deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20140
Published: 2019-03-21
Description: Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151052/ZenPhoto-1.4.14-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/22; https://github.com/zenphoto/zenphoto/commit/695fb61707e4286b64f6e446c189b449bd07d00a
CVE: CVE-2018-20141
Published: 2019-03-21
Description: AbanteCart 1.2.12 has reflected cross-site scripting (XSS) via the sort parameter, as demonstrated by a /apparel--accessories?sort= substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151305/Abantecart-1.2.12-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/59; https://github.com/abantecart
CVE: CVE-2018-20162
Published: 2019-03-21
Description: Digi TransPort LR54 4.4.0.26 and possible earlier devices have Improper Input Validation that allows users with 'super' CLI access privileges to bypass a restricted shell and execute arbitrary commands as root.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/151719/Digi-TransPort-LR54-Restricted-Shell-Escape.html; https://blog.hackeriet.no/cve-2018-20162-digi-lr54-restricted-shell-escape/; https://seclists.org/bugtraq/2019/Feb/34
CVE: CVE-2018-20212
Published: 2019-03-21
Description: bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/151028/TWiki-6.0.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Jan/7; http://twiki.org/cgi-bin/view/Codev/DownloadTWiki
CVE: CVE-2018-20218
Published: 2019-03-21
Description: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. The login form passes user input directly to a shell command without any kind of escaping or validation in /usr/share/www/check.lp file. An attacker is able to perform command injection using the "password" parameter in the login form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2019/Feb/48; https://zxsecurity.co.nz/research.html; http://seclists.org/fulldisclosure/2019/Feb/48
CVE: CVE-2018-20219
Published: 2019-03-21
Description: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the device sends an authentication cookie to the end user such that they can access the devices web administration panel. This token is hard-coded to a string in the source code (/usr/share/www/check.lp file). By setting this cookie in a browser, an attacker is able to maintain access to every ENC-400 device without knowing the password, which results in authentication bypass. Even if a user changes the password on the device, this token is static and unchanged.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/151802/Teracue-ENC-400-Command-Injection-Missing-Authentication.html; http://seclists.org/fulldisclosure/2019/Feb/48; https://zxsecurity.co.nz/research.html
CVE: CVE-2018-20220
Published: 2019-03-21
Description: An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. While the web interface requires authentication before it can be interacted with, a large portion of the HTTP endpoints are missing authentication. An attacker is able to view these pages before being authenticated, and some of these pages may disclose sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://packetstormsecurity.com/files/151802/Teracue-ENC-400-Command-Injection-Missing-Authentication.html; http://seclists.org/fulldisclosure/2019/Feb/48; https://zxsecurity.co.nz/research.html
CVE: CVE-2018-20221
Published: 2019-03-21
Description: Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserialization of untrusted user input from an authenticated user. The executed code will run as the IIS Application Pool that is running the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/151035/Ajera-Timesheets-9.10.16-Deserialization.html; https://www.exploit-db.com/exploits/46086/; http://packetstormsecurity.com/files/151035/Ajera-Timesheets-9.10.16-Deserialization.html
CVE: CVE-2018-20323
Published: 2019-03-21
Description: www/soap/application/MCSoap/Logs.php in MailCleaner Community Edition 2018.08 allows remote attackers to execute arbitrary OS commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/151056/Mailcleaner-Remote-Code-Execution.html; https://pentest.blog/advisory-mailcleaner-community-edition-remote-code-execution/; http://packetstormsecurity.com/files/151056/Mailcleaner-Remote-Code-Execution.html
CVE: CVE-2018-20340
Published: 2019-03-21
Description: Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is currently in use. It is not possible to perform this attack with a genuine YubiKey.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://blog.inhq.net/posts/yubico-libu2f-host-vuln-part1/; https://developers.yubico.com/libu2f-host/Release_Notes.html; https://seclists.org/bugtraq/2019/Feb/23
CVE: CVE-2018-20525
Published: 2019-03-21
Description: Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html; http://packetstormsecurity.com/files/166585/Roxy-File-Manager-1.4.5-PHP-File-Upload-Restriction-Bypass.html; https://www.exploit-db.com/exploits/46085/
CVE: CVE-2018-20526
Published: 2019-03-21
Description: Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html; https://www.exploit-db.com/exploits/46085/; http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html
CVE: CVE-2018-20555
Published: 2019-03-21
