deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16732
Published: 2018-09-08
Description: \upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/CScms/blob/master/CScms_csrf.md; https://www.patec.cn/newsshow.php?cid=24&id=123; https://github.com/AvaterXXX/CScms/blob/master/CScms_csrf.md
CVE: CVE-2018-16733
Published: 2018-09-08
Description: In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/ethereum/go-ethereum/commit/106d196ec4a6451efedc60ab15957f231fa85639; https://github.com/ethereum/go-ethereum/commit/106d196ec4a6451efedc60ab15957f231fa85639
CVE: CVE-2018-16736
Published: 2018-09-09
Description: In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/eagle00789/RC_Filters/issues/19; https://github.com/roundcube/roundcubemail/issues/6437; https://www.exploit-db.com/exploits/45437/
CVE: CVE-2018-16749
Published: 2018-09-09
Description: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/1119; https://github.com/ImageMagick/ImageMagick6/commit/1007b98f8795ad4bea6bc5f68a32d83e982fdae4; https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html
CVE: CVE-2018-16750
Published: 2018-09-09
Description: In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/108492; https://github.com/ImageMagick/ImageMagick/issues/1118; https://usn.ubuntu.com/3785-1/
CVE: CVE-2018-16759
Published: 2018-09-09
Description: The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange event.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/teameasy/EasyCMS/issues/4; https://github.com/teameasy/EasyCMS/issues/4
CVE: CVE-2018-16761
Published: 2018-09-09
Description: Eventum before 3.4.0 has an open redirect vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/eventum/eventum/releases/tag/v3.4.0; https://github.com/eventum/eventum/releases/tag/v3.4.0
CVE: CVE-2018-16762
Published: 2018-09-09
Description: FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/daylightstudio/FUEL-CMS/issues/478; https://github.com/daylightstudio/FUEL-CMS/issues/478
CVE: CVE-2018-16763
Published: 2018-09-09
Description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://packetstormsecurity.com/files/153696/fuelCMS-1.4.1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/160080/Fuel-CMS-1.4-Remote-Code-Execution.html; http://packetstormsecurity.com/files/164756/Fuel-CMS-1.4.1-Remote-Code-Execution.html
CVE: CVE-2018-16764
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/AndrewScheidecker/WAVM/issues/93; https://github.com/AndrewScheidecker/WAVM/issues/93
CVE: CVE-2018-16765
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/AndrewScheidecker/WAVM/issues/94; https://github.com/AndrewScheidecker/WAVM/issues/94
CVE: CVE-2018-16766
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.
CVSS Score: 8.8 (HIGH)
CWE: CWE-670
References: https://github.com/AndrewScheidecker/WAVM/issues/96; https://github.com/AndrewScheidecker/WAVM/issues/96
CVE: CVE-2018-16767
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/AndrewScheidecker/WAVM/issues/97; https://github.com/AndrewScheidecker/WAVM/issues/97
CVE: CVE-2018-16768
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/AndrewScheidecker/WAVM/issues/98; https://github.com/AndrewScheidecker/WAVM/issues/98
CVE: CVE-2018-16769
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled.
CVSS Score: 8.8 (HIGH)
References: https://github.com/AndrewScheidecker/WAVM/issues/99; https://github.com/AndrewScheidecker/WAVM/issues/99
CVE: CVE-2018-16770
Published: 2018-09-10
Description: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.
