deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-2125
Published: 2018-10-31
Description: It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0494.html; http://rhn.redhat.com/errata/RHSA-2017-0495.html; http://rhn.redhat.com/errata/RHSA-2017-0662.html
CVE: CVE-2018-11759
Published: 2018-10-31
Description: The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing the application via the reverse proxy. It was also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is some overlap between this issue and CVE-2018-1323, they are not identical.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/105888; https://access.redhat.com/errata/RHSA-2019:0366; https://access.redhat.com/errata/RHSA-2019:0367
CVE: CVE-2018-14661
Published: 2018-10-31
Description: It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-134
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2016-6328
Published: 2018-10-31
Description: A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).
CVSS Score: 8.1 (HIGH)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328; https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html
CVE: CVE-2018-14651
Published: 2018-10-31
Description: It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14651
CVE: CVE-2018-15705
Published: 2018-10-31
Description: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFile API. An attacker can use this vulnerability to remotely execute arbitrary code.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45774/; https://www.tenable.com/security/research/tra-2018-35; https://www.exploit-db.com/exploits/45774/
CVE: CVE-2018-15706
Published: 2018-10-31
Description: WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.tenable.com/security/research/tra-2018-35; https://www.tenable.com/security/research/tra-2018-35
CVE: CVE-2018-15707
Published: 2018-10-31
Description: Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/45774/; https://www.tenable.com/security/research/tra-2018-35; https://www.exploit-db.com/exploits/45774/
CVE: CVE-2018-18883
Published: 2018-11-01
Description: An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105817; http://www.securitytracker.com/id/1042021; https://xenbits.xen.org/xsa/advisory-278.html
CVE: CVE-2018-18887
Published: 2018-11-01
Description: S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.iwantacve.cn/index.php/archives/75/; http://www.iwantacve.cn/index.php/archives/75/
CVE: CVE-2018-18888
Published: 2018-11-01
Description: An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/Leslie1sMe/laravelCMS/issues/4; https://github.com/Leslie1sMe/laravelCMS/issues/4
CVE: CVE-2018-18890
Published: 2018-11-01
Description: MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/AvaterXXX/MiniCms/blob/master/Authentication%20and%20Information%20Exposure.md#information-exposure; https://www.patec.cn/newsshow.php?cid=24&id=135; https://github.com/AvaterXXX/MiniCms/blob/master/Authentication%20and%20Information%20Exposure.md#information-exposure
CVE: CVE-2018-18891
Published: 2018-11-01
Description: MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs too late.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/AvaterXXX/MiniCms/blob/master/Authentication%20and%20Information%20Exposure.md#authentication-vulnerability; https://www.patec.cn/newsshow.php?cid=24&id=135; https://github.com/AvaterXXX/MiniCms/blob/master/Authentication%20and%20Information%20Exposure.md#authentication-vulnerability
CVE: CVE-2018-18892
Published: 2018-11-01
Description: MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name field in mc_conf.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/AvaterXXX/MiniCms/blob/master/Command%20Execution.md; https://www.patec.cn/newsshow.php?cid=24&id=135; https://github.com/AvaterXXX/MiniCms/blob/master/Command%20Execution.md
CVE: CVE-2018-15454
Published: 2018-11-01
Description: A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of SIP traffic. An attacker could exploit this vulnerability by sending SIP requests designed to specifically trigger this issue at a high rate across an affected device. Software updates that address this vulnerability are not yet available.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/105768; http://www.securitytracker.com/id/1042129; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181031-asaftd-sip-dos
CVE: CVE-2016-2120
Published: 2018-11-01
Description: An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2120; https://www.debian.org/security/2017/dsa-3764; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2120
CVE: CVE-2016-2123
Published: 2018-11-01
Description: A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/94970; http://www.securitytracker.com/id/1037493; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2123
CVE: CVE-2018-7356
Published: 2018-11-01
Description: All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attackers to spoof connections.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-294
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009783; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009783
CVE: CVE-2018-14660
Published: 2018-11-01
Description: A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2018-3900
Published: 2018-11-01
Description: An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0572; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0572
CVE: CVE-2018-3910
Published: 2018-11-01
Description: An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted SSID can cause a command injection, resulting in code execution. An attacker can cause a camera to connect to this SSID to trigger this vulnerability. Alternatively, an attacker can convince a user to connect their camera to this SSID.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0580; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0580
CVE: CVE-2018-3928
Published: 2018-11-01
