deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12238
Published: 2018-11-29
Description: Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105917; https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html; http://www.securityfocus.com/bid/105917
CVE: CVE-2018-12239
Published: 2018-11-29
Description: Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud (SEP Cloud) prior to 22.15.1 may be susceptible to an AV bypass issue, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses; the antivirus bypass exploit looks to alter the file being scanned so it is not detected.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/105918; https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html; http://www.securityfocus.com/bid/105918
CVE: CVE-2018-12245
Published: 2018-11-29
Description: Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only manifests at install time; no remediation is required for software that has already been installed. This issue only impacted the Trialware media for Symantec Endpoint Protection, which has since been updated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/105919; https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html; http://www.securityfocus.com/bid/105919
CVE: CVE-2018-18649
Published: 2018-11-29
Description: An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows for remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://about.gitlab.com/2018/10/29/security-release-gitlab-11-dot-4-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/53072; https://about.gitlab.com/2018/10/29/security-release-gitlab-11-dot-4-dot-3-released/
CVE: CVE-2018-11002
Published: 2018-11-29
Description: Pulse Secure Desktop Client 5.3 up to and including R6.0 build 1769 on Windows has Insecure Permissions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/106054; https://www.themissinglink.com.au/security-advisories-cve-2017-16878-0; http://www.securityfocus.com/bid/106054
CVE: CVE-2018-1762
Published: 2018-11-29
Description: IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148616.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106053; https://exchange.xforce.ibmcloud.com/vulnerabilities/148616; https://www.ibm.com/support/docview.wss?uid=ibm10742281
CVE: CVE-2018-10851
Published: 2018-11-29
Description: PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-772
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10851; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-04.html
CVE: CVE-2018-14626
Published: 2018-11-29
Description: PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14626; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-05.html; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-06.html
CVE: CVE-2018-16859
Published: 2018-11-29
Description: Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user with administrator privileges on the machine can view these logs and discover the plaintext password. Ansible Engine 2.8 and older are believed to be vulnerable.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-532, CWE-532
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
CVE: CVE-2018-19692
Published: 2018-11-29
Description: An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code by uploading a .php file with the image/jpeg content type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/fmsdwifull/tp5cms/issues/5; https://github.com/fmsdwifull/tp5cms/issues/5
CVE: CVE-2018-19693
Published: 2018-11-29
Description: An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fmsdwifull/tp5cms/issues/6; https://github.com/fmsdwifull/tp5cms/issues/6
CVE: CVE-2018-8784
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress_segment() that results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: http://www.securityfocus.com/bid/106938; https://github.com/FreeRDP/FreeRDP/commit/17c363a5162fd4dc77b1df54e48d7bd9bf6b3be7; https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
CVE: CVE-2018-8785
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfx_decompress() that results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: http://www.securityfocus.com/bid/106938; https://github.com/FreeRDP/FreeRDP/commit/602f4a2e14b41703b5f431de3154cd46a5750a2d; https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/
CVE: CVE-2018-8786
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-680, CWE-681, CWE-787
References: http://www.securityfocus.com/bid/106938; https://access.redhat.com/errata/RHSA-2019:0697; https://github.com/FreeRDP/FreeRDP/commit/445a5a42c500ceb80f8fa7f2c11f[PII_REDACTED]f3
CVE: CVE-2018-8787
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-680, CWE-190, CWE-787
References: http://www.securityfocus.com/bid/106938; https://access.redhat.com/errata/RHSA-2019:0697; https://github.com/FreeRDP/FreeRDP/commit/09b9d4f1994a674c4ec85b4947aa656eda1aed8a
