deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14678
Published: 2018-07-28
Description: An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://www.securityfocus.com/bid/104924; http://www.securitytracker.com/id/1041397; https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
CVE: CVE-2018-14679
Published: 2018-07-28
Description: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-193
References: http://www.openwall.com/lists/oss-security/2018/07/26/1; http://www.securitytracker.com/id/1041410; https://access.redhat.com/errata/RHSA-2018:3327
CVE: CVE-2018-14680
Published: 2018-07-28
Description: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2018/07/26/1; http://www.securitytracker.com/id/1041410; https://access.redhat.com/errata/RHSA-2018:3327
CVE: CVE-2018-14681
Published: 2018-07-28
Description: An issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file header extensions could cause a one or two byte overwrite.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2018/07/26/1; http://www.securitytracker.com/id/1041410; https://access.redhat.com/errata/RHSA-2018:3327
CVE: CVE-2018-14682
Published: 2018-07-28
Description: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.
CVSS Score: 8.8 (HIGH)
CWE: CWE-193
References: http://www.openwall.com/lists/oss-security/2018/07/26/1; http://www.securitytracker.com/id/1041410; https://access.redhat.com/errata/RHSA-2018:3327
CVE: CVE-2018-14685
Published: 2018-07-28
Description: The add function in www/Lib/Lib/Action/Admin/TplAction.class.php in Gxlcms v1.1.4 allows remote attackers to read arbitrary files via a crafted index.php?s=Admin-Tpl-ADD-id request, related to Lib/Common/Admin/function.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/TonyKentClark/MyCodeAudit/blob/master/gxlcms1.1.4; https://github.com/TonyKentClark/MyCodeAudit/blob/master/gxlcms1.1.4
CVE: CVE-2018-14686
Published: 2018-07-28
Description: system/edit_book.php in XYCMS 1.7 has stored XSS via a crafted add_do.php request, related to add_book.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TonyKentClark/MyCodeAudit/blob/master/xycms%20%20v1.7; https://github.com/TonyKentClark/MyCodeAudit/blob/master/xycms%20%20v1.7
CVE: CVE-2018-14734
Published: 2018-07-29
Description: drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cb2595c1393b4a5211534e6f0a0fbad369e21ad8; https://access.redhat.com/errata/RHSA-2019:0831; https://access.redhat.com/errata/RHSA-2019:2029
CVE: CVE-2018-14736
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A buffer over-read can occur in pbc_wmessage_string in wmessage.c for PTYPE_ENUM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/cloudwu/pbc/issues/123#issue-343906084; https://github.com/cloudwu/pbc/issues/123#issue-343906084
CVE: CVE-2018-14737
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A NULL pointer dereference can occur in pbc_wmessage_string in wmessage.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407303005; https://github.com/cloudwu/pbc/issues/122#issuecomment-407303005
CVE: CVE-2018-14738
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_rmessage_message in rmessage.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407309546; https://github.com/cloudwu/pbc/issues/122#issuecomment-407309546
CVE: CVE-2018-14739
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_set_default in pattern.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407323971; https://github.com/cloudwu/pbc/issues/122#issuecomment-407323971
CVE: CVE-2018-14740
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c while making a query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407363750; https://github.com/cloudwu/pbc/issues/122#issuecomment-407363750
CVE: CVE-2018-14741
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in pbc_pattern_pack in pattern.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407367289; https://github.com/cloudwu/pbc/issues/122#issuecomment-407367289
CVE: CVE-2018-14742
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in set_field_one in bootstrap.c during a memcpy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407368019; https://github.com/cloudwu/pbc/issues/122#issuecomment-407368019
CVE: CVE-2018-14743
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A SEGV can occur in wiretype_decode in context.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/cloudwu/pbc/issues/122#issuecomment-407367002; https://github.com/cloudwu/pbc/issues/122#issuecomment-407367002
CVE: CVE-2018-14744
Published: 2018-07-30
Description: An issue was discovered in libpbc.a in cloudwu PBC through 2017-03-02. A use-after-free can occur in _pbcM_sp_query in map.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/cloudwu/pbc/issues/125#issue-343980779; https://github.com/cloudwu/pbc/issues/125#issue-343980779
CVE: CVE-2016-9597
Published: 2018-07-30
Description: It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-119
References: http://www.securityfocus.com/bid/98567; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9597; http://www.securityfocus.com/bid/98567
CVE: CVE-2017-7482
Published: 2018-07-30
Description: In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://seclists.org/oss-sec/2017/q2/602; http://www.securityfocus.com/bid/99299; http://www.securitytracker.com/id/1038787
CVE: CVE-2018-13280
Published: 2018-07-30
Description: Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.
