deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12679
Published: 2019-04-02
Description: The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://github.com/Tanganelli/CoAPthon3/issues/16; https://github.com/Tanganelli/CoAPthon3/issues/16
CVE: CVE-2019-10707
Published: 2019-04-02
Description: MKCMS V5.0 has SQL injection via the bplay.php play parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.iwantacve.cn/index.php/archives/181/; http://www.iwantacve.cn/index.php/archives/181/
CVE: CVE-2019-10708
Published: 2019-04-02
Description: S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.iwantacve.cn/index.php/archives/185/; http://www.iwantacve.cn/index.php/archives/185/
CVE: CVE-2017-6047
Published: 2019-04-02
Description: Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01
CVE: CVE-2017-6049
Published: 2019-04-02
Description: Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-256, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-136-01
CVE: CVE-2018-12680
Published: 2019-04-02
Description: The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://github.com/Tanganelli/CoAPthon/issues/135; https://github.com/Tanganelli/CoAPthon/issues/135
CVE: CVE-2019-6531
Published: 2019-04-02
Description: An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.
CVSS Score: 8.1 (HIGH)
CWE: CWE-598
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05; https://ics-cert.us-cert.gov/advisories/ICSA-19-036-05
CVE: CVE-2019-10714
Published: 2019-04-02
Description: LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/ImageMagick/ImageMagick/commit/07eebcd72f45c8fd7563d3f9ec5d2bed48f65f36; https://github.com/ImageMagick/ImageMagick/commit/58d9c46929ca0828edde34d263700c3a5fe8dc3c; https://github.com/ImageMagick/ImageMagick/commit/edc7d3035883ddca8413e4fe7689aa2e579ef04a
CVE: CVE-2018-18035
Published: 2019-04-02
Description: A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.open-emr.org/wiki/index.php/OpenEMR_Patches; https://www.purplemet.com/blog/openemr-xss-vulnerability; https://www.open-emr.org/wiki/index.php/OpenEMR_Patches
CVE: CVE-2019-6506
Published: 2019-04-02
Description: SuiteCRM before 7.8.28, 7.9.x and 7.10.x before 7.10.15, and 7.11.x before 7.11.3 allows SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://docs.suitecrm.com/admin/releases/#anchor-7.10.11; https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_15; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_3
CVE: CVE-2019-10673
Published: 2019-04-03
Description: A CSRF vulnerability in a logged-in user's profile edit form in the Ultimate Member plugin before 2.0.40 for WordPress allows attackers to become admin and subsequently extract sensitive information and execute arbitrary code. This occurs because the attacker can change the e-mail address in the administrator profile, and then the attacker is able to reset the administrator password using the WordPress "password forget" form.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/152315/WordPress-Ultimate-Member-2.0.38-Cross-Site-Request-Forgery.html; https://wpvulndb.com/vulnerabilities/9250; http://packetstormsecurity.com/files/152315/WordPress-Ultimate-Member-2.0.38-Cross-Site-Request-Forgery.html
CVE: CVE-2018-1731
Published: 2019-04-03
Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147710.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10793649; http://www.securityfocus.com/bid/107771; https://exchange.xforce.ibmcloud.com/vulnerabilities/147710
CVE: CVE-2018-1913
Published: 2019-04-03
Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152737.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10793649; http://www.securityfocus.com/bid/107771; https://exchange.xforce.ibmcloud.com/vulnerabilities/152737
CVE: CVE-2018-1936
Published: 2019-04-03
Description: IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 153316.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/153316; https://www.ibm.com/support/docview.wss?uid=ibm10741481; https://exchange.xforce.ibmcloud.com/vulnerabilities/153316
CVE: CVE-2019-4014
Published: 2019-04-03
Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-Force ID: 155892.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/155892; https://www.ibm.com/support/docview.wss?uid=ibm10878793; https://exchange.xforce.ibmcloud.com/vulnerabilities/155892
CVE: CVE-2019-10261
Published: 2019-04-03
Description: CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107769; https://packetstormsecurity.com/files/152303/CentOS-Web-Panel-0.9.8.789-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/46629
CVE: CVE-2019-5421
Published: 2019-04-03
Description: Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts` method. File location: lib/devise/models/lockable.rb that can result in Multiple concurrent requests can prevent an attacker from being blocked on brute force attacks. This attack appear to be exploitable via Network connectivity - brute force attacks. This vulnerability appears to have been fixed in 4.6.0 and later.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-367, CWE-307
References: https://github.com/plataformatec/devise/issues/4981; https://github.com/plataformatec/devise/pull/4996; https://github.com/plataformatec/devise/issues/4981
CVE: CVE-2019-5422
Published: 2019-04-03
