deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9203
Published: 2019-03-28
Description: Authorization bypass in Nagios IM (component of Nagios XI) before 2.2.7 allows closing incidents in IM via the API.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html; https://www.nagios.com/products/security/; http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html
CVE: CVE-2019-9204
Published: 2019-03-28
Description: SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html; https://www.nagios.com/products/security/; http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html
CVE: CVE-2019-9166
Published: 2019-03-28
Description: Privilege escalation in Nagios XI before 5.5.11 allows local attackers to elevate privileges to root via write access to config.inc.php and import_xiconfig.php.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html; https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/products/security/
CVE: CVE-2019-9167
Published: 2019-03-28
Description: Cross-site scripting (XSS) vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152496/Nagios-XI-5.5.10-XSS-Remote-Code-Execution.html; https://www.nagios.com/downloads/nagios-xi/change-log/; https://www.nagios.com/products/security/
CVE: CVE-2019-0224
Published: 2019-03-28
Description: In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107631; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0224; https://lists.apache.org/thread.html/aac253cfc33c0429b528e2fcbe82d3a42d742083c528f58d192dfd16%40%3Ccommits.jspwiki.apache.org%3E
CVE: CVE-2019-6602
Published: 2019-03-28
Description: In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: http://www.securityfocus.com/bid/107626; https://support.f5.com/csp/article/K11818407; http://www.securityfocus.com/bid/107626
CVE: CVE-2019-6603
Published: 2019-03-28
Description: In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/107625; https://support.f5.com/csp/article/K14632915; http://www.securityfocus.com/bid/107625
CVE: CVE-2019-6604
Published: 2019-03-28
Description: On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using non-default Layer 2 forwarding configurations may experience a lockup of the High-Speed Bridge.
CVSS Score: 6.8 (MEDIUM)
References: https://support.f5.com/csp/article/K26455071; https://support.f5.com/csp/article/K26455071
CVE: CVE-2019-6605
Published: 2019-03-28
Description: On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL profile may cause a denial of service.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/107629; https://support.f5.com/csp/article/K45353544; http://www.securityfocus.com/bid/107629
CVE: CVE-2019-6606
Published: 2019-03-28
Description: On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-401
References: http://www.securityfocus.com/bid/107636; https://support.f5.com/csp/article/K35209601; http://www.securityfocus.com/bid/107636
CVE: CVE-2019-6607
Published: 2019-03-28
Description: On BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, there is a stored cross-site scripting vulnerability in an ASM violation viewed in the Configuration utility. In the worst case, an attacker can store a CSRF which results in code execution as the admin user.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/107630; https://support.f5.com/csp/article/K14812883; http://www.securityfocus.com/bid/107630
CVE: CVE-2019-6608
Published: 2019-03-28
Description: On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when processing authorized SNMP requests.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-401
References: https://support.f5.com/csp/article/K12139752; https://support.f5.com/csp/article/K12139752
CVE: CVE-2019-0212
Published: 2019-03-28
Description: In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2019/03/27/3; http://www.securityfocus.com/bid/107624; https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
CVE: CVE-2019-0222
Published: 2019-03-28
Description: In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.
CVSS Score: 7.5 (HIGH)
References: http://activemq.apache.org/security-advisories.data/CVE-2019-0222-announcement.txt; http://www.openwall.com/lists/oss-security/2019/03/27/2; http://www.securityfocus.com/bid/107622
CVE: CVE-2019-0225
Published: 2019-03-28
Description: A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2019/03/26/2; http://www.securityfocus.com/bid/107627; https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0225
CVE: CVE-2019-10262
Published: 2019-03-28
Description: A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/8test/pentest/issues/2; https://github.com/8test/pentest/issues/2
CVE: CVE-2019-10269
Published: 2019-03-29
Description: BWA (aka Burrow-Wheeler Aligner) before 2019-01-23 has a stack-based buffer overflow in the bns_restore function in bntseq.c via a long sequence name in a .alt file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://coreymhudson.github.io/bwa_vulnerabilties/; https://github.com/lh3/bwa/pull/232; https://usn.ubuntu.com/4087-1/
CVE: CVE-2019-10276
Published: 2019-03-29
Description: Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via the web/assets/swf/uploadify.php URI, as demonstrated by a .php file with the image/jpeg content type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/cobub/razor/issues/168; https://github.com/kyrie403/Vuln/blob/master/Cobub%20Razor/Cobub%20Razor%20-%20file%20upload%20vulnerability.md; https://github.com/cobub/razor/issues/168
CVE: CVE-2017-18105
Published: 2019-03-29
Description: The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gain access to some of the built-in and potentially third party rest resources via a session fixation vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://jira.atlassian.com/browse/CWD-5072; https://jira.atlassian.com/browse/CWD-5072
CVE: CVE-2017-18106
Published: 2019-03-29
Description: The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain access to another user's session provided they can make their identifier hash collide with another user's session identifier hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://jira.atlassian.com/browse/CWD-5061; https://jira.atlassian.com/browse/CWD-5061
CVE: CVE-2017-18108
Published: 2019-03-29
Description: The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://jira.atlassian.com/browse/CWD-5062; https://jira.atlassian.com/browse/CWD-5062
CVE: CVE-2017-18109
Published: 2019-03-29
Description: The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jira.atlassian.com/browse/CWD-5071; https://jira.atlassian.com/browse/CWD-5071
CVE: CVE-2017-18110
Published: 2019-03-29
Description: The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://jira.atlassian.com/browse/CWD-5070; https://jira.atlassian.com/browse/CWD-5070
CVE: CVE-2017-18111
Published: 2019-03-29
Description: The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAuth request. This allowed malicious oauth application linked applications to probe internal network resources by requesting internal locations, read the contents of files and also cause an out of memory exception affecting availability via an XML External Entity vulnerability.
