deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16873
Published: 2018-12-14
Description: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). Using custom domains, it's possible to arrange things so that a Git repository is cloned to a folder named ".git" by using a vanity import path that ends with "/.git". If the Git repository root contains a "HEAD" file, a "config" file, an "objects" directory, a "refs" directory, with some work to ensure the proper ordering of operations, "go get -u" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the "config" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running "go get -u".
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html
CVE: CVE-2018-16874
Published: 2018-12-14
Description: In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains curly braces (both '{' and '}' characters). Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https://golang.org/cmd/go/#hdr-Module_aware_go_get). The attacker can cause an arbitrary filesystem write, which can lead to code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html
CVE: CVE-2018-16875
Published: 2018-12-14
Description: The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting client certificates and TLS clients are affected.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00060.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00011.html
CVE: CVE-2018-18006
Published: 2018-12-14
Description: Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/150399/Ricoh-myPrint-Hardcoded-Credentials-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Nov/46; http://packetstormsecurity.com/files/150399/Ricoh-myPrint-Hardcoded-Credentials-Information-Disclosure.html
CVE: CVE-2018-18984
Published: 2018-12-14
Description: Medtronic CareLink and Encore Programmers

 do not encrypt or do not sufficiently encrypt sensitive 
PII and PHI information while at rest .
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311, CWE-312
References: http://www.securityfocus.com/bid/106215; https://global.medtronic.com/xg-en/product-security/security-bulletins/carelink-9790-2090-29901.html; https://ics-cert.us-cert.gov/advisories/ICSMA-18-347-01
CVE: CVE-2018-19003
Published: 2018-12-14
Description: GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.03.28C to 05.02.04C, EX2100e All versions prior to v04.09.00C, EX2100e_Reg All versions prior to v04.09.00C, and LS2100e All versions prior to v04.09.00C The affected versions of the application have a path traversal vulnerability that fails to restrict the ability of an attacker to gain access to restricted information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/106216; https://ics-cert.us-cert.gov/advisories/ICSA-18-347-04; http://www.securityfocus.com/bid/106216
CVE: CVE-2018-19413
Published: 2018-12-14
Description: A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access controls that cause the API to return the externalIdentity field to non-administrator users. The attacker could use this information in subsequent attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/150496/SonarSource-SonarQube-7.3-Information-Disclosure.html; https://jira.sonarsource.com/browse/SONAR-11305; http://packetstormsecurity.com/files/150496/SonarSource-SonarQube-7.3-Information-Disclosure.html
CVE: CVE-2018-1848
Published: 2018-12-14
Description: IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150947.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106217; https://exchange.xforce.ibmcloud.com/vulnerabilities/150947; https://www.ibm.com/support/docview.wss?uid=ibm10743005
CVE: CVE-2018-1977
Published: 2018-12-14
Description: IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with TRUNCATE function. IBM X-Force ID: 154032.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=ibm10788089; http://www.securityfocus.com/bid/106222; https://exchange.xforce.ibmcloud.com/vulnerabilities/154032
CVE: CVE-2018-19007
Published: 2018-12-14
Description: In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/106208; https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03; http://www.securityfocus.com/bid/106208
CVE: CVE-2018-20147
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleting files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
CVE: CVE-2018-20148
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata in a wp.getMediaItem XMLRPC call. This is caused by mishandling of serialized data at phar:// URLs in the wp_get_attachment_thumb_file function in wp-includes/post.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/106220; https://blog.secarma.co.uk/labs/near-phar-dangerous-unserialization-wherever-you-are; https://codex.wordpress.org/Version_4.9.9
CVE: CVE-2018-20149
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://github.com/WordPress/WordPress/commit/246a70bdbfac3bd45ff71c7941deef1bb206b19a
CVE: CVE-2018-20150
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://github.com/WordPress/WordPress/commit/fb3c6ea0618fcb9a51d4f2c1940e9efcd4a2d460
CVE: CVE-2018-20151
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
CVE: CVE-2018-20152
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
CVE: CVE-2018-20153
Published: 2018-12-14
Description: In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106220; https://codex.wordpress.org/Version_4.9.9; https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
CVE: CVE-2018-20154
Published: 2018-12-14
Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/; https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE: CVE-2018-20155
Published: 2018-12-14
Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/; https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE: CVE-2018-20156
Published: 2018-12-14
Description: The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/; https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/
CVE: CVE-2018-20157
Published: 2018-12-15
Description: The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/OpenRefine/OpenRefine/issues/1907; https://github.com/OpenRefine/OpenRefine/issues/1907
CVE: CVE-2018-20159
Published: 2018-12-15
Description: i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a ".zip" file because a ZIP archive is accepted by /admin/?req=modules&action=add as a plugin, and extracted to the main directory. In order for the ".zip" file to be accepted, it must also contain a package.json file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/45957; https://pentest.com.tr/exploits/i-doit-CMDB-1-11-2-Remote-Code-Execution.html
CVE: CVE-2018-20161
Published: 2018-12-15
Description: A design flaw in the BlinkForHome (aka Blink For Home) Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips (triggered by the motion sensor) are not saved if the attacker's traffic (such as Dot11Deauth) successfully disconnects the Sync Module from the Wi-Fi network. (Access to live video from the app also becomes unavailable.)