Description: XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/331110; https://hackerone.com/reports/331110
CVE: CVE-2019-5423
Published: 2019-04-03
Description: Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/384939; https://hackerone.com/reports/384939
CVE: CVE-2019-10268
Published: 2019-04-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2017-13911
Published: 2019-04-03
Description: A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/kb/HT208331; https://support.apple.com/kb/HT208692; https://support.apple.com/kb/HT208331
CVE: CVE-2017-7151
Published: 2019-04-03
Description: A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/kb/HT208325; https://support.apple.com/kb/HT208326; https://support.apple.com/kb/HT208327
CVE: CVE-2018-20505
Published: 2019-04-03
Description: SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2019/Jan/62; http://seclists.org/fulldisclosure/2019/Jan/64; http://seclists.org/fulldisclosure/2019/Jan/66
CVE: CVE-2018-20506
Published: 2019-04-03
Description: SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html; http://seclists.org/fulldisclosure/2019/Jan/62; http://seclists.org/fulldisclosure/2019/Jan/64
CVE: CVE-2018-4126
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4145
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.3, tvOS 11.3, watchOS 4.3, Safari 11.1, iTunes 12.7.4 for Windows, iCloud for Windows 7.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208693; https://support.apple.com/kb/HT208695; https://support.apple.com/kb/HT208696
CVE: CVE-2018-4153
Published: 2019-04-03
Description: An injection issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-74
References: https://support.apple.com/kb/HT209139; https://support.apple.com/kb/HT209193; https://support.apple.com/kb/HT209139
CVE: CVE-2018-4178
Published: 2019-04-03
Description: A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4191
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4195
Published: 2019-04-03
Description: An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT209109; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4197
Published: 2019-04-03
Description: A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209109
CVE: CVE-2018-4203
Published: 2019-04-03
Description: An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT209106; https://support.apple.com/kb/HT209107; https://support.apple.com/kb/HT209108
CVE: CVE-2018-4216
Published: 2019-04-03
Description: A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208938
CVE: CVE-2018-4248
Published: 2019-04-03
Description: An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/kb/HT208935; https://support.apple.com/kb/HT208936; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4259
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/172831/macOS-NFS-Client-Buffer-Overflow.html; https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT209193
CVE: CVE-2018-4260
Published: 2019-04-03
Description: An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT208934; https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4261
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4263
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4264
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4265
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4266
Published: 2019-04-03
Description: A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4267
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4268
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4269
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208935; https://support.apple.com/kb/HT208936
CVE: CVE-2018-4270
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4271
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4272
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4273
Published: 2019-04-03
Description: Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4274
Published: 2019-04-03
Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/kb/HT208934; https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4275
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208938; https://support.apple.com/kb/HT208938
CVE: CVE-2018-4276
Published: 2019-04-03
Description: A null pointer dereference was addressed with improved validation. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4279
Published: 2019-04-03
Description: An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/kb/HT208934; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4280
Published: 2019-04-03
Description: A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/kb/HT208935; https://support.apple.com/kb/HT208936; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4282
Published: 2019-04-03
Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/kb/HT208935; https://support.apple.com/kb/HT208936; https://support.apple.com/kb/HT208938
CVE: CVE-2018-4283
Published: 2019-04-03
Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937
CVE: CVE-2018-4284
Published: 2019-04-03
Description: A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: https://support.apple.com/kb/HT208932; https://support.apple.com/kb/HT208933; https://support.apple.com/kb/HT208934
CVE: CVE-2018-4285
Published: 2019-04-03
Description: A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: https://support.apple.com/kb/HT208937; https://support.apple.com/kb/HT208937