CVSS Score: 8.8 (HIGH)
References: https://github.com/AndrewScheidecker/WAVM/issues/100; https://github.com/AndrewScheidecker/WAVM/issues/100
CVE: CVE-2018-16771
Published: 2018-09-10
Description: Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/havok89/Hoosk/issues/46; https://github.com/havok89/Hoosk/issues/46
CVE: CVE-2018-16772
Published: 2018-09-10
Description: Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/havok89/Hoosk/issues/47; https://github.com/havok89/Hoosk/issues/47
CVE: CVE-2018-16773
Published: 2018-09-10
Description: EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/teameasy/EasyCMS/issues/6; https://github.com/teameasy/EasyCMS/issues/6
CVE: CVE-2018-16774
Published: 2018-09-10
Description: HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Neeke/HongCMS/issues/6; https://github.com/Neeke/HongCMS/issues/6
CVE: CVE-2018-16775
Published: 2018-09-10
Description: An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/VictorAlagwu/CMSsite/issues/3; https://github.com/VictorAlagwu/CMSsite/issues/3
CVE: CVE-2018-16776
Published: 2018-09-10
Description: wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Creatiwity/wityCMS/issues/154; https://github.com/Creatiwity/wityCMS/issues/154
CVE: CVE-2018-16779
Published: 2018-09-10
Description: BlogCMS through 2016-10-25 has XSS via a comment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hukouhome/blogCMS/issues/1; https://github.com/hukouhome/blogCMS/issues/1
CVE: CVE-2018-16780
Published: 2018-09-10
Description: Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dusaurabh/PHP/issues/1; https://github.com/dusaurabh/PHP/issues/1
CVE: CVE-2018-16781
Published: 2018-09-10
Description: ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-682, CWE-755
References: https://github.com/rockcarry/ffjpeg/issues/6; https://github.com/rockcarry/ffjpeg/issues/6
CVE: CVE-2018-16782
Published: 2018-09-10
Description: libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/jsummers/imageworsener/issues/35; https://github.com/jsummers/imageworsener/issues/35
CVE: CVE-2018-16790
Published: 2018-09-10
Description: _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1627923#c3; https://github.com/mongodb/mongo-c-driver/commit/0d9a4d98bfdf4acd2c0138d4aaeb4e2e0934bd84; https://jira.mongodb.org/browse/CDRIVER-2819
CVE: CVE-2018-14625
Published: 2018-09-10
Description: A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-362
References: https://access.redhat.com/errata/RHSA-2019:2029; https://access.redhat.com/errata/RHSA-2019:2043; https://access.redhat.com/errata/RHSA-2019:4154
CVE: CVE-2018-15886
Published: 2018-09-10
Description: Monstra CMS 3.0.4 does not properly restrict modified Snippet content, as demonstrated by the admin/index.php?id=snippets&action=edit_snippet&filename=google-analytics URI, which allows attackers to execute arbitrary PHP code by placing this code after a <?php substring.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/monstra-cms/monstra/issues/455; https://github.com/monstra-cms/monstra/issues/455
CVE: CVE-2018-16608
Published: 2018-09-10
Description: In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1, Insecure Direct Object Reference (IDOR).
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/monstra-cms/monstra/issues/453; https://github.com/monstra-cms/monstra/issues/453
CVE: CVE-2018-16797
Published: 2018-09-10
Description: A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://nightohl.tistory.com/entry/PotPlayer-Audiowav-File-Vulnerabilitiy?category=780012; https://nightohl.tistory.com/entry/PotPlayer-Audiowav-File-Vulnerabilitiy?category=780012
CVE: CVE-2016-7067
Published: 2018-09-10
Description: Monit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful exploitation will enable an attacker to disable/enable all monitoring for a particular host or disable/enable monitoring for a specific service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/93953; https://bitbucket.org/tildeslash/monit/commits/c6ec3820e627f85417053e6336de2987f2d863e3?at=master; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7067
CVE: CVE-2016-7075
Published: 2018-09-10
Description: It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://access.redhat.com/errata/RHSA-2016:2064; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7075; https://github.com/kubernetes/kubernetes/issues/34517
CVE: CVE-2017-1679
Published: 2018-09-10
Description: IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/134001; https://www.ibm.com/support/docview.wss?uid=ibm10728737; https://exchange.xforce.ibmcloud.com/vulnerabilities/134001
CVE: CVE-2016-7071
Published: 2018-09-10
Description: It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-285
References: http://rhn.redhat.com/errata/RHSA-2016-2091.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7071; http://rhn.redhat.com/errata/RHSA-2016-2091.html