CVSS Score: 8.7 (HIGH)
CWE: CWE-611
References: https://ecosystem.atlassian.net/browse/APL-1338; https://ecosystem.atlassian.net/browse/APL-1338
CVE: CVE-2019-10477
Published: 2019-03-29
Description: The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: https://github.com/fusioninventory/fusioninventory-for-glpi/commit/0f777f85773b18f5252e79afa1929fcdc4858c3a; https://github.com/fusioninventory/fusioninventory-for-glpi/compare/260a864...e1f776d; https://github.com/fusioninventory/fusioninventory-for-glpi/compare/cec774a...baa4158
CVE: CVE-2019-6481
Published: 2019-03-29
Description: Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach, related to a "Multifactor Auth Bypass, Full Disk Encryption Bypass" issue affecting the Affected Chrome Plugin component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/152139/Abine-Blur-7.8.24x-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2019/Mar/33; https://redcoded.com/cve/2018/03/10/CVE.html
CVE: CVE-2019-9604
Published: 2019-03-29
Description: PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery (CSRF) for Edit Profile actions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-cross-site-request-forgery-csrf-for-edit-profile-actionscve-2019-9604/; https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-cross-site-request-forgery-csrf-for-edit-profile-actionscve-2019-9604/
CVE: CVE-2019-9605
Published: 2019-03-29
Description: PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-reflected-cross-site-scripting-xss-via-the-err-value-in-a-ico-picture-uploadcve-2019-9605/; https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-reflected-cross-site-scripting-xss-via-the-err-value-in-a-ico-picture-uploadcve-2019-9605/
CVE: CVE-2019-9695
Published: 2019-03-29
Description: Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which is a type of vulnerability that has the potential of allowing an individual to execute arbitrary commands or code on a target machine or in a target process. Note that this exploit is only possible with direct physical access to the device.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/107478; https://support.symantec.com/en_US/article.SYMSA1476.html; http://www.securityfocus.com/bid/107478
CVE: CVE-2018-20378
Published: 2019-03-29
Description: The L2CAP signaling channel implementation and SDP server implementation in OpenSynergy Blue SDK 3.2 through 6.0 allow remote, unauthenticated attackers to execute arbitrary code or cause a denial of service via malicious L2CAP configuration requests, in conjunction with crafted SDP communication over maliciously configured L2CAP channels. The attacker must have connectivity over the Bluetooth physical layer, and must be able to send raw L2CAP frames. This is related to L2Cap_HandleConfigReq in core/stack/l2cap/l2cap_sm.c and SdpServHandleServiceSearchAttribReq in core/stack/sdp/sdpserv.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.cymotive.com/wp-content/uploads/2019/03/Hell2CAP-0day.pdf; https://www.opensynergy.com/news/security/bluesdk-advisory2018003/; https://www.cymotive.com/wp-content/uploads/2019/03/Hell2CAP-0day.pdf
CVE: CVE-2019-9918
Published: 2019-03-29
Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://extensions.joomla.org/extension/je-messenger/; https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9918.md; https://extensions.joomla.org/extension/je-messenger/
CVE: CVE-2019-9919
Published: 2019-03-29
Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://extensions.joomla.org/extension/je-messenger/; https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9919.md; https://extensions.joomla.org/extension/je-messenger/
CVE: CVE-2019-9920
Published: 2019-03-29
Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.