CVSS Score: 7.4 (HIGH)
CWE: CWE-330, CWE-330
References: https://www.synology.com/en-global/support/security/Synology_SA_18_39; https://www.synology.com/en-global/support/security/Synology_SA_18_39
CVE: CVE-2017-7514
Published: 2018-07-30
Description: A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2017:1558; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7514; https://access.redhat.com/errata/RHSA-2017:1558
CVE: CVE-2017-7518
Published: 2018-07-30
Description: A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-250, CWE-755
References: http://www.openwall.com/lists/oss-security/2017/06/23/5; http://www.securityfocus.com/bid/99263; http://www.securitytracker.com/id/1038782
CVE: CVE-2018-10883
Published: 2018-07-30
Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write in jbd2_journal_dirty_metadata(), a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://access.redhat.com/errata/RHSA-2018:2948; https://access.redhat.com/errata/RHSA-2018:3083; https://access.redhat.com/errata/RHSA-2018:3096
CVE: CVE-2018-10903
Published: 2018-07-30
Description: A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://access.redhat.com/errata/RHSA-2018:3600; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10903; https://github.com/pyca/cryptography/pull/4342/commits/688e0f673bfbf43fa898994326c6877f00ab19ef
CVE: CVE-2018-9064
Published: 2018-07-30
Description: In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the credentials for the System Manager user.
CVSS Score: 8.8 (HIGH)
References: https://support.lenovo.com/us/en/solutions/LEN-22168; https://support.lenovo.com/us/en/solutions/LEN-22168
CVE: CVE-2018-9065
Published: 2018-07-30
Description: In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be able to retrieve a credential store containing the service processor user names and passwords for servers previously managed by that LXCA instance, and potentially decrypt those credentials more easily than intended.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://support.lenovo.com/us/en/solutions/LEN-22168; https://support.lenovo.com/us/en/solutions/LEN-22168
CVE: CVE-2018-9066
Published: 2018-07-30
Description: In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additional parameters into a specific web API call which can result in privileged command execution within LXCA's underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/solutions/LEN-22168; https://support.lenovo.com/us/en/solutions/LEN-22168
CVE: CVE-2018-10847
Published: 2018-07-30
Description: prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same across stream restarts. A user may authenticate to XMPP host A and migrate their authenticated session to XMPP host B of the same Prosody instance.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-592, CWE-287
References: https://blog.prosody.im/prosody-0-10-2-security-release/; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10847; https://issues.prosody.im/1147
CVE: CVE-2018-10898
Published: 2018-07-30
Description: A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798, CWE-798
References: https://access.redhat.com/errata/RHSA-2018:2214; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898; https://access.redhat.com/errata/RHSA-2018:2214
CVE: CVE-2018-3772
Published: 2018-07-30
Description: Concatenating unsanitized user input in the `whereis` npm module < 0.4.1 allowed an attacker to execute arbitrary commands. The `whereis` module is deprecated and it is recommended to use the `which` npm module instead.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-20
References: https://hackerone.com/reports/319476; https://hackerone.com/reports/319476
CVE: CVE-2018-3773
Published: 2018-07-30
Description: There is a stored Cross-Site Scripting vulnerability in Open Graph meta properties read by the `metascrape` npm module <= 3.9.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/309367; https://hackerone.com/reports/309367
CVE: CVE-2018-14767
Published: 2018-07-31
Description: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation fault and crash. The reason is missing input validation in the "build_res_buf_from_sip_req" core function. This could result in denial of service and potentially the execution of arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://lists.debian.org/debian-lts-announce/2018/08/msg00018.html; https://skalatan.de/blog/advisory-hw-2018-05; https://www.debian.org/security/2018/dsa-4267
CVE: CVE-2018-1638
Published: 2018-07-31
Description: IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144483; https://www.ibm.com/support/docview.wss?uid=ibm10718415; https://exchange.xforce.ibmcloud.com/vulnerabilities/144483
CVE: CVE-2018-1718
Published: 2018-07-31
Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.1 - 5.2.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147166.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104938; https://exchange.xforce.ibmcloud.com/vulnerabilities/147166; https://www.ibm.com/support/docview.wss?uid=ibm10718863
CVE: CVE-2018-8019
Published: 2018-07-31
Description: When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to authenticate with revoked certificates when using mutual TLS. Users not using OCSP checks are not affected by this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://mail-archives.apache.org/mod_mbox/www-announce/201807.mbox/%3C[PII_REDACTED]5943.GA24320%40minotaur.apache.org%3E; http://www.securityfocus.com/bid/104936; http://www.securitytracker.com/id/1041507
CVE: CVE-2018-8020
Published: 2018-07-31
Description: Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check OCSP pre-produced responses, which are lists (multiple entries) of certificate statuses. Subsequently, revoked client certificates may not be properly identified, allowing for users to authenticate with revoked certificates to connections that require mutual TLS. Users not using OCSP checks are not affected by this vulnerability.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201807.mbox/%3C[PII_REDACTED]1944.GA45239%40minotaur.apache.org%3E; http://www.securityfocus.com/bid/104934; http://www.securitytracker.com/id/1041507