CVE: CVE-2018-8788
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/106938; https://access.redhat.com/errata/RHSA-2019:0697; https://github.com/FreeRDP/FreeRDP/commit/d1112c279bd1a327e8e4d0b5f371458bf2579659
CVE: CVE-2018-8789
Published: 2018-11-29
Description: FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://www.securityfocus.com/bid/106938; https://github.com/FreeRDP/FreeRDP/commit/2ee663f39dc8dac3d9988e847db19b2d7e3ac8c6; https://lists.debian.org/debian-lts-announce/2019/02/msg00015.html
CVE: CVE-2018-15978
Published: 2018-11-29
Description: Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105909; http://www.securitytracker.com/id/1042098; https://access.redhat.com/errata/RHSA-2018:3618
CVE: CVE-2018-15979
Published: 2018-11-29
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]0 and earlier, 2[PII_REDACTED]5 and earlier, and 2[PII_REDACTED]6 and earlier have a ntlm sso hash theft vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105907; http://www.securitytracker.com/id/1042099; https://helpx.adobe.com/security/products/acrobat/apsb18-40.html
CVE: CVE-2018-15980
Published: 2018-11-29
Description: Adobe Photoshop CC versions 19.1.6 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105905; http://www.securitytracker.com/id/1042097; https://helpx.adobe.com/security/products/photoshop/apsb18-43.html
CVE: CVE-2018-15981
Published: 2018-11-29
Description: Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: http://www.securityfocus.com/bid/105964; http://www.securitytracker.com/id/1042151; https://access.redhat.com/errata/RHSA-2018:3644
CVE: CVE-2018-15537
Published: 2018-11-29
Description: Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/150330/OCS-Inventory-NG-ocsreports-Shell-Upload.html; http://seclists.org/fulldisclosure/2018/Nov/40; http://packetstormsecurity.com/files/150330/OCS-Inventory-NG-ocsreports-Shell-Upload.html
CVE: CVE-2018-19120
Published: 2018-11-29
Description: The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649420; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CWRCGXLPJHM4OFD66BINH2FIMYHRCRKF/; https://bugzilla.redhat.com/show_bug.cgi?id=1649420
CVE: CVE-2018-19748
Published: 2018-11-29
Description: app/plug/attachment/controller/admincontroller.php in SDCMS 1.6 allows reading arbitrary files via a /?m=plug&c=admin&a=index&p=attachment&root= directory traversal. The value of the root parameter must be base64 encoded (note that base64 encoding, instead of URL encoding, is very rare in a directory traversal attack vector).
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_directory_traversal.doc; https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/SDCMS_1.6_directory_traversal.doc; https://blog.whiterabbitxyj.com/cve/SDCMS_1.6_directory_traversal.doc
CVE: CVE-2018-18619
Published: 2018-11-29
Description: internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query, allowing remote attackers to execute the sqli attack via a URL in the "page" parameter.  NOTE: The product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/150261/Advanced-Comment-System-1.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2018/Nov/30; https://www.exploit-db.com/exploits/45853/
CVE: CVE-2018-19749
Published: 2018-11-29
Description: DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/81; https://www.exploit-db.com/exploits/45941/; https://github.com/domainmod/domainmod/issues/81
CVE: CVE-2018-19750
Published: 2018-11-29
Description: DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/82; https://www.exploit-db.com/exploits/45946/; https://github.com/domainmod/domainmod/issues/82
CVE: CVE-2018-19751
Published: 2018-11-29
Description: DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/83; https://www.exploit-db.com/exploits/45947/; https://github.com/domainmod/domainmod/issues/83
CVE: CVE-2018-19752
Published: 2018-11-29
Description: DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/84; https://www.exploit-db.com/exploits/45949/; https://github.com/domainmod/domainmod/issues/84
CVE: CVE-2[PII_REDACTED]
Published: 2018-11-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-19132.  Reason: This candidate is a reservation duplicate of CVE-2018-19132.  Notes: All CVE users should reference CVE-2018-19132 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-11-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-19131.  Reason: This candidate is a reservation duplicate of CVE-2018-19131.  Notes: All CVE users should reference CVE-2018-19131 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-19497
Published: 2018-11-29
