deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5261
Published: 2018-02-02
Description: An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311
References: https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261; https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261
CVE: CVE-2018-6317
Published: 2018-02-02
Description: The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-134
References: https://medium.com/%40res1n/claymore-dual-gpu-miner-10-5-format-strings-vulnerability-916ab3d2db30; https://www.exploit-db.com/exploits/43972/; https://medium.com/%40res1n/claymore-dual-gpu-miner-10-5-format-strings-vulnerability-916ab3d2db30
CVE: CVE-2018-6318
Published: 2018-02-02
Description: In Sophos Tester Tool 3.2.0.7 Beta, the driver loads (in the context of the application used to test an exploit or ransomware) the DLL using a payload that runs from NTDLL.DLL (so, it's run in userland), but the driver doesn't perform any validation of this DLL (not its signature, not its hash, etc.). A person can change this DLL in a local way, or with a remote connection, to a malicious DLL with the same name -- and when the product is used, this malicious DLL will be loaded, aka a DLL Hijacking attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://29wspy.ru/exploits/CVE-2018-6318.pdf; https://29wspy.ru/exploits/CVE-2018-6318.pdf
CVE: CVE-2018-6319
Published: 2018-02-02
Description: In Sophos Tester Tool 3.2.0.7 Beta, the driver accepts a special DeviceIoControl code that doesn't check its argument. This argument is a memory address: if a caller passes a NULL pointer or a random invalid address, the driver will cause a Blue Screen of Death. If a program or malware does this at boot time, it can cause a persistent denial of service on the machine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://29wspy.ru/exploits/CVE-2018-6319.pdf; https://29wspy.ru/exploits/CVE-2018-6319.pdf
CVE: CVE-2009-5144
Published: 2018-02-03
Description: mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-254
References: http://issues.outoforder.cc/view.php?id=93; http://www.openwall.com/lists/oss-security/2015/02/26/6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578663
CVE: CVE-2015-2186
Published: 2018-02-03
Description: The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string literal "False" instead of a boolean False for the CORS_ORIGIN_ALLOW_ALL setting. Note: this vulnerability was fixed on 2015-03-06, but the version number was not changed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/edx/configuration/pull/1885/files; https://open.edx.org/CVE-2015-2186; https://github.com/edx/configuration/pull/1885/files
CVE: CVE-2017-17108
Published: 2018-02-03
Description: Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted JSP files and in turn gain access to the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/541742/100/0/threaded; http://www.securityfocus.com/archive/1/541742/100/0/threaded
CVE: CVE-2017-18123
Published: 2018-02-03
Description: The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file download vulnerability, and allows remote attackers to run arbitrary programs.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://github.com/splitbrain/dokuwiki/commit/238b8e878ad48f[PII_REDACTED]92b57c2072f65d86; https://github.com/splitbrain/dokuwiki/issues/2029; https://github.com/splitbrain/dokuwiki/pull/2019
CVE: CVE-2018-6594
Published: 2018-02-03
Description: lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for PyCrypto's ElGamal implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/TElgamal/attack-on-pycrypto-elgamal; https://github.com/dlitz/pycrypto/issues/253; https://lists.debian.org/debian-lts-announce/2018/02/msg00018.html
CVE: CVE-2018-1184
Published: 2018-02-03
Description: An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Boxmgmt CLI may allow a malicious user with boxmgmt privileges to bypass Boxmgmt CLI and run arbitrary commands with root privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2018/Feb/9; http://www.securitytracker.com/id/1040320; http://seclists.org/fulldisclosure/2018/Feb/9
CVE: CVE-2018-1185
Published: 2018-02-03
Description: An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2018/Feb/9; http://www.securitytracker.com/id/1040320; https://www.exploit-db.com/exploits/44614/
CVE: CVE-2018-6538
Published: 2018-02-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-6593
Published: 2018-02-03
Description: An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.c; https://www.exploit-db.com/exploits/43973/; https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6593/Malwarefox_privescl_0.c
CVE: CVE-2018-6596
Published: 2018-02-03
Description: webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://bugs.debian.org/889450; https://github.com/anymail/django-anymail/commit/c07998304b4a31df4c61deddcb03d3607a04691b; https://github.com/anymail/django-anymail/commit/db586ede1fbb41dce21310ea28ae15a1cf1286c5
CVE: CVE-2017-17703
Published: 2018-02-04
Description: Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=108265; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories; https://bugzilla.zimbra.com/show_bug.cgi?id=108265
CVE: CVE-2017-8783
Published: 2018-02-04
Description: Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.zimbra.com/show_bug.cgi?id=107878; https://bugzilla.zimbra.com/show_bug.cgi?id=107885; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2018-6606
Published: 2018-02-04
Description: An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6606/Malwarefox_privescl_1.c; https://www.exploit-db.com/exploits/43987/; https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-6606/Malwarefox_privescl_1.c
CVE: CVE-2018-6611
Published: 2018-02-04
Description: soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/OpenMPT/openmpt/commit/b60b322cf9f0ffa624018f1bb9783edf0dc908c3; https://lib.openmpt.org/libopenmpt/2018/02/03/security-update-0.3.6/; https://github.com/OpenMPT/openmpt/commit/b60b322cf9f0ffa624018f1bb9783edf0dc908c3
CVE: CVE-2018-6612
Published: 2018-02-04
Description: An integer underflow bug in the process_EXIF function of the exif.c file of jhead 3.00 raises a heap-based buffer over-read when processing a malicious JPEG file, which may allow a remote attacker to cause a denial-of-service attack or unspecified other impact.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-191