CVSS Score: 8.8 (HIGH)
References: https://extensions.joomla.org/extension/je-messenger/; https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9920.md; https://extensions.joomla.org/extension/je-messenger/
CVE: CVE-2019-9921
Published: 2019-03-29
Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://extensions.joomla.org/extension/je-messenger/; https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9921.md; https://extensions.joomla.org/extension/je-messenger/
CVE: CVE-2019-9922
Published: 2019-03-29
Description: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://extensions.joomla.org/extension/je-messenger/; https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9922.md; https://extensions.joomla.org/extension/je-messenger/
CVE: CVE-2018-15840
Published: 2019-03-29
Description: TP-Link TL-WR840N devices allow remote attackers to cause a denial of service (networking outage) via fragmented packets, as demonstrated by an "nmap -f" command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://hackingvila.wordpress.com/2019/02/17/tp-link-wireless-n-router-wr840n-buffer-overflow-cve-2018-15840/; https://hackingvila.wordpress.com/2019/02/17/tp-link-wireless-n-router-wr840n-buffer-overflow-cve-2018-15840/
CVE: CVE-2018-19201
Published: 2019-03-29
Description: A reflected XSS vulnerability in the ModCP Profile Editor in MyBB before 1.8.20 allows remote attackers to inject JavaScript via the 'username' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/; https://github.com/mybb/mybb/blob/feature/SECURITY.md#technical-details-of-known-issues; https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/
CVE: CVE-2018-18766
Published: 2019-03-29
Description: An elevation of privilege vulnerability exists in the Call Dispatcher in Provisio SiteKiosk before 9.7.4905.
CVSS Score: 9.8 (CRITICAL)
References: https://www.provisio.com/en-US/Downloads/VersionHistory.aspx?Product=SiteKiosk; https://www.provisio.com/en-US/Downloads/VersionHistory.aspx?Product=SiteKiosk
CVE: CVE-2019-10644
Published: 2019-03-30
Description: An issue was discovered in HYBBS 2.2. /?admin/user.html has a CSRF vulnerability that can add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/hyyyp/HYBBS2/issues/3; https://github.com/hyyyp/HYBBS2/issues/3
CVE: CVE-2019-10646
Published: 2019-03-30
Description: Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wolfcms/wolfcms/issues/682; https://github.com/wolfcms/wolfcms/issues/682
CVE: CVE-2019-10647
Published: 2019-03-30
Description: ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[] parameter because of a lack of inc/zzz_file.php restrictions. For example, source%5B%5D=http%3A%2F%2F192.168.0.1%2Ftest.php can be used if the 192.168.0.1 web server sends the contents of a .php file (i.e., it does not interpret a .php file).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/kyrie403/Vuln/blob/master/zzzcms/zzzphp%20v1.6.3%20write%20file%20with%20dangerous%20type.md; https://github.com/kyrie403/Vuln/blob/master/zzzcms/zzzphp%20v1.6.3%20write%20file%20with%20dangerous%20type.md
CVE: CVE-2019-10648
Published: 2019-03-30
Description: Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/robo-code/robocode/commit/836c84635e982e74f2f2771b2c8640c3a34221bd#diff-0296a8f9d4a509789f4dc4f052d9c36f; https://sourceforge.net/p/robocode/bugs/406/; https://github.com/robo-code/robocode/commit/836c84635e982e74f2f2771b2c8640c3a34221bd#diff-0296a8f9d4a509789f4dc4f052d9c36f
CVE: CVE-2019-10649
Published: 2019-03-30
Description: In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://www.securityfocus.com/bid/107645; https://github.com/ImageMagick/ImageMagick/issues/1533; https://usn.ubuntu.com/4034-1/
CVE: CVE-2019-10650
Published: 2019-03-30
Description: In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00010.html; http://www.securityfocus.com/bid/107646
CVE: CVE-2019-10652
Published: 2019-03-30
Description: An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/flatCore/flatCore-CMS/issues/38; https://github.com/flatCore/flatCore-CMS/issues/38
CVE: CVE-2019-10654
Published: 2019-03-30
Description: The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive, a different vulnerability than CVE-2017-8845.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/ckolivas/lrzip/issues/108; https://github.com/ckolivas/lrzip/issues/108
CVE: CVE-2019-10655
Published: 2019-03-30
Description: Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat priority field, in conjunction with a buffer overflow (via the phonecookie cookie) to overwrite a data structure and consequently bypass authentication. This can be exploited remotely or via CSRF because the cookie can be placed in an Accept HTTP header in an XMLHttpRequest call to lighttpd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-119, CWE-352
References: http://packetstormsecurity.com/files/165643/Grandstream-GXV3175-Unauthenticated-Command-Execution.html; http://packetstormsecurity.com/files/165931/Grandstream-GXV31XX-settimezone-Unauthenticated-Command-Execution.html; https://github.com/scarvell/grandstream_exploits