deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17408
Published: 2018-10-03
Description: Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://blog.spentera.id/zahir-accounting-enterprise-plus-6/; https://www.exploit-db.com/exploits/45505/; https://www.exploit-db.com/exploits/45560/
CVE: CVE-2018-17428
Published: 2018-10-03
Description: An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/45518/; https://www.exploit-db.com/exploits/45518/
CVE: CVE-2018-17540
Published: 2018-10-03
Description: The gmp plugin in strongSwan before 5.7.1 has a Buffer Overflow via a crafted certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
CVE: CVE-2018-17552
Published: 2018-10-03
Description: SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the navigate-user cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/NavigateCMS/Navigate-CMS/commit/6df73ccca64253a5e81c23356943fae50ffc836f; https://github.com/rapid7/metasploit-framework/pull/10704; https://www.exploit-db.com/exploits/45561/
CVE: CVE-2018-17553
Published: 2018-10-03
Description: An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs Navigate CMS 2.8 allows authenticated attackers to achieve remote code execution via a POST request with engine=picnik and id=../../../navigate_info.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-434
References: https://github.com/NavigateCMS/Navigate-CMS/commit/2bdcb8b3c5bb23851a2115db96585f1ac8cb2d1e; https://github.com/rapid7/metasploit-framework/pull/10704; https://www.exploit-db.com/exploits/45561/
CVE: CVE-2018-17562
Published: 2018-10-03
Description: Multi-Tech FaxFinder before 5.1.6 has SQL Injection via a status/call_details?oid= URI, allowing an attacker to extract the underlying database schema to further disclose other fax server information through different injection points.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://securityshards.wordpress.com/2018/10/02/cve-2018-17562-faxfinder-5-0-5-8-sqlite-inejection-vulnerability/; https://securityshards.wordpress.com/2018/10/02/cve-2018-17562-faxfinder-5-0-5-8-sqlite-inejection-vulnerability/
CVE: CVE-2018-17880
Published: 2018-10-03
Description: On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://xz.aliyun.com/t/2834#toc-5; https://xz.aliyun.com/t/2834#toc-5
CVE: CVE-2018-17881
Published: 2018-10-03
Description: On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://xz.aliyun.com/t/2834#toc-5; https://xz.aliyun.com/t/2834#toc-5
CVE: CVE-2018-5921
Published: 2018-10-03
Description: A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://support.hp.com/us-en/document/c05949322; https://support.hp.com/us-en/document/c05949322
CVE: CVE-2018-6695
Published: 2018-10-03
Description: SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.
CVSS Score: 5.9 (MEDIUM)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10253; https://kc.mcafee.com/corporate/index?page=content&id=SB10253
CVE: CVE-2018-17972
Published: 2018-10-03
Description: An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html; http://www.securityfocus.com/bid/105525; https://access.redhat.com/errata/RHSA-2019:0512
CVE: CVE-2018-17974
Published: 2018-10-03
Description: An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins/dlt_en10mb/en10mb.c, due to inappropriate values in the function memmove(). The length (pktlen + ctx -> l2len) can be larger than source value (packet + ctx->l2len) because the function fails to ensure the length of a packet is valid. This leads to Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/SegfaultMasters/covering360/tree/master/tcpreplay; https://github.com/appneta/tcpreplay/issues/486; https://github.com/SegfaultMasters/covering360/tree/master/tcpreplay
CVE: CVE-2018-11784
Published: 2018-10-04
Description: When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://packetstormsecurity.com/files/163456/Apache-Tomcat-9.0.0M1-Open-Redirect.html
CVE: CVE-2018-5492
Published: 2018-10-04
Description: NetApp E-Series SANtricity OS Controller Software 11.30 and later version 11.30.5 is susceptible to unauthenticated remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2017-5658
Published: 2018-10-04
Description: The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the content itself. As this was primarily used as a caching feature for faster loading times, the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to address this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/6a18cf5690d54231836f277f2b4346b53da3b6b6b08fee4c4ef4977e%40%3Cdev.ponymail.apache.org%3E; https://lists.apache.org/thread.html/6a18cf5690d54231836f277f2b4346b53da3b6b6b08fee4c4ef4977e%40%3Cdev.ponymail.apache.org%3E
CVE: CVE-2018-12470
Published: 2018-10-04
Description: A SQL Injection in the RegistrationSharing module of SUSE Linux SMT allows remote attackers to cause execute arbitrary SQL statements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://bugzilla.suse.com/show_bug.cgi?id=1103810; https://bugzilla.suse.com/show_bug.cgi?id=1103810
CVE: CVE-2018-12471
Published: 2018-10-04
Description: A External Entity Reference ('XXE') vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://bugzilla.suse.com/show_bug.cgi?id=1103809; https://bugzilla.suse.com/show_bug.cgi?id=1103809
CVE: CVE-2018-12472
Published: 2018-10-04
Description: A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://bugzilla.suse.com/show_bug.cgi?id=1104076; https://bugzilla.suse.com/show_bug.cgi?id=1104076
CVE: CVE-2018-1602
Published: 2018-10-04
Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143792.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10733641; https://exchange.xforce.ibmcloud.com/vulnerabilities/143792; http://www.ibm.com/support/docview.wss?uid=ibm10733641
CVE: CVE-2018-1603
Published: 2018-10-04
Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143793.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10733641; https://exchange.xforce.ibmcloud.com/vulnerabilities/143793; http://www.ibm.com/support/docview.wss?uid=ibm10733641
CVE: CVE-2018-1604
Published: 2018-10-04
Description: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143794.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10733641; https://exchange.xforce.ibmcloud.com/vulnerabilities/143794; http://www.ibm.com/support/docview.wss?uid=ibm10733641
CVE: CVE-2018-1670
Published: 2018-10-04
Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10731547; http://www.ibm.com/support/docview.wss?uid=ibm10731549; https://exchange.xforce.ibmcloud.com/vulnerabilities/144946
CVE: CVE-2018-1819
Published: 2018-10-04
Description: IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-force ID: 150023.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: http://www.ibm.com/support/docview.wss?uid=ibm10732357; http://www.ibm.com/support/docview.wss?uid=ibm10732361; http://www.ibm.com/support/docview.wss?uid=ibm10732367
CVE: CVE-2018-17871
Published: 2018-10-04
Description: Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://packetstormsecurity.com/files/149651/Collaboration-Compliance-And-Quality-Management-Platform-9.1.1.5482-Disclosure.html; https://releases.verba.com/?v=9.2; https://seclists.org/bugtraq/2018/Oct/12
CVE: CVE-2018-17872
Published: 2018-10-04
Description: Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/149652/Collaboration-Compliance-And-Quality-Management-Platform-9.1.1.5482-Improper-Access-Control.html; https://releases.verba.com/?v=9.2; https://seclists.org/bugtraq/2018/Oct/13
CVE: CVE-2018-17876
Published: 2018-10-04
Description: A Stored XSS vulnerability has been discovered in the v5.5.0 version of the Coaster CMS product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149647/Coaster-CMS-5.5.0-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149647/Coaster-CMS-5.5.0-Cross-Site-Scripting.html
CVE: CVE-2018-0503
Published: 2018-10-04
Description: Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: http://www.securitytracker.com/id/1041695; https://access.redhat.com/errata/RHSA-2019:3142; https://access.redhat.com/errata/RHSA-2019:3238
CVE: CVE-2018-0504
Published: 2018-10-04
Description: Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: http://www.securitytracker.com/id/1041695; https://access.redhat.com/errata/RHSA-2019:3238; https://access.redhat.com/errata/RHSA-2019:3813
CVE: CVE-2018-0505
Published: 2018-10-04
Description: Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://www.securitytracker.com/id/1041695; https://access.redhat.com/errata/RHSA-2019:3142; https://access.redhat.com/errata/RHSA-2019:3238
CVE: CVE-2018-13258
Published: 2018-10-04
Description: Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041695; https://lists.wikimedia.org/pipermail/wikitech-l/2018-September/090849.html; https://phabricator.wikimedia.org/T199029
CVE: CVE-2018-16326
Published: 2018-10-04
Description: PHP Scripts Mall Olx Clone 3.4.2 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://googlequeens.com/2018/09/02/cve-2018-16326-olx_clone-3-4-2-stored-xss-via-search-by-keyword/; https://googlequeens.com/2018/09/02/cve-2018-16326-olx_clone-3-4-2-stored-xss-via-search-by-keyword/
CVE: CVE-2018-16453
Published: 2018-10-04
Description: PHP Scripts Mall Domain Lookup Script 3.0.5 allows XSS in the search bar.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://googlequeens.com/2018/09/04/cve-2018-16453-domain-lookup-script-3-0-5-stored-xss-via-search-by-whois/; https://googlequeens.com/2018/09/04/cve-2018-16453-domain-lookup-script-3-0-5-stored-xss-via-search-by-whois/
CVE: CVE-2018-16455
Published: 2018-10-04
Description: PHP Scripts Mall Market Place Script 1.0.1 allows XSS via a keyword.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://googlequeens.com/2018/09/04/cve-2018-16455-market-place-script-1-0-1-stored-xss-via-search-by-keyword/; https://googlequeens.com/2018/09/04/cve-2018-16455-market-place-script-1-0-1-stored-xss-via-search-by-keyword/
CVE: CVE-2018-16456
Published: 2018-10-04
Description: PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://googlequeens.com/2018/09/04/cve-2018-16456-website-seller-scriptwebsite-seller-script-2-0-5-stored-xss-via-search-by-keyword/; https://googlequeens.com/2018/09/04/cve-2018-16456-website-seller-scriptwebsite-seller-script-2-0-5-stored-xss-via-search-by-keyword/
CVE: CVE-2018-16457
Published: 2018-10-04
Description: PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote attackers to list the wp-content/themes/template_dp_dec2015/img directory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://googlequeens.com/2018/09/04/cve-2018-16457-open-source-real-estate-script-3-6-2-directory-traversal/; https://googlequeens.com/2018/09/04/cve-2018-16457-open-source-real-estate-script-3-6-2-directory-traversal/
CVE: CVE-2018-17849
Published: 2018-10-04
Description: Navigate CMS 2.8 has Stored XSS via a navigate_upload.php (aka File Upload) request with a multipart/form-data JavaScript payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-17891
Published: 2018-10-04
Description: Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a more elaborate attack.