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889272; https://launchpad.net/ubuntu/+source/jhead/1:3.00-6; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889272
CVE: CVE-2018-6616
Published: 2018-02-04
Description: In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/uclouvain/openjpeg/issues/1059; https://lists.debian.org/debian-lts-announce/2018/12/msg00013.html; https://usn.ubuntu.com/4109-1/
CVE: CVE-2017-15536
Published: 2018-02-05
Description: An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain access to the CDSW database which includes Kerberos keytabs of CDSW users and bcrypt hashed passwords, and gain access to other privileged information such as session tokens, invitation tokens, and environment variables.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_248; https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_248
CVE: CVE-2018-6188
Published: 2018-02-05
Description: django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirm_login_allowed() method, as demonstrated by discovering whether a user account is inactive.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040422; https://usn.ubuntu.com/3559-1/; https://www.djangoproject.com/weblog/2018/feb/01/security-releases/
CVE: CVE-2018-5787
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Stack Overflow in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5788
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Denial of Service in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5789
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5790
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5791
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5792
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5793
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5794
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5795
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Arbitrary File Write from the WebGUI on the WiNG Access Point / Controller.
CVSS Score: 4.9 (MEDIUM)
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5796
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Hidden Root Shell by entering the administrator password in conjunction with the 'service start-shell' CLI command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-5797
Published: 2018-02-05
Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smint_encrypt Hardcoded AES Key that can be used for packet decryption (obtaining cleartext credentials) by an attacker who has access to a wired port.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003; https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE: CVE-2018-6620
Published: 2018-02-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-6621
Published: 2018-02-05
Description: The decode_frame function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102950; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/118e1b0b3370dd1c0da442901b486689efd1654b; https://github.com/FFmpeg/FFmpeg/commit/22aa37c0fedf[PII_REDACTED]a197542a055959b6c
CVE: CVE-2018-6461
Published: 2018-02-05
Description: March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://hyp3rlinx.altervista.org/advisories/CVS-SUITE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txt; http://march-hare.com/cvspro/vulnwincvs.htm; http://packetstormsecurity.com/files/146267/WINCVS-2009R2-DLL-Hijacking.html
CVE: CVE-2015-1416
Published: 2018-02-05
Description: Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/07/30/9; http://www.openwall.com/lists/oss-security/2015/08/01/4; http://www.openwall.com/lists/oss-security/2015/08/02/1
CVE: CVE-2015-1418
Published: 2018-02-05
Description: The do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 before 10.2-BETA2-p3, 10.2-RC1 before 10.2-RC1-p2, and 0.2-RC2 before 10.2-RC2-p1, allows remote attackers to execute arbitrary commands via a crafted patch file, because a '!' character can be passed to the ed program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://rachelbythebay.com/w/2018/04/05/bangpatch/; http://www.securityfocus.com/bid/76236; http://www.securitytracker.com/id/1033188
CVE: CVE-2015-4179
Published: 2018-02-05
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2015/06/03/3; http://www.openwall.com/lists/oss-security/2015/06/04/11; http://www.openwall.com/lists/oss-security/2015/06/13/3
CVE: CVE-2015-4412
Published: 2018-02-05
Description: BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2015/06/06/3; http://www.securityfocus.com/bid/75045; https://bugzilla.redhat.com/show_bug.cgi?id=1229750
CVE: CVE-2015-4461
Published: 2018-02-05
Description: Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pathname in the other parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841; https://mohankallepalli.blogspot.in/2015/05/eFront-cms-multiple-bugs.html; http://forum.efrontlearning.net/viewtopic.php?f=15&t=9841
CVE: CVE-2015-5674
Published: 2018-02-05
Description: The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17 allows remote authenticated users to cause a denial of service (assertion failure and daemon exit) via a query from a network that is not directly connected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/76244; http://www.securitytracker.com/id/1033185; https://www.freebsd.org/security/advisories/FreeBSD-SA-15:19.routed.asc
CVE: CVE-2017-9414
Published: 2018-02-05
Description: Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting (XSS) attacks or possibly have unspecified other impact via the name parameter to playerSettings.view.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt; http://packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html; https://www.exploit-db.com/exploits/42120/
CVE: CVE-2018-5442
Published: 2018-02-05
Description: A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/102903; https://ics-cert.us-cert.gov/advisories/ICSA-18-032-01; http://www.securityfocus.com/bid/102903
CVE: CVE-2018-6624
Published: 2018-02-05
Description: OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html; http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html
CVE: CVE-2018-6625
Published: 2018-02-05
Description: In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/WatchDog_AntiMalware_POC/tree/master/0x80002010; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/WatchDog_AntiMalware_POC/tree/master/0x80002010