deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18959
Published: 2018-12-24
Description: An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. On the 'Air Print Setting' web page, if the data for 'Bonjour Service Location' at /PRESENTATION/BONJOUR is more than 251 bytes when sending data for Air Print Setting, then the device no longer functions until a reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18959/poc-cve-2018-18959.py; https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18959/poc-cve-2018-18959.py
CVE: CVE-2018-18960
Published: 2018-12-24
Description: An issue was discovered on Epson WorkForce WF-2861 10.48 LQ22I3, 10.51.LQ20I6 and 10.52.LQ17IA devices. They use SNMP to find certain devices on the network, but the default version is v2c, allowing an amplification attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py; https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-18960/poc-cve-2018-18960.py
CVE: CVE-2018-19232
Published: 2018-12-24
Description: The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to cause a denial of service via a FIRMWAREUPDATE GET request, as demonstrated by the /DOWN/FIRMWAREUPDATE/ROM1 URI.
CVSS Score: 7.5 (HIGH)
References: https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19232/poc-cve-2018-19232.py; https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19232/poc-cve-2018-19232.py
CVE: CVE-2018-19248
Published: 2018-12-24
Description: The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Recovery-mode), WF-2861 10.51.LQ20I6, and WF-2861 10.52.LQ17IA devices allows remote attackers to upload a firmware file and reset the printer without authentication by making a request to the /DOWN/FIRMWAREUPDATE/ROM1 URI and a POST request to the /FIRMWAREUPDATE URI.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19248/poc-cve-2018-19248.py; https://github.com/epistemophilia/CVEs/blob/master/Epson-WorkForce-WF2861/CVE-2018-19248/poc-cve-2018-19248.py
CVE: CVE-2018-20247
Published: 2018-12-24
Description: In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/106306; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/106306
CVE: CVE-2018-20248
Published: 2018-12-24
Description: In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-119
References: http://www.securityfocus.com/bid/106306; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/106306
CVE: CVE-2018-20249
Published: 2018-12-24
Description: In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-119
References: http://www.securityfocus.com/bid/106306; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securityfocus.com/bid/106306
CVE: CVE-2018-20436
Published: 2018-12-24
Description: The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat message, before that chat message is sent. There are also GET requests to other URLs on the same web server. This also affects one or more other Telegram products, such as Telegram Web-version 0.7.0. In addition, it can be interpreted as an SSRF issue. NOTE: a third party has reported that potentially unwanted behavior is caused by misconfiguration of the "Secret chats > Preview links" setting
CVSS Score: 8.1 (HIGH)
CWE: CWE-918
References: https://misteralfa-hack.blogspot.com/2018/12/abusando-de-telegram-para-conseguir-una.html; https://misteralfa-hack.blogspot.com/2018/12/telegram-siempre-in-middle.html; https://misteralfa-hack.blogspot.com/2018/12/abusando-de-telegram-para-conseguir-una.html
CVE: CVE-2018-20437
Published: 2018-12-25
Description: An issue was discovered in the fileDownload function in the CommonController class in FEBS-Shiro before 2018-11-05. An attacker can download a file via a request of the form /common/download?filename=1.jsp&delete=false. NOTE: the software maintainer disputes the significance of this report because the product uses a JAR archive for deployment, and this contains application.yml with configuration data
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/wuyouzhuguli/FEBS-Shiro/commit/9a753215b0969a5d5b5bfe8c68585339fee96260; https://github.com/wuyouzhuguli/FEBS-Shiro/commit/a9706b1b3c96bacece24886429b4423c3a467acd; https://github.com/wuyouzhuguli/FEBS-Shiro/issues/40
CVE: CVE-2018-20438
Published: 2018-12-25
Description: Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20439
Published: 2018-12-25
Description: Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20440
Published: 2018-12-25
Description: Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20441
Published: 2018-12-25
Description: Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20442
Published: 2018-12-25
Description: Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20443
Published: 2018-12-25
Description: Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20444
Published: 2018-12-25
Description: Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712[PII_REDACTED]-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
CVE: CVE-2018-20445
Published: 2018-12-25
Description: D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.html; https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.html
CVE: CVE-2018-20448
Published: 2018-12-25
Description: Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/20; https://www.exploit-db.com/exploits/46067/; https://github.com/philippe/FrogCMS/issues/20
CVE: CVE-2018-20450
Published: 2018-12-25
Description: The read_MSAT function in ole.c in libxls 1.4.0 has a double free that allows attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2017-2897.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: https://github.com/evanmiller/libxls/issues/34; https://security.gentoo.org/glsa/202003-64; https://github.com/evanmiller/libxls/issues/34
CVE: CVE-2018-20451
Published: 2018-12-25
Description: The process_file function in reader.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/uvoteam/libdoc/issues/2; https://github.com/uvoteam/libdoc/issues/2
CVE: CVE-2018-20452
Published: 2018-12-25
Description: The read_MSAT_body function in ole.c in libxls 1.4.0 has an invalid free that allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, because of inconsistent memory management (new versus free) in ole2_read_header in ole.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/evanmiller/libxls/issues/35; https://security.gentoo.org/glsa/202003-64; https://github.com/evanmiller/libxls/issues/35
CVE: CVE-2018-20453
Published: 2018-12-25