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/Jacquais/BlinkVuln; https://github.com/Jacquais/BlinkVuln
CVE: CVE-2018-20167
Published: 2018-12-17
Description: Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe "cat README.md" command when \e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME types (/usr/share/applications). The control sequence defers unknown file types to the handle_unknown_media() function, which executes xdg-open against the filename specified in the sequence. The use of xdg-open for all unknown file types allows executable file formats with a registered shared MIME type to be executed. An attacker can achieve remote code execution by introducing an executable file and a plain text file containing the control sequence through a fake software project (e.g., in Git or a tarball). When the control sequence is rendered (such as with cat), the executable file will be run.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://phab.enlightenment.org/T7504; https://phab.enlightenment.org/rTRM1ac204da9148e7bccb1b5f34b523e2094dfc39e2; https://www.enlightenment.org/news/2018-12-16-terminology-1.3.1
CVE: CVE-2018-20168
Published: 2018-12-17
Description: Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1674; https://bugs.chromium.org/p/project-zero/issues/detail?id=1674
CVE: CVE-2017-18352
Published: 2018-12-17
Description: Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.chromium.org/p/chromium/issues/detail?id=759111; https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e; https://github.com/GoogleChrome/rendertron/pull/88
CVE: CVE-2017-18353
Published: 2018-12-17
Description: Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.
CVSS Score: 7.5 (HIGH)
References: https://bugs.chromium.org/p/chromium/issues/detail?id=759111; https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e; https://github.com/GoogleChrome/rendertron/pull/88
CVE: CVE-2017-18354
Published: 2018-12-17
Description: Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://bugs.chromium.org/p/chromium/issues/detail?id=759111; https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e; https://github.com/GoogleChrome/rendertron/pull/88
CVE: CVE-2017-18355
Published: 2018-12-17
Description: Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bugs.chromium.org/p/chromium/issues/detail?id=759111; https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e; https://github.com/GoogleChrome/rendertron/pull/88
CVE: CVE-2018-20169
Published: 2018-12-17
Description: An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf; https://access.redhat.com/errata/RHSA-2019:3309; https://access.redhat.com/errata/RHSA-2019:3517
CVE: CVE-2018-20170
Published: 2018-12-17
Description: OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request. NOTE: the vendor's position is that this is a hardening opportunity, and not necessarily an issue that should have an OpenStack Security Advisory
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.launchpad.net/keystone/+bug/1795800; https://bugs.launchpad.net/keystone/+bug/1795800
CVE: CVE-2018-20173
Published: 2018-12-17
Description: Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.manageengine.com/network-monitoring/help/read-me.html; https://www.manageengine.com/network-monitoring/help/read-me.html
CVE: CVE-2018-18245
Published: 2018-12-17
Description: Nagios Core 4.4.2 has XSS via the alert summary reports of plugin results, as demonstrated by a SCRIPT element delivered by a modified check_load plugin to NRPE.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00014.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00022.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180026.txt
CVE: CVE-2018-18246
Published: 2018-12-17
Description: Icinga Web 2 before 2.6.2 has CSRF via /icingaweb2/config/moduledisable?name=monitoring to disable the monitoring module, or via /icingaweb2/config/moduleenable?name=setup to enable the setup module.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180027.txt; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE: CVE-2018-18247
Published: 2018-12-17
Description: Icinga Web 2 before 2.6.2 has XSS via the /icingaweb2/navigation/add icon parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180029.txt; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE: CVE-2018-18248
Published: 2018-12-17
Description: Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180028.txt; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE: CVE-2018-18249
Published: 2018-12-17
Description: Icinga Web 2 before 2.6.2 allows injection of PHP ini-file directives via vectors involving environment variables as the channel to send information to the attacker, such as a name=${PATH}_${APACHE_RUN_DIR}_${APACHE_RUN_USER} parameter to /icingaweb2/navigation/add or /icingaweb2/dashboard/new-dashlet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE: CVE-2018-18250
Published: 2018-12-17
Description: Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180030.txt; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00031.html
CVE: CVE-2018-19295
Published: 2018-12-17
Description: Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/sylabs/singularity/releases/tag/2.6.1; https://github.com/sylabs/singularity/releases/tag/2.6.1
CVE: CVE-2018-19649
Published: 2018-12-17
Description: XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/20; http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html
CVE: CVE-2018-19765
Published: 2018-12-17
Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/20; http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html
CVE: CVE-2018-19766
Published: 2018-12-17
Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/20; http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html
CVE: CVE-2018-19767
Published: 2018-12-17
Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/20; http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html
CVE: CVE-2018-19768
Published: 2018-12-17
Description: Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/20; http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html