Description: In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service (SEGV on unknown address with READ memory access in a tsk_getu16 call in hfs_dir_open_meta_cb in tsk/fs/hfs_dent.c).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/sleuthkit/sleuthkit/commit/bc04aa017c0bd297de8a3b7fc40ffc6ddddbb95d; https://github.com/sleuthkit/sleuthkit/pull/1374; https://lists.debian.org/debian-lts-announce/2018/12/msg00008.html
CVE: CVE-2018-19527
Published: 2018-11-29
Description: i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mimaz.org/pocs/i4xss.mp4; https://www.mimaz.org/pocs/i4xss.mp4
CVE: CVE-2018-19755
Published: 2018-11-30
Description: There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service (out-of-bounds array access) because a certain conversion can result in a negative integer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392528; https://repo.or.cz/nasm.git/commit/3079f7966dbed4497e36d5067cbfd896a90358cb; https://bugzilla.nasm.us/show_bug.cgi?id=3392528
CVE: CVE-2018-19756
Published: 2018-11-30
Description: There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649198; https://bugzilla.redhat.com/show_bug.cgi?id=1649198
CVE: CVE-2018-19757
Published: 2018-11-30
Description: There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649197; https://bugzilla.redhat.com/show_bug.cgi?id=1649197
CVE: CVE-2018-19758
Published: 2018-11-30
Description: There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1643812; https://lists.debian.org/debian-lts-announce/2019/01/msg00008.html; https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
CVE: CVE-2018-19759
Published: 2018-11-30
Description: There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that will cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649202; https://bugzilla.redhat.com/show_bug.cgi?id=1649202
CVE: CVE-2018-19760
Published: 2018-11-30
Description: cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak.
CVSS Score: 8.8 (HIGH)
CWE: CWE-772
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649152; https://bugzilla.redhat.com/show_bug.cgi?id=1649152
CVE: CVE-2018-19761
Published: 2018-11-30
Description: There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649200; https://bugzilla.redhat.com/show_bug.cgi?id=1649200
CVE: CVE-2018-19762
Published: 2018-11-30
Description: There is a heap-based buffer overflow at fromsixel.c (function: image_buffer_resize) in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649199; https://bugzilla.redhat.com/show_bug.cgi?id=1649199
CVE: CVE-2018-19763
Published: 2018-11-30
Description: There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1649201; https://bugzilla.redhat.com/show_bug.cgi?id=1649201
CVE: CVE-2018-19764
Published: 2018-11-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-19777
Published: 2018-11-30
Description: In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?754ac68f119e0c25cd33c5d652d8aabd533a9fb3; https://bugs.ghostscript.com/show_bug.cgi?id=700301; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXKCY35PKC32IFHN4RBUCZ75OWEYVJH/
CVE: CVE-2018-14637
Published: 2018-11-30
Description: The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-285, CWE-287, CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14637; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14637
CVE: CVE-2018-0716
Published: 2018-11-30
Description: Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201811-29; https://www.qnap.com/zh-tw/security-advisory/nas-201811-29
CVE: CVE-2018-16093
Published: 2018-11-30
Description: In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://support.lenovo.com/us/en/solutions/LEN-23800; https://support.lenovo.com/us/en/solutions/LEN-23800
CVE: CVE-2018-16097
Published: 2018-11-30
Description: LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://support.lenovo.com/us/en/solutions/LEN-23800; https://support.lenovo.com/us/en/solutions/LEN-23800
CVE: CVE-2018-9072
Published: 2018-11-30
Description: In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.lenovo.com/us/en/solutions/LEN-23800; https://support.lenovo.com/us/en/solutions/LEN-23800
CVE: CVE-2018-1897
Published: 2018-11-30
Description: IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 152462.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: http://www.ibm.com/support/docview.wss?uid=ibm10737295; http://www.securityfocus.com/bid/106060; http://www.securitytracker.com/id/1042165
CVE: CVE-2018-1927
Published: 2018-11-30
Description: IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=ibm10741605; https://exchange.xforce.ibmcloud.com/vulnerabilities/153118; http://www.ibm.com/support/docview.wss?uid=ibm10741605
CVE: CVE-2018-1928
Published: 2018-11-30
Description: IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119.
CVSS Score: 6.7 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=ibm10741611; https://exchange.xforce.ibmcloud.com/vulnerabilities/153119; http://www.ibm.com/support/docview.wss?uid=ibm10741611