CVE: CVE-2016-7077
Published: 2018-09-10
Description: foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-200
References: http://www.securityfocus.com/bid/94230; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7077; https://projects.theforeman.org/issues/16971
CVE: CVE-2016-7078
Published: 2018-09-10
Description: foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-200
References: http://www.securityfocus.com/bid/96385; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7078; https://github.com/theforeman/foreman/commit/5f606e11cf39719bf62f8b1f3396861b32387905
CVE: CVE-2018-3896
Published: 2018-09-10
Description: An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "correlationId" value in order to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570
CVE: CVE-2018-3897
Published: 2018-09-10
Description: An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "callbackUrl" value in order to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570
CVE: CVE-2016-7035
Published: 2018-09-10
Description: An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-285
References: http://rhn.redhat.com/errata/RHSA-2016-2614.html; http://rhn.redhat.com/errata/RHSA-2016-2675.html; http://www.openwall.com/lists/oss-security/2016/11/03/5
CVE: CVE-2016-7041
Published: 2018-09-10
Description: Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://rhn.redhat.com/errata/RHSA-2016-2822.html; http://rhn.redhat.com/errata/RHSA-2016-2823.html; http://rhn.redhat.com/errata/RHSA-2016-2937.html
CVE: CVE-2016-7056
Published: 2018-09-10
Description: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-385, CWE-320
References: http://rhn.redhat.com/errata/RHSA-2017-1415.html; http://www.securityfocus.com/bid/95375; http://www.securitytracker.com/id/1037575
CVE: CVE-2016-7061
Published: 2018-09-10
Description: An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-200
References: http://rhn.redhat.com/errata/RHSA-2017-0170.html; http://rhn.redhat.com/errata/RHSA-2017-0171.html; http://rhn.redhat.com/errata/RHSA-2017-0172.html
CVE: CVE-2016-9048
Published: 2018-09-10
Description: Multiple exploitable SQL Injection vulnerabilities exists in ProcessMaker Enterprise Core 3.0.1.7-community. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and in certain setups access the underlying operating system.
CVSS Score: 7.4 (HIGH)
CWE: CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0313; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0313
CVE: CVE-2018-16802
Published: 2018-09-10
Description: An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
CVSS Score: 7.8 (HIGH)
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3e5d316b72e3965b7968bb1d96baa137cd063ac6; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=643b24dbd002fb9c131313253c307cf3951b3d47; https://access.redhat.com/errata/RHSA-2018:3834
CVE: CVE-2016-7072
Published: 2018-09-10
Description: An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole PowerDNS process. While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors since its connection will be closed just after being accepted, it might still be possible.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7072; https://doc.powerdns.com/md/security/powerdns-advisory-2016-03/; https://www.debian.org/security/2017/dsa-3764
CVE: CVE-2018-12608
Published: 2018-09-10
Description: An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/moby/moby/pull/33182; https://github.com/moby/moby/pull/33182
CVE: CVE-2018-16591
Published: 2018-09-10
Description: FURUNO FELCOM 250 and 500 devices allow unauthenticated users to change the password for the Admin, Log and Service accounts, as well as the password for the protected "SMS" panel via /cgi-bin/sm_changepassword.cgi and /cgi-bin/sm_sms_changepasswd.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://cyberskr.com/blog/furuno-felcom.html; https://gist.github.com/CyberSKR/2c30d964d48b5e1518ded88bd953b710; https://cyberskr.com/blog/furuno-felcom.html
CVE: CVE-2018-16705
Published: 2018-09-10
Description: FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://cyberskr.com/blog/furuno-felcom.html; https://gist.github.com/CyberSKR/c00eabd6b1d5603d724b615ab358ff31; https://cyberskr.com/blog/furuno-felcom.html
CVE: CVE-2018-14620
Published: 2018-09-10
Description: The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-494, CWE-20
References: https://access.redhat.com/errata/RHSA-2018:2721; https://access.redhat.com/errata/RHSA-2018:2729; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620
CVE: CVE-2018-14635
Published: 2018-09-10
Description: When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://access.redhat.com/errata/RHSA-2018:2710; https://access.redhat.com/errata/RHSA-2018:2715; https://access.redhat.com/errata/RHSA-2018:2721