86d7e3181ecbe76
CVE: CVE-2018-10686
Published: 2018-05-06
Description: An issue was discovered in Vesta Control Panel 0.9.8-20. There is Reflected XSS via $_REQUEST['path'] to the view/file/index.php URI, which can lead to remote PHP code execution via vectors involving a file_put_contents call in web/upload/UploadHandler.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/serghey-rodin/vesta/issues/1558; https://medium.com/%40ndrbasi/cve-2018-10686-vestacp-rce-d96d95c2bde2; https://github.com/serghey-rodin/vesta/issues/1558
CVE: CVE-2018-0494
Published: 2018-05-06
Description: GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104129; http://www.securitytracker.com/id/1040838; https://access.redhat.com/errata/RHSA-2018:3052
CVE: CVE-2018-10767
Published: 2018-05-06
Description: There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3140; https://access.redhat.com/errata/RHSA-2018:3505
CVE: CVE-2018-10768
Published: 2018-05-06
Description: There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3140; https://access.redhat.com/errata/RHSA-2018:3505
CVE: CVE-2018-10771
Published: 2018-05-07
Description: Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2; https://github.com/leesavide/abcm2ps/issues/17; https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE: CVE-2018-10772
Published: 2018-05-07
Description: The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://access.redhat.com/errata/RHSA-2019:2101; https://bugzilla.redhat.com/show_bug.cgi?id=1566260; https://access.redhat.com/errata/RHSA-2019:2101
CVE: CVE-2018-10773
Published: 2018-05-07
Description: NULL pointer deference in the addsn function in serialno.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by copac2xml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://docs.google.com/document/d/1k598A16gV9HPwFXnYkyrPwoRbnbFX6LAMRyzb_dxLCM/edit; https://docs.google.com/document/d/1k598A16gV9HPwFXnYkyrPwoRbnbFX6LAMRyzb_dxLCM/edit
CVE: CVE-2018-10774
Published: 2018-05-07
Description: Read access violation in the isiin_keyword function in isiin.c in libbibutils.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by isi2xml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://docs.google.com/document/d/1BuCxbXaGL_3DyaWF8sGnMAWolmYQneRrxHt4mNPkBE4/edit; https://docs.google.com/document/d/1BuCxbXaGL_3DyaWF8sGnMAWolmYQneRrxHt4mNPkBE4/edit
CVE: CVE-2018-10775
Published: 2018-05-07
Description: NULL pointer dereference in the _fields_add function in fields.c in libbibcore.a in bibutils through 6.2 allows remote attackers to cause a denial of service (application crash), as demonstrated by end2xml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://drive.google.com/drive/u/1/folders/1qtq272m7jJaEUPGFLvyXmIl5zNJv7rd1; https://drive.google.com/drive/u/1/folders/1qtq272m7jJaEUPGFLvyXmIl5zNJv7rd1
CVE: CVE-2018-10776
Published: 2018-05-07
Description: The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://docs.google.com/document/d/1gkHfRWO9f-FTBhZ3ZT3RMZZ_JbJ18ZIkH2GlVTV35cQ/edit; https://docs.google.com/document/d/1gkHfRWO9f-FTBhZ3ZT3RMZZ_JbJ18ZIkH2GlVTV35cQ/edit
CVE: CVE-2018-10777
Published: 2018-05-07
Description: Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://docs.google.com/document/d/11Ms9j82hpH8iA0oc4QH0qUG6gq-ZOiqI0YroAFMrcD8/edit; https://docs.google.com/document/d/11Ms9j82hpH8iA0oc4QH0qUG6gq-ZOiqI0YroAFMrcD8/edit
CVE: CVE-2018-10778
Published: 2018-05-07
Description: Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://docs.google.com/document/d/11qVnW4frI-9PGRVkSOGb9IaF3ylzrc32bJXyO1OsfQM/edit; https://docs.google.com/document/d/11qVnW4frI-9PGRVkSOGb9IaF3ylzrc32bJXyO1OsfQM/edit
CVE: CVE-2018-10779
Published: 2018-05-07
Description: TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2788; http://www.securityfocus.com/bid/104089; https://access.redhat.com/errata/RHSA-2019:2053
CVE: CVE-2018-10780
Published: 2018-05-07
Description: Exiv2::Image::byteSwap2 in image.cpp in Exiv2 0.26 has a heap-based buffer over-read.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1575201; https://security.gentoo.org/glsa/201811-14; https://bugzilla.redhat.com/show_bug.cgi?id=1575201
CVE: CVE-2018-10795
Published: 2018-05-07
Description: Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment via a browser/liferay/browser.html?Type= or html/js/editor/fckeditor/editor/filemanager/browser/liferay/browser.html URI. NOTE: the vendor disputes this issue because file upload is an expected feature, subject to Role Based Access Control checks where only authenticated users with proper permissions can upload files
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-1313
Published: 2018-05-07
Description: In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Security Manager policy file, the attack is successful. If the server is using a policy file, the policy file must permit the database location to be read for the attack to work. The default Derby Network Server policy file distributed with the affected releases includes a permissive policy as the default Network Server policy, which allows the attack to work.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/104140; https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E; https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
CVE: CVE-2018-1413
Published: 2018-05-07
Description: IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138819.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22016039; http://www.securityfocus.com/bid/104117; http://www.securitytracker.com/id/1040889
CVE: CVE-2018-1256
Published: 2018-05-07
Description: Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of the SSO Connector with tokens generated from another service plan.