Description: The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/fs0c131y/CVE-2018-20555; https://twitter.com/fs0c131y/status/[PII_REDACTED]08066304; https://wpvulndb.com/vulnerabilities/9204
CVE: CVE-2018-20556
Published: 2019-03-21
Description: SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/151692/WordPress-Booking-Calendar-8.4.3-SQL-Injection.html; https://gist.github.com/B0UG/a750c2c204825453e6faf898ea6d09f6; https://vulners.com/exploitdb/EDB-ID:46377
CVE: CVE-2018-20615
Published: 2019-03-21
Description: An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00018.html; http://www.securityfocus.com/bid/106645; https://access.redhat.com/errata/RHBA-2019:0327
CVE: CVE-2018-20626
Published: 2019-03-21
Description: PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20626-vikas-chaudhary/; https://gkaim.com/cve-2018-20626-vikas-chaudhary/
CVE: CVE-2018-20627
Published: 2019-03-21
Description: PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20627-vikas-chaudhary/; https://gkaim.com/cve-2018-20627-vikas-chaudhary/
CVE: CVE-2018-20628
Published: 2019-03-21
Description: PHP Scripts Mall Charity Foundation Script 1 through 3 allows directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20628-vikas-chaudhary/; https://gkaim.com/cve-2018-20628-vikas-chaudhary/
CVE: CVE-2018-20629
Published: 2019-03-21
Description: PHP Scripts Mall Charity Donation Script readymadeb2bscript has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20629-vikas-chaudhary/; https://gkaim.com/cve-2018-20629-vikas-chaudhary/
CVE: CVE-2018-20630
Published: 2019-03-21
Description: PHP Scripts Mall Advance Crowdfunding Script 2.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20630-vikas-chaudhary/; https://gkaim.com/cve-2018-20630-vikas-chaudhary/
CVE: CVE-2018-20631
Published: 2019-03-21
Description: PHP Scripts Mall Website Seller Script 2.0.5 allows full Path Disclosure via a request for an arbitrary image URL such as a .png file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20631-vikas-chaudhary/; https://gkaim.com/cve-2018-20631-vikas-chaudhary/
CVE: CVE-2018-20632
Published: 2019-03-21
Description: PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20632-vikas-chaudhary/; https://gkaim.com/cve-2018-20632-vikas-chaudhary/
CVE: CVE-2018-20633
Published: 2019-03-21
Description: PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gkaim.com/cve-2018-20633-vikas-chaudhary/; https://gkaim.com/cve-2018-20633-vikas-chaudhary/
CVE: CVE-2018-20634
Published: 2019-03-21
Description: PHP Scripts Mall Advance B2B Script 2.1.4 allows remote attackers to cause a denial of service (changed Page structure) via JavaScript code in the First Name field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://gkaim.com/cve-2018-20634-vikas-chaudhary/; https://gkaim.com/cve-2018-20634-vikas-chaudhary/
CVE: CVE-2018-20635
Published: 2019-03-21
Description: PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20635-vikas-chaudhary/; https://gkaim.com/cve-2018-20635-vikas-chaudhary/
CVE: CVE-2018-20636
Published: 2019-03-21
Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20636-vikas-chaudhary/; https://gkaim.com/cve-2018-20636-vikas-chaudhary/
CVE: CVE-2018-20637
Published: 2019-03-21
Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last Name field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://gkaim.com/cve-2018-20637-vikas-chaudhary/; https://gkaim.com/cve-2018-20637-vikas-chaudhary/
CVE: CVE-2018-20638
Published: 2019-03-21
Description: PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20638-vikas-chaudhary/; https://gkaim.com/cve-2018-20638-vikas-chaudhary/
CVE: CVE-2018-20639
Published: 2019-03-21
Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20639-vikas-chaudhary/; https://gkaim.com/cve-2018-20639-vikas-chaudhary/
CVE: CVE-2018-20640
Published: 2019-03-21
Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20640-vikas-chaudhary/; https://gkaim.com/cve-2018-20640-vikas-chaudhary/
CVE: CVE-2018-20641
Published: 2019-03-21
Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gkaim.com/cve-2018-20641-vikas-chaudhary/; https://gkaim.com/cve-2018-20641-vikas-chaudhary/
CVE: CVE-2018-20642
Published: 2019-03-21
Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://gkaim.com/cve-2018-20642-vikas-chaudhary/; https://gkaim.com/cve-2018-20642-vikas-chaudhary/
CVE: CVE-2018-20643
Published: 2019-03-21
Description: PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20643-vikas-chaudhary/; https://gkaim.com/cve-2018-20643-vikas-chaudhary/
CVE: CVE-2018-20644
Published: 2019-03-21
Description: PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gkaim.com/cve-2018-20644-vikas-chaudhary/; https://gkaim.com/cve-2018-20644-vikas-chaudhary/
CVE: CVE-2018-20645
Published: 2019-03-21
Description: PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-20645-vikas-chaudhary/; https://gkaim.com/cve-2018-20645-vikas-chaudhary/
CVE: CVE-2018-20646
Published: 2019-03-21
Description: PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cve-2018-20646-vikas-chaudhary/; https://gkaim.com/cve-2018-20646-vikas-chaudhary/
CVE: CVE-2018-20647
Published: 2019-03-21
