deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-0898
Published: 2018-03-29
Description: MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-255, CWE-532
References: http://www.securityfocus.com/bid/95146; https://pivotal.io/security/cve-2016-0898; http://www.securityfocus.com/bid/95146
CVE: CVE-2016-6658
Published: 2018-03-29
Description: Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack. Although it is not recommended, a user can specify a credential in the URL (basic auth or OAuth) to access the buildpack through the CLI. For example, the user could include a GitHub username and password in the URL to access a private repo. Because the URL to access the buildpack is stored unencrypted, an operator with privileged access to the Cloud Controller database could view these credentials.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-200
References: https://pivotal.io/security/cve-2016-6658; https://pivotal.io/security/cve-2016-6658
CVE: CVE-2017-16512
Published: 2018-03-29
Description: The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html; https://m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html
CVE: CVE-2017-16839
Published: 2018-03-29
Description: Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed.
CVSS Score: 7.0 (HIGH)
References: https://m4.rkw.io/blog/cve201716839-hashicorp-vagrantvmwarefusion-v504-local-root.html; https://m4.rkw.io/blog/cve201716839-hashicorp-vagrantvmwarefusion-v504-local-root.html
CVE: CVE-2017-16873
Published: 2018-03-29
Description: It is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware-fusion 4.0.25 through 5.0.4 in order to escalate to root privileges.
CVSS Score: 7.8 (HIGH)
References: https://m4.rkw.io/blog/cve201716873-hashicorp-vagrantvmwarefusion-v4025504-local-root.html; https://m4.rkw.io/blog/cve201716873-hashicorp-vagrantvmwarefusion-v4025504-local-root.html
CVE: CVE-2018-9130
Published: 2018-03-30
Description: IBOS 4.4.3 has XSS via a company full name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cnonce.github.io/2018/03/29/IBOS-4-4-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/; https://github.com/cnonce/IBOS_4.4.3/blob/master/Cross%20Site%20Scripting.md; https://cnonce.github.io/2018/03/29/IBOS-4-4-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/
CVE: CVE-2018-9132
Published: 2018-03-30
Description: libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libming/libming/issues/133; https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/
CVE: CVE-2018-9133
Published: 2018-03-30
Description: ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: https://github.com/ImageMagick/ImageMagick/issues/1072; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html; https://usn.ubuntu.com/3681-1/
CVE: CVE-2018-9135
Published: 2018-03-30
Description: In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/ImageMagick/ImageMagick/issues/1009; https://github.com/ImageMagick/ImageMagick/issues/1009
CVE: CVE-2018-9136
Published: 2018-03-30
Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file, a different vulnerability than CVE-2018-8821.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/bigric3/poc2; https://github.com/bigric3/poc2
CVE: CVE-2018-9138
Published: 2018-03-30
Description: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://sourceware.org/bugzilla/show_bug.cgi?id=23008; https://usn.ubuntu.com/4326-1/; https://usn.ubuntu.com/4336-1/
CVE: CVE-2018-9139
Published: 2018-03-30
Description: On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privileged process via a large frame size, aka SVE-2017-11165.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2018-9140
Published: 2018-03-30
Description: On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2018-9141
Published: 2018-03-30
Description: On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a crafted resolution, aka SVE-2017-11105.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2018-9142
Published: 2018-03-30
Description: On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation of a package signature and package name, aka SVE-2017-10932.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2018-9143
Published: 2018-03-30
Description: On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code execution in a privileged process, aka SVE-2017-10991.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb; https://security.samsungmobile.com/securityUpdate.smsb
CVE: CVE-2018-9144
Published: 2018-03-30
Description: In Exiv2 0.26, there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/Exiv2/exiv2/issues/254; https://github.com/xiaoqx/pocs/tree/master/exiv2; https://security.gentoo.org/glsa/201811-14
CVE: CVE-2018-9145
Published: 2018-03-30
Description: In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the 4-DataBuf-abort-1 PoC file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.novell.com/show_bug.cgi?id=1087879; https://bugzilla.redhat.com/show_bug.cgi?id=1564281; https://github.com/xiaoqx/pocs/tree/master/exiv2
CVE: CVE-2018-9146
Published: 2018-03-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-17724.  Reason: This candidate is a reservation duplicate of CVE-2017-17724.  Notes: All CVE users should reference CVE-2017-17724 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-5799
Published: 2018-03-30
Description: In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATION_NAME= URI, aka SD-69139.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/58; https://www.manageengine.com/products/service-desk/readme.html; http://seclists.org/fulldisclosure/2018/Mar/58
CVE: CVE-2017-11010
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access control left a configuration space unprotected.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-14906
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-14911
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-14912
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile [VERSION]: MDM9206, MDM9607, MDM9650, MSM8909W, SD 200, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 835, the attributes of buffers in Secure Display were not marked properly.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-14913
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-14915
Published: 2018-03-30
Description: In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102386; http://www.securitytracker.com/id/1040106; https://source.android.com/security/bulletin/2018-01-01
CVE: CVE-2017-9681
Published: 2018-03-30
Description: In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100210; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100210
CVE: CVE-2017-1705
Published: 2018-03-30
Description: IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visible at first it can be obtained by viewing the page source. IBM X-Force ID: 134427.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22014988; http://www.securityfocus.com/bid/103677; https://exchange.xforce.ibmcloud.com/vulnerabilities/134427
