deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11100
Published: 2018-05-15
Description: The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://docs.google.com/document/d/1N-_obGIyAM5DGcrB7gHy89Oy68aDvxSMjrKaaM7KOFA/edit; https://github.com/libming/libming/issues/142; https://docs.google.com/document/d/1N-_obGIyAM5DGcrB7gHy89Oy68aDvxSMjrKaaM7KOFA/edit
CVE: CVE-2018-11102
Published: 2018-05-15
Description: An issue was discovered in Libav 12.3. A read access violation in the mov_probe function in libavformat/mov.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://bugzilla.libav.org/show_bug.cgi?id=1128; https://docs.google.com/document/d/18xCwfxMSJiQ9ruQSVaO8-jlcobDjFiYXWOaw31V37xo/edit; https://lists.debian.org/debian-lts-announce/2019/09/msg00000.html
CVE: CVE-2018-10825
Published: 2018-05-15
Description: Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-311
References: https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb; https://medium.com/%40victor_14768/mimo-baby-hack-ac7fa0ae3bfb
CVE: CVE-2018-1131
Published: 2018-05-15
Description: Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated access to the server could send a malicious object to a cache configured to accept certain types of objects, achieving code execution and possible further attacks. Versions 9.0.3.Final, 9.1.7.Final, 8.2.10.Final, 9.2.2.Final, 9.3.0.Alpha1 are believed to be affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-349, CWE-502
References: http://www.securityfocus.com/bid/104218; https://access.redhat.com/errata/RHSA-2018:1833; https://access.redhat.com/errata/RHSA-2019:3892
CVE: CVE-2018-3611
Published: 2018-05-15
Description: Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00109.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00109.html
CVE: CVE-2018-3634
Published: 2018-05-15
Description: Parameter corruption in NDIS filter driver in Intel Online Connect Access 1.9.22.0 allows an attacker to cause a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104250; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00121.html; http://www.securityfocus.com/bid/104250
CVE: CVE-2018-3661
Published: 2018-05-15
Description: Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104247; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00134.html; http://www.securityfocus.com/bid/104247
CVE: CVE-2018-11105
Published: 2018-05-15
Description: There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat whenever a malicious attacker would initiate a new chat with an administrator. NOTE: this issue exists because of an incomplete fix for CVE-2018-9864.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RiieCco/write-ups/tree/master/CVE-2018-11105; https://wordpress.org/plugins/wp-live-chat-support/#developers; https://github.com/RiieCco/write-ups/tree/master/CVE-2018-11105
CVE: CVE-2018-1087
Published: 2018-05-15
Description: kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
CVSS Score: 8.0 (HIGH)
CWE: CWE-250
References: http://www.openwall.com/lists/oss-security/2018/05/08/5; http://www.securityfocus.com/bid/104127; http://www.securitytracker.com/id/1040862
CVE: CVE-2018-11125
Published: 2018-05-15
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-2815
Published: 2018-05-15
Description: An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafted web request can cause the retrieval of arbitrary files or denial of service. An authenticated attacker can send a crafted web request to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0316
CVE: CVE-2018-11126
Published: 2018-05-15
Description: dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/doorgets/CMS/issues/11; https://github.com/doorgets/CMS/issues/11
CVE: CVE-2018-11127
Published: 2018-05-15
Description: e107 2.1.7 has CSRF resulting in arbitrary user deletion.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/e107inc/e107/issues/3128; https://github.com/e107inc/e107/issues/3128
CVE: CVE-2018-11094
Published: 2018-05-15
Description: An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://blog.kos-lab.com/Hello-World/; https://www.exploit-db.com/exploits/44637/; https://blog.kos-lab.com/Hello-World/
CVE: CVE-2017-2600
Published: 2018-05-15
Description: In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-325, CWE-200
References: http://www.securityfocus.com/bid/95954; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2600; https://github.com/jenkinsci/jenkins/commit/0f92cd08a19207de2cceb6a2f4e3e9f92fdc0899
CVE: CVE-2017-2608
Published: 2018-05-15
Description: Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserialization of various types in javax.imageio in XStream-based APIs (SECURITY-383).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: http://www.securityfocus.com/bid/95953; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2608; https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722
CVE: CVE-2017-2612
Published: 2018-05-15
Description: In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-358, CWE-732
References: http://www.securityfocus.com/bid/95957; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2612; https://github.com/jenkinsci/jenkins/commit/a814154695e23dc37542af7d40cacc129cf70722
CVE: CVE-2018-1262
Published: 2018-05-15
Description: Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to admin privileges in the impersonated zone for clients performing offline token validation.
CVSS Score: 7.2 (HIGH)
References: https://www.cloudfoundry.org/blog/cve-2018-1262/; https://www.cloudfoundry.org/blog/cve-2018-1262/
CVE: CVE-2018-1263
Published: 2018-05-15
Description: Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/104179; https://pivotal.io/security/cve-2018-1263; http://www.securityfocus.com/bid/104179
CVE: CVE-2017-2602
Published: 2018-05-15
Description: jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
CVSS Score: 3.1 (LOW)
CWE: CWE-184
References: http://www.securityfocus.com/bid/95952; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2602; https://github.com/jenkinsci/jenkins/commit/414ff7e30aba66bed18c4ee8a8660fb36fc8c655
CVE: CVE-2017-2603
Published: 2018-05-15
Description: Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This could leak sensitive data such as API tokens (SECURITY-362).