Description: PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gkaim.com/cvehttps://gkaim.com/cve-2018-20647-vikas-chaudhary/; https://gkaim.com/cve-2018-20647-vikas-chaudhary/; https://gkaim.com/cvehttps://gkaim.com/cve-2018-20647-vikas-chaudhary/
CVE: CVE-2018-20648
Published: 2019-03-21
Description: PHP Scripts Mall Car Rental Script 2.0.8 has Cross-Site Request Forgery (CSRF) via accountedit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gkaim.com/cve-2018-20648-vikas-chaudhary/; https://gkaim.com/cve-2018-20648-vikas-chaudhary/
CVE: CVE-2018-20669
Published: 2019-03-21
Description: An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kernel memory, resulting in a Denial of Service or privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/i915/i915_gem_execbuffer.c; http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00042.html; http://www.openwall.com/lists/oss-security/2019/01/23/6
CVE: CVE-2018-20736
Published: 2019-03-21
Description: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/wso2/carbon-apimgt/pull/5844/files; https://wso2.com/security-patch-releases/api-manager; https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20736/
CVE: CVE-2018-20737
Published: 2019-03-21
Description: An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/wso2-extensions/identity-inbound-auth-oauth/pull/978/files; https://wso2.com/security-patch-releases/api-manager; https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20737/
CVE: CVE-2018-4058
Published: 2019-03-21
Description: An exploitable unsafe default configuration vulnerability exists in the TURN server functionality of coTURN prior to 4.5.0.9. By default, the TURN server allows relaying external traffic to the loopback interface of its own host. This can provide access to other private services running on that host, which can lead to further attacks. An attacker can set up a relay with a loopback address as the peer on an affected TURN server to trigger this vulnerability.
CVSS Score: 7.7 (HIGH)
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0732
CVE: CVE-2018-4059
Published: 2019-03-21
Description: An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuration, which can lead to additional attacks. An attacker who can get access to the telnet port can gain administrator access to the TURN server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0733; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0733
CVE: CVE-2018-6517
Published: 2019-03-21
Description: Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's known_hosts file without confirmation. In version 0.3.0 this is updated so that the user's known_hosts file is not updated by chloride.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://puppet.com/security/cve/CVE-2018-6517; https://puppet.com/security/cve/CVE-2018-6517
CVE: CVE-2019-0191
Published: 2019-03-21
Description: Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validation on the paths in the zip file. This means that a malicious user could craft a .kar file with ".." directory names and break out of the directories to write arbitrary content to the filesystem. This is the "Zip-slip" vulnerability - https://snyk.io/research/zip-slip-vulnerability. This vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf releases prior 4.2.3 is impacted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/107462; https://lists.apache.org/thread.html/6856aa7ed7dd805eaf65d0e5e95027dda3b2307aacd1ab4a838c5cd1%40%3Cuser.karaf.apache.org%3E; https://lists.apache.org/thread.html/cef9a2d4b547625e[PII_REDACTED]ac5c59c9d9740e092e777dc3f85070%40%3Ccommits.karaf.apache.org%3E
CVE: CVE-2019-3495
Published: 2019-03-21
Description: An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-798
References: http://packetstormsecurity.com/files/151077/Wifi-soft-Unibox-2.x-Remote-Command-Code-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/23; https://sahildhar.github.io/blogpost/Multiple-RCE-Vulnerabilties-in-Unibox-Controller-0.x-3.x/
CVE: CVE-2019-3496
Published: 2019-03-21
Description: An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostic_tools_controller Diagnostic Tools Controller is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/151077/Wifi-soft-Unibox-2.x-Remote-Command-Code-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/23; https://sahildhar.github.io/blogpost/Multiple-RCE-Vulnerabilties-in-Unibox-Controller-0.x-3.x/
CVE: CVE-2019-3497
Published: 2019-03-21
Description: An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diagnostic Tools component is vulnerable to Remote Command Execution, allowing an attacker to execute arbitrary system commands on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/151077/Wifi-soft-Unibox-2.x-Remote-Command-Code-Injection.html; http://seclists.org/fulldisclosure/2019/Jan/23; https://sahildhar.github.io/blogpost/Multiple-RCE-Vulnerabilties-in-Unibox-Controller-0.x-3.x/
CVE: CVE-2019-3832
Published: 2019-03-21
Description: It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3832; https://github.com/erikd/libsndfile/issues/456; https://github.com/erikd/libsndfile/pull/460
CVE: CVE-2019-3859
Published: 2019-03-21
Description: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html