CVSS Score: 3.7 (LOW)
CWE: CWE-209, CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-277-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-277-01
CVE: CVE-2015-9271
Published: 2018-10-04
Description: The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.vapidlabs.com/advisory.php?v=116; http://www.vapidlabs.com/advisory.php?v=116
CVE: CVE-2018-17983
Published: 2018-10-04
Description: cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.mercurial-scm.org/repo/hg/rev/5405cb1a7901; https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.7.2_.282018-10-01.29; https://www.mercurial-scm.org/repo/hg/rev/5405cb1a7901
CVE: CVE-2018-17984
Published: 2018-10-04
Description: An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-185
References: https://0x09al.github.io/security/ispconfig/exploit/vulnerability/2018/08/20/bug-or-backdoor-ispconfig-rce.html; https://github.com/0x09AL/0x09al.github.io/blob/master/_posts/2018-08-20-bug-or-backdoor-ispconfig-rce.markdown; https://www.ispconfig.org/blog/ispconfig-3-1-13-released-important-security-bugfix/
CVE: CVE-2018-17985
Published: 2018-10-04
Description: An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87335
CVE: CVE-2018-17986
Published: 2018-10-05
Description: rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/smiffy6969/razorCMS/issues/53; https://github.com/smiffy6969/razorCMS/issues/53
CVE: CVE-2013-7465
Published: 2018-10-05
Description: Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html; http://www.vapidlabs.com/advisory.php?v=108; http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.html
CVE: CVE-2014-10075
Published: 2018-10-05
Description: The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.vapid.dhs.org/advisories/karo-2.3.8.html; http://www.vapidlabs.com/advisory.php?v=63; http://www.vapid.dhs.org/advisories/karo-2.3.8.html
CVE: CVE-2014-10076
Published: 2018-10-05
Description: The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.vapidlabs.com/advisory.php?v=81; http://www.vapidlabs.com/advisory.php?v=81
CVE: CVE-2015-9272
Published: 2018-10-05
Description: The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.vapidlabs.com/advisory.php?v=117; https://www.openwall.com/lists/oss-security/2015/04/01/2; http://www.vapidlabs.com/advisory.php?v=117
CVE: CVE-2018-6979
Published: 2018-10-05
Description: The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based authentication is enabled. This vulnerability is also relevant if certificate-based authentication is not enabled, but the outcome of exploitation is limited to an information disclosure (Important Severity) in those cases.
CVSS Score: 7.4 (HIGH)
References: http://www.securitytracker.com/id/1041808; https://www.vmware.com/security/advisories/VMSA-2018-0024.html; http://www.securitytracker.com/id/1041808
CVE: CVE-2018-1647
Published: 2018-10-05
Description: IBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenticated user to cause a denial of service. IBM X-Force ID: 144650.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144650; https://www.ibm.com/support/docview.wss?uid=ibm10729705; https://exchange.xforce.ibmcloud.com/vulnerabilities/144650
CVE: CVE-2018-1649
Published: 2018-10-05
Description: IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144655.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144655; https://www.ibm.com/support/docview.wss?uid=ibm10729703; https://exchange.xforce.ibmcloud.com/vulnerabilities/144655
CVE: CVE-2018-1686
Published: 2018-10-05
Description: IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145505.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/145505; https://www.ibm.com/support/docview.wss?uid=ibm10728865; https://exchange.xforce.ibmcloud.com/vulnerabilities/145505