CVSS Score: 2.6 (LOW)
CWE: CWE-325, CWE-200
References: http://www.securityfocus.com/bid/95955; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2603; https://github.com/jenkinsci/jenkins/commit/3cd946cbef82c6da5ccccf3890d0ae4e091c4265
CVE: CVE-2017-2604
Published: 2018-05-15
Description: In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-358, CWE-287
References: http://www.securityfocus.com/bid/95959; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2604; https://github.com/jenkinsci/jenkins/commit/6efcf6c2ac39bc5c59ac7251822be8ddf67ceaf8
CVE: CVE-2017-2610
Published: 2018-05-15
Description: jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to improperly escaping users with less-than and greater-than characters in their names (SECURITY-388).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/95951; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2610; https://github.com/jenkinsci/jenkins/commit/307ed31caba68a46426b8c73a787a05add2c7489
CVE: CVE-2017-2613
Published: 2018-05-15
Description: jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-770, CWE-352
References: http://www.securityfocus.com/bid/95967; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2613; https://github.com/jenkinsci/jenkins/commit/b88b20ec473200db35d0a0d29dcf[PII_REDACTED]1
CVE: CVE-2018-10589
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a path transversal vulnerability has been identified, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-10590
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an information exposure vulnerability through directory listing has been identified, which may allow an attacker to find important files that are not normally visible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548, CWE-538
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-10591
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may allow an attacker can create a malicious web site, steal session cookies, and access data of authenticated users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-346, CWE-384
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7495
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an external control of file name or path vulnerability has been identified, which may allow an attacker to delete files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-73, CWE-22
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7497
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several untrusted pointer dereference vulnerabilities have been identified, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-822, CWE-476
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7499
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several stack-based buffer overflow vulnerabilities have been identified, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7501
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7503
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a path transversal vulnerability has been identified, which may allow an attacker to disclose sensitive information on the target.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-7505
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-434
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-8841
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an improper privilege management vulnerability may allow an authenticated user to modify files when read access should only be given to the user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-8845
Published: 2018-05-15
Description: In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/104190; https://ics-cert.us-cert.gov/advisories/ICSA-18-135-01; http://www.securityfocus.com/bid/104190
CVE: CVE-2018-10123
Published: 2018-05-16
Description: p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via requests on TCP port 9100.
CVSS Score: 8.8 (HIGH)
References: https://neonsea.uk/blog/2018/04/15/pwn910nd.html; https://www.exploit-db.com/exploits/44635/; https://neonsea.uk/blog/2018/04/15/pwn910nd.html
CVE: CVE-2018-10735
Published: 2018-05-16
Description: A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.seebug.org/vuldb/ssvid-97265; https://www.seebug.org/vuldb/ssvid-97265
CVE: CVE-2018-10736
Published: 2018-05-16
Description: A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.seebug.org/vuldb/ssvid-97266; https://www.seebug.org/vuldb/ssvid-97266
CVE: CVE-2018-10737
Published: 2018-05-16
Description: A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.seebug.org/vuldb/ssvid-97267; https://www.seebug.org/vuldb/ssvid-97267
CVE: CVE-2018-10738
Published: 2018-05-16
Description: A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.seebug.org/vuldb/ssvid-97268; https://www.seebug.org/vuldb/ssvid-97268
CVE: CVE-2018-10810
Published: 2018-05-16
Description: chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://chat.livezilla.net/ticket.php?id=93482&hash=DE9C7230EA79&salt=e[PII_REDACTED]0ead9b4f481f4d54b1f17; https://chat.livezilla.net/ticket.php?id=93482&hash=DE9C7230EA79&salt=e[PII_REDACTED]0ead9b4f481f4d54b1f17
CVE: CVE-2018-5231
Published: 2018-05-16
Description: The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/104205; https://jira.atlassian.com/browse/JRASERVER-67290; http://www.securityfocus.com/bid/104205
CVE: CVE-2018-10240
Published: 2018-05-16
Description: SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. This session token's value can be brute-forced by an attacker to obtain the corresponding session cookie and hijack the user's session.
CVSS Score: 7.3 (HIGH)
CWE: CWE-331
References: https://www.bishopfox.com/news/2018/05/solarwinds-serv-u-managed-file-transfer-insufficient-session-id-entropy/; https://www.bishopfox.com/news/2018/05/solarwinds-serv-u-managed-file-transfer-insufficient-session-id-entropy/
CVE: CVE-2018-10241
Published: 2018-05-16
Description: A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereference) via a specially crafted URL beginning with the /Web%20Client/ substring.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://www.bishopfox.com/news/2018/05/solarwinds-serv-u-managed-file-transfer-denial-of-service/; https://www.bishopfox.com/news/2018/05/solarwinds-serv-u-managed-file-transfer-denial-of-service/
CVE: CVE-2018-10759
Published: 2018-05-16
Description: PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQL statements via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/May/30; http://seclists.org/fulldisclosure/2018/May/30
CVE: CVE-2018-10760
Published: 2018-05-16
Description: Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the tmp directory under the document root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2018/May/30; http://seclists.org/fulldisclosure/2018/May/30
CVE: CVE-2018-11202
Published: 2018-05-16
Description: A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE: CVE-2018-11203
Published: 2018-05-16
Description: A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5