CVSS Score: 8.1 (HIGH)
References: https://pivotal.io/security/cve-2018-1256; https://pivotal.io/security/cve-2018-1256
CVE: CVE-2017-17539
Published: 2018-05-08
Description: The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/104119; https://fortiguard.com/advisory/FG-IR-17-274; http://www.securityfocus.com/bid/104119
CVE: CVE-2017-17540
Published: 2018-05-08
Description: The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/104119; https://fortiguard.com/advisory/FG-IR-17-274; http://www.securityfocus.com/bid/104119
CVE: CVE-2018-10796
Published: 2018-05-08
Description: In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222014.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345NetFirewall.sys-0x00222014; https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345NetFirewall.sys-0x00222014
CVE: CVE-2018-10798
Published: 2018-05-08
Description: A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://hackerone.com/reports/181686; https://hackerone.com/reports/181686
CVE: CVE-2018-10799
Published: 2018-05-08
Description: A hang issue was discovered in Brave before 0.14.0 (on, for example, Linux). This vulnerability is caused by the mishandling of a long URL formed by window.location+='?\u202a\uFEFF\u202b'; concatenation in a SCRIPT element.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://hackerone.com/reports/181558; https://hackerone.com/reports/181558
CVE: CVE-2018-10801
Published: 2018-05-08
Description: TIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://bugzilla.maptools.org/show_bug.cgi?id=2790; http://bugzilla.maptools.org/show_bug.cgi?id=2790
CVE: CVE-2018-10734
Published: 2018-05-08
Description: KONGTOP DVR devices A303, A403, D303, D305, and D403 contain a backdoor that prints the login password via a Print_Password function call in certain circumstances.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/hucmosin/MyBook/blob/master/KONGTOP_DVR_devices_vulnerability_report-CVE-2018-10734.pdf; https://github.com/hucmosin/MyBook/blob/master/fu/DVR.pdf; https://github.com/hucmosin/Python_Small_Tool/blob/master/other/DVR_POC.py
CVE: CVE-2018-10804
Published: 2018-05-08
Description: ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1053; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/1053
CVE: CVE-2018-10805
Published: 2018-05-08
Description: ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1054; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/1054
CVE: CVE-2018-10806
Published: 2018-05-08
Description: An issue was discovered in Frog CMS 0.9.5. There is a reflected Cross Site Scripting Vulnerability via the file[current_name] parameter to the admin/?/plugin/file_manager/rename URI. This can be used in conjunction with CSRF.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://github.com/philippe/FrogCMS/issues/10; https://github.com/philippe/FrogCMS/issues/10
CVE: CVE-2018-10809
Published: 2018-05-08
Description: In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-8873.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/147538/2345-Security-Guard-3.7-Denial-Of-Service.html; https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345NetFirewall.sys-0x00222040; https://www.exploit-db.com/exploits/44600/
CVE: CVE-2018-10380
Published: 2018-05-08
Description: kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1090863; https://commits.kde.org/kwallet-pam/01d4143fda5bddb6dca37b23304dc239a5fb38b5; https://commits.kde.org/kwallet-pam/2134dec85ce19d6378d03cddfae9e5e464cb24c0
CVE: CVE-2018-1239
Published: 2018-05-08
Description: Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0[PII_REDACTED] are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit the vulnerabilities to execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2018/May/15; http://www.securityfocus.com/bid/104092; http://seclists.org/fulldisclosure/2018/May/15
CVE: CVE-2018-1247
Published: 2018-05-08
Description: RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentially allow admin users to cause a denial of service or extract server data via injecting a maliciously crafted DTD in an XML file submitted to the application.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/May/18; http://www.securityfocus.com/bid/104107; http://www.securitytracker.com/id/1040835
CVE: CVE-2018-1248
Published: 2018-05-08
Description: RSA Authentication Manager Security Console, Operation Console and Self-Service Console, version 8.3 and earlier, is affected by a Host header injection vulnerability. This could allow a remote attacker to potentially poison HTTP cache and subsequently redirect users to arbitrary web domains.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://seclists.org/fulldisclosure/2018/May/18; http://www.securityfocus.com/bid/104113; http://www.securitytracker.com/id/1040835
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: nghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20 vulnerability in ALTSVC frame handling that can result in segmentation fault leading to denial of service. This attack appears to be exploitable via network client. This vulnerability appears to have been fixed in >= 1.31.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-476, CWE-476
References: http://www.securityfocus.com/bid/103952; https://access.redhat.com/errata/RHSA-2019:0366; https://access.redhat.com/errata/RHSA-2019:0367
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-384
References: http://www.securityfocus.com/bid/104210; https://jenkins.io/security/advisory/2018-04-16/; http://www.securityfocus.com/bid/104210
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/104211; https://jenkins.io/security/advisory/2018-04-16/; http://www.securityfocus.com/bid/104211