Description: An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can cause a settings change, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0595; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0595
CVE: CVE-2018-3947
Published: 2018-11-01
Description: An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US 1.8.7.0D. An attacker can sniff network traffic to exploit this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0616; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0616
CVE: CVE-2018-3977
Published: 2018-11-01
Description: An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html; https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html; https://security.gentoo.org/glsa/201903-17
CVE: CVE-2018-10586
Published: 2018-11-01
Description: NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in versions before 10.1.12.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-003; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-003
CVE: CVE-2018-10587
Published: 2018-11-01
Description: NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These vulnerabilities could allow remote authenticated attackers to inject arbitrary code, resulting in remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2018-004
CVE: CVE-2018-18695
Published: 2018-11-01
Description: M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via a crafted MRD file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/DelspoN/CVE/tree/master/CVE-2018-18695; https://github.com/DelspoN/CVE/tree/master/CVE-2018-18695
CVE: CVE-2018-18714
Published: 2018-11-01
Description: RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-18775
Published: 2018-11-01
Description: Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter.  NOTE: this is a deprecated product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html; https://www.exploit-db.com/exploits/45755/; http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html
CVE: CVE-2018-18776
Published: 2018-11-01
Description: Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the admin/admin.asp ShowAll parameter.  NOTE: this is a deprecated product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html; https://www.exploit-db.com/exploits/45755/; http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html
CVE: CVE-2018-18777
Published: 2018-11-01
Description: Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subpage) allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. (slash dot dot) in a pathname used by a web application.  NOTE: this is a deprecated product.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html; https://www.exploit-db.com/exploits/45755/; http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html
CVE: CVE-2018-6011
Published: 2018-11-01
Description: The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's password hash to generate a 6-digit temporary passcode that can be used for remote and local access, aka a "Use of Password Hash Instead of Password for Authentication" issue. This is exploitable by an attacker who discovers a hash value in the rainmachine-settings.sqlite file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-6012
Published: 2018-11-01
Description: The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-6906
Published: 2018-11-01
Description: A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-6907
Published: 2018-11-01
Description: A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-6908
Published: 2018-11-01
Description: An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-6909
Published: 2018-11-01
Description: A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger; http://www.irongeek.com/i.php?page=videos/bsidesrdu2018/bsidesrdu-2018-07-when-it-rains-it-pours-sam-granger
CVE: CVE-2018-18897
Published: 2018-11-02
Description: An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/issues/654
CVE: CVE-2018-17914
Published: 2018-11-02
Description: InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnerability could allow an unauthenticated user to remotely execute code with the same privileges as that of the InduSoft Web Studio or InTouch Edge HMI (formerly InTouch Machine Edition) runtime.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-258
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01; https://www.tenable.com/security/research/tra-2018-34; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01
CVE: CVE-2018-17916
Published: 2018-11-02
Description: InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. A remote attacker could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed. If InduSoft Web Studio remote communication security was not enabled, or a password was left blank, a remote user could send a carefully crafted packet to invoke an arbitrary process, with potential for code to be executed. The code would be executed under the privileges of the InduSoft Web Studio or InTouch Edge HMI runtime and could lead to a compromise of the InduSoft Web Studio or InTouch Edge HMI server machine.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01; https://www.tenable.com/security/research/tra-2018-34; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01
CVE: CVE-2018-17912
Published: 2018-11-02
Description: An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/105804; https://ics-cert.us-cert.gov/advisories/ICSA-18-305-04; http://www.securityfocus.com/bid/105804
CVE: CVE-2017-1609
Published: 2018-11-02
Description: IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132929.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10738137; http://www.securityfocus.com/bid/106384; https://exchange.xforce.ibmcloud.com/vulnerabilities/132929
CVE: CVE-2018-1552
Published: 2018-11-02
Description: IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434
References: http://www.ibm.com/support/docview.wss?uid=swg22016247; https://exchange.xforce.ibmcloud.com/vulnerabilities/142889; http://www.ibm.com/support/docview.wss?uid=swg22016247