CVE: CVE-2017-1747
Published: 2018-03-30
Description: A specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applications consuming messages that it needs to perform data conversion on. IBM X-Force ID: 135520.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22012992; http://www.securityfocus.com/bid/103590; https://exchange.xforce.ibmcloud.com/vulnerabilities/135520
CVE: CVE-2017-1756
Published: 2018-03-30
Description: IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22010796; http://www.securityfocus.com/bid/103589; https://exchange.xforce.ibmcloud.com/vulnerabilities/135856
CVE: CVE-2017-1765
Published: 2018-03-30
Description: IBM Business Process Manager 8.6 could allow an authenticated user with special privileges to reveal sensitive information about the application server. IBM X-Force ID: 136150.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22011844; http://www.securityfocus.com/bid/103678; http://www.securitytracker.com/id/1040622
CVE: CVE-2017-1766
Published: 2018-03-30
Description: Due to incorrect authorization in IBM Business Process Manager 8.6 an attacker can claim and work on ad hoc tasks he is not assigned to. IBM X-Force ID: 136151.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://www.ibm.com/support/docview.wss?uid=swg22011866; https://exchange.xforce.ibmcloud.com/vulnerabilities/136151; http://www.ibm.com/support/docview.wss?uid=swg22011866
CVE: CVE-2017-1767
Published: 2018-03-30
Description: IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136152.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22012396; http://www.securityfocus.com/bid/103679; http://www.securitytracker.com/id/1040623
CVE: CVE-2018-1384
Published: 2018-03-30
Description: IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138135.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22012604; http://www.securityfocus.com/bid/103681; http://www.securitytracker.com/id/1040624
CVE: CVE-2018-1390
Published: 2018-03-30
Description: IBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138221.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22014795; http://www.securityfocus.com/bid/103682; https://exchange.xforce.ibmcloud.com/vulnerabilities/138221
CVE: CVE-2018-9134
Published: 2018-03-30
Description: file_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by renaming an arbitrary file under uploads/userup to a .php file under the web root to achieve PHP code execution. This uses the oldfilename and newfilename parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://xz.aliyun.com/t/2234; https://exchange.xforce.ibmcloud.com/vulnerabilities/141335; https://xz.aliyun.com/t/2234
CVE: CVE-2018-9147
Published: 2018-03-30
Description: Cross-site scripting (XSS) vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gurelahmet.com/cve-2018-9147-gespage-7-5-7-cross-site-scripting-xss-vulnerability/; https://gurelahmet.com/cve-2018-9147-gespage-7-5-7-cross-site-scripting-xss-vulnerability/
CVE: CVE-2018-3728
Published: 2018-03-30
Description: hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVSS Score: 8.8 (HIGH)
CWE: CWE-471, CWE-471
References: http://www.securityfocus.com/bid/103108; https://access.redhat.com/errata/RHSA-2018:1263; https://access.redhat.com/errata/RHSA-2018:1264
CVE: CVE-2018-3740
Published: 2018-03-30
Description: A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-20
References: https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/; https://github.com/rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e; https://github.com/rgrove/sanitize/issues/176
CVE: CVE-2018-3741
Published: 2018-03-30
Description: There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae; https://github.com/rails/rails-html-sanitizer/commit/f3ba1a839a35f2ba7f941c15e239a1cb379d56ae
CVE: CVE-2018-9148
Published: 2018-03-30
Description: Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass authentication by listing a directory. NOTE: this can be exploited in conjunction with CVE-2018-7171 for remote authentication bypass within a product that uses My Cloud.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://exploit-db.com/exploits/44350/; https://exploit-db.com/exploits/44350/
CVE: CVE-2018-9151
Published: 2018-03-30
Description: A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2018/Mar/78; http://seclists.org/fulldisclosure/2018/Mar/78
CVE: CVE-2018-3817
Published: 2018-03-30
Description: When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-200
References: https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763; https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763
CVE: CVE-2018-3818
Published: 2018-03-30
Description: Kibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the colored fields formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102734; https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763; http://www.securityfocus.com/bid/102734
CVE: CVE-2018-3819
Published: 2018-03-30
Description: The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683; https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683
CVE: CVE-2018-3820
Published: 2018-03-30
Description: Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting (XSS) vulnerability in labs visualizations that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683; https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683
CVE: CVE-2018-3821
Published: 2018-03-30
Description: Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS) vulnerability in the tag cloud visualization that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683; https://discuss.elastic.co/t/elastic-stack-6-1-3-and-5-6-7-security-update/117683
CVE: CVE-2018-3822
Published: 2018-03-30
Description: X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might have been able to impersonate a legitimate user if the SAML Identity Provider allows for self registration with arbitrary identifiers and the attacker can register an account which an identifier that shares a suffix with a legitimate account. Both of those conditions must be true in order to exploit this flaw.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-22
References: https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848; https://discuss.elastic.co/t/elastic-stack-6-2-3-security-update/124848
CVE: CVE-2017-11087
Published: 2018-03-30
Description: libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103669; https://source.android.com/security/bulletin/pixel/2018-02-01; http://www.securityfocus.com/bid/103669
CVE: CVE-2017-14875
Published: 2018-03-30
Description: In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-02-01; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=[PII_REDACTED]33bb2440907a8407ed691c99451ddc; https://source.android.com/security/bulletin/pixel/2018-02-01