Description: The getlong function in numutils.c in libdoc through 2017-10-23 has a heap-based buffer over-read that allows attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/uvoteam/libdoc/issues/1; https://github.com/uvoteam/libdoc/issues/1
CVE: CVE-2018-20454
Published: 2018-12-25
Description: An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resume_list has XSS via the key parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/coolboy0816/audit/issues/1; https://github.com/coolboy0816/audit/issues/1
CVE: CVE-2018-20455
Published: 2018-12-25
Description: In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/radare/radare2/commit/9b46d38dd3c4de6048a488b655c7319f845af185; https://github.com/radare/radare2/issues/12373; https://github.com/radare/radare2/commit/9b46d38dd3c4de6048a488b655c7319f845af185
CVE: CVE-2018-20456
Published: 2018-12-25
Description: In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/9b46d38dd3c4de6048a488b655c7319f845af185; https://github.com/radare/radare2/issues/12372; https://github.com/radare/radare2/commit/9b46d38dd3c4de6048a488b655c7319f845af185
CVE: CVE-2018-20457
Published: 2018-12-25
Description: In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/12417; https://github.com/radareorg/radare2/commit/e5c14c167b0dcf0a53d76bd50bacbbcc0dfc1ae7; https://github.com/radare/radare2/issues/12417
CVE: CVE-2018-20458
Published: 2018-12-25
Description: In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/12374; https://github.com/radareorg/radare2/commit/30f4c7b52a4e2dc0d0b1bae487d90f5437c69d19; https://github.com/radare/radare2/issues/12374
CVE: CVE-2018-20459
Published: 2018-12-25
Description: In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20457.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/12418; https://github.com/radareorg/radare2/commit/e5c14c167b0dcf0a53d76bd50bacbbcc0dfc1ae7; https://github.com/radare/radare2/issues/12418
CVE: CVE-2018-20460
Published: 2018-12-25
Description: In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/radare/radare2/commit/df167c7db545953bb7f71c72e98e7a3ca0c793bf; https://github.com/radare/radare2/issues/12376; https://github.com/radare/radare2/commit/df167c7db545953bb7f71c72e98e7a3ca0c793bf
CVE: CVE-2018-20461
Published: 2018-12-25
Description: In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/a1bc65c3db[PII_REDACTED]23d6d7506a457ed95267; https://github.com/radare/radare2/issues/12375; https://github.com/radare/radare2/commit/a1bc65c3db[PII_REDACTED]23d6d7506a457ed95267
CVE: CVE-2018-20462
Published: 2018-12-25
Description: An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/9196; https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E5%8F%8D%E5%B0%84%E6%80%A7XSS; https://wpvulndb.com/vulnerabilities/9196
CVE: CVE-2018-20463
Published: 2018-12-25
Description: An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://wpvulndb.com/vulnerabilities/9197; https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96-amp-SSRF; https://wpvulndb.com/vulnerabilities/9197
CVE: CVE-2018-20464
Published: 2018-12-25
Description: There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Xmansec/cmsms_vul; https://github.com/Xmansec/cmsms_vul
CVE: CVE-2018-20465
Published: 2018-12-25
Description: Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-311
References: https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.md; https://github.com/phuctam/Server-Side-Template-Injection-in-CraftCMS-/issues/1; https://github.com/craftcms/cms/blob/master/CHANGELOG-v3.md
CVE: CVE-2018-20467
Published: 2018-12-26
Description: In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; http://www.securityfocus.com/bid/106315
CVE: CVE-2018-20476
Published: 2018-12-26
Description: An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://shell01.top/2018/12/14/scms-xss/#more; https://shell01.top/2018/12/14/scms-xss/#more
CVE: CVE-2018-20477
Published: 2018-12-26
Description: An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://shell01.top/2018/12/18/scms-sqlinject/; https://shell01.top/2018/12/18/scms-sqlinject/
CVE: CVE-2018-20478
Published: 2018-12-26
Description: An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://xz.aliyun.com/t/3614#toc-0; https://xz.aliyun.com/t/3614#toc-0
CVE: CVE-2018-20479
Published: 2018-12-26
Description: An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://xz.aliyun.com/t/3614#toc-2; https://xz.aliyun.com/t/3614#toc-2
CVE: CVE-2018-20480
Published: 2018-12-26
Description: An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://xz.aliyun.com/t/3614#toc-2; https://xz.aliyun.com/t/3614#toc-2
CVE: CVE-2018-20481
Published: 2018-12-26
Description: XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/106321; https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713
CVE: CVE-2018-17957
Published: 2018-12-26
Description: The YaST2 RMT module for configuring the SUSE Repository Mirroring Tool (RMT) before 1.1.2 exposed MySQL database passwords on process commandline, allowing local attackers to access or corrupt the RMT database.
CVSS Score: 3.4 (LOW)
CWE: CWE-214, CWE-287
References: https://bugzilla.suse.com/show_bug.cgi?id=1117602; https://lists.opensuse.org/opensuse-security-announce/2018-12/msg00068.html; https://bugzilla.suse.com/show_bug.cgi?id=1117602
CVE: CVE-2018-0723
Published: 2018-12-26
Description: Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201812-26; https://www.qnap.com/zh-tw/security-advisory/nas-201812-26
CVE: CVE-2018-0724
Published: 2018-12-26
Description: Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201812-26; https://www.qnap.com/zh-tw/security-advisory/nas-201812-26
CVE: CVE-2018-20482
Published: 2018-12-26
Description: GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user's process (e.g., a system backup running as root).
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-835
References: http://git.savannah.gnu.org/cgit/tar.git/commit/?id=c15c42ccd1e2377945fd0414eca1a49294bff454; http://lists.gnu.org/archive/html/bug-tar/2018-12/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00077.html
CVE: CVE-2018-20483
Published: 2018-12-26
Description: set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://git.savannah.gnu.org/cgit/wget.git/tree/NEWS; http://www.securityfocus.com/bid/106358; https://access.redhat.com/errata/RHSA-2019:3701
CVE: CVE-2018-20484
Published: 2018-12-26
Description: Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html; https://www.manageengine.com/products/self-service-password/release-notes.html; http://packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html