CVE: CVE-2018-8027
Published: 2018-07-31
Description: Apache Camel 2.20.0 to 2.20.3 and 2.21.0 Core is vulnerable to XXE in XSD validation processor.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://camel.apache.org/security-advisories.data/CVE-2018-8027.txt.asc; http://www.securityfocus.com/bid/104933; https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE: CVE-2017-17174
Published: 2018-07-31
Description: Some Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R003C20; V200R003C30; V200R003C50 have a weak algorithm vulnerability. To exploit the vulnerability, a remote, unauthenticated attacker has to capture TLS traffic between clients and the affected products. The attacker may launch the Bleichenbacher attack on RSA key exchange to decrypt the session key and the previously captured sessions by some cryptanalytic operations. Successful exploit may cause information leak.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-310
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180703-01-algorithm-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180703-01-algorithm-en
CVE: CVE-2017-17707
Published: 2018-07-31
Description: Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3. To perform those actions on an entry, the user needs to know the corresponding "CredentialId" value, which uniquely identifies a password safe entry. Since "CredentialId" values are implemented as GUIDs, they are hard to guess. However, if for example an entry's owner grants read-only access to a malicious user, the value gets exposed to the malicious user. The same holds true for temporary grants.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://www.profundis-labs.com/advisories/CVE-2017-17707.txt; https://www.profundis-labs.com/advisories/CVE-2017-17707.txt
CVE: CVE-2017-17708
Published: 2018-07-31
Description: Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://www.profundis-labs.com/advisories/CVE-2017-17708.txt; https://www.profundis-labs.com/advisories/CVE-2017-17708.txt
CVE: CVE-2018-11338
Published: 2018-07-31
Description: Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer list contains each customer's full name, social security number (SSN), address, job title, phone number, Email address, spouse's phone/Email address, and other sensitive information. After the client software authenticates to the server database, the server sends the customer list. There is no need for further exploitation as all sensitive data is exposed. This vulnerability was validated on Intuit Lacerte 2017, however older versions of Lacerte may be vulnerable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://corporateblue.com/your-taxes-are-being-leaked/; https://www.themikewylie.com/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/; https://corporateblue.com/your-taxes-are-being-leaked/
CVE: CVE-2018-12939
Published: 2018-07-31
Description: A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an authenticated attacker to write to (or potentially delete) arbitrary files via a .. (dot dot) in the "op/op.UploadChunks.php" "qquuid" parameter.  NOTE: this can be leveraged to execute arbitrary code by using CVE-2018-12940.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://www.contextis.com/resources/advisories/cve-2018-12939; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG
CVE: CVE-2018-12940
Published: 2018-07-31
Description: Unrestricted file upload vulnerability in "op/op.UploadChunks.php" in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the "qqfile" parameter. This allows an authenticated attacker to upload a malicious file containing PHP code to execute operating system commands to the web root of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://www.contextis.com/resources/advisories/cve-2018-12940; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG
CVE: CVE-2018-12941
Published: 2018-07-31
Description: This vulnerability allows remote attackers to execute arbitrary code in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 by adding a system command at the end of the "cacheDir" path and following usage of the "Clear Cache" functionality. This allows an authenticated attacker, with permission to the Settings functionality, to inject arbitrary system commands within the application by manipulating the "Cache directory" path. An attacker can use it to perform malicious tasks such as to extract, change, or delete sensitive information or run system commands on the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://www.contextis.com/resources/advisories/cve-2018-12941; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG
CVE: CVE-2018-12942
Published: 2018-07-31
Description: SQL injection vulnerability in the "Users management" functionality in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows authenticated attackers to manipulate an SQL query within the application by sending additional SQL commands to the application server. An attacker can use this vulnerability to perform malicious tasks such as to extract, change, or delete sensitive information within the database supporting the application, and potentially run system commands on the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://www.contextis.com/resources/advisories/cve-2018-12942; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG
CVE: CVE-2018-12943
Published: 2018-07-31
Description: Cross-Site Scripting (XSS) vulnerability in every page that includes the "action" URL parameter in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG; https://www.contextis.com/resources/advisories/cve-2018-12943; https://sourceforge.net/p/seeddms/code/ci/seeddms-5.1.x/tree/CHANGELOG