deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10653
Published: 2018-05-23
Description: There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html; https://support.citrix.com/article/CTX234879; http://packetstormsecurity.com/files/156037/Citrix-XenMobile-Server-10.8-XML-Injection.html
CVE: CVE-2018-10654
Published: 2018-05-23
Description: There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://support.citrix.com/article/CTX234879; https://support.citrix.com/article/CTX234879
CVE: CVE-2018-6495
Published: 2018-05-23
Description: Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1 and Micro Focus UCMDB Browser, version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15.1. This vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040970; https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03164778; http://www.securitytracker.com/id/1040970
CVE: CVE-2018-10428
Published: 2018-05-23
Description: ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected cross-site-scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/147726/ILIAS-5.3.2-5.2.14-5.1.25-Cross-Site-Scripting.html; http://www.securityfocus.com/archive/1/542025/100/0/threaded; https://www.ilias.de/docu/ilias.php?ref_id=1719&from_page=116793&obj_id=116793&cmd=layout&cmdClass=illmpresentationgui&cmdNode=wc&baseClass=ilLMPresentationGUI
CVE: CVE-2018-11399
Published: 2018-05-24
Description: SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf; https://www.simpleorsecure.net/simplisafe-security-advisory/; https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf
CVE: CVE-2018-11400
Published: 2018-05-24
Description: In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the battery and external power.
CVSS Score: 4.6 (MEDIUM)
References: https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf; https://www.simpleorsecure.net/simplisafe-security-advisory/; https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf
CVE: CVE-2018-11401
Published: 2018-05-24
Description: In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification.
CVSS Score: 4.6 (MEDIUM)
References: https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf; https://www.simpleorsecure.net/simplisafe-security-advisory/; https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf
CVE: CVE-2018-11402
Published: 2018-05-24
Description: SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-319
References: https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf; https://www.simpleorsecure.net/simplisafe-security-advisory/; https://simplisafe.com/files/pdf/SimpliSafe_advisory_8-17-18.pdf
CVE: CVE-2018-11403
Published: 2018-05-24
Description: DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/63; https://www.exploit-db.com/exploits/44782/; https://github.com/domainmod/domainmod/issues/63
CVE: CVE-2018-11404
Published: 2018-05-24
Description: DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/63; https://www.exploit-db.com/exploits/44783/; https://github.com/domainmod/domainmod/issues/63
CVE: CVE-2018-11405
Published: 2018-05-24
Description: Kliqqi 2.0.2 has CSRF in admin/admin_users.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/256; https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/256
CVE: CVE-2018-11410
Published: 2018-05-24
Description: An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html; http://www.securityfocus.com/bid/104324; https://bugzilla.redhat.com/show_bug.cgi?id=1582024
CVE: CVE-2018-11411
Published: 2018-05-24
Description: The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all victims' balances into their account) because certain computations involving _value are incorrect.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://medium.com/%40jonghyk.song/dimoncoin-fud-erc20-token-allows-attackers-to-steal-all-victims-balances-cve-2018-11411-ba9a320604f9; https://medium.com/%40jonghyk.song/dimoncoin-fud-erc20-token-allows-attackers-to-steal-all-victims-balances-cve-2018-11411-ba9a320604f9
CVE: CVE-2017-9421
Published: 2018-05-24
Description: Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://github.com/jer1nj0y/Vulns/blob/master/Kiteworks%20Vulnerability; https://github.com/jer1nj0y/Vulns/blob/master/Kiteworks%20Vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502; https://bugs.ghostscript.com/show_bug.cgi?id=698887; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c[PII_REDACTED]2615492f8e220f4348ba46995; http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=8a3257b01faa899dd9b5e35c6bb3403cd709c371%3Bhp=de39f005f12a1afc6973c1f5cec362d6545f70cb; http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=b2e7d38e845c7d4922d05e6e41f3a2dc1bc1b14a%3Bhp=f51836b9732c38d945b87fda0770009a77ba680c
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c[PII_REDACTED]2615492f8e220f4348ba46995; http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=f597300439e62f5e921f0d7b1e880b5c1a1f1607%3Bhp=093fc3b098dc5fadef5d8ad4b225db9fb124758b; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5494
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-416
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=4dcc6affe[PII_REDACTED]0a21238f7e1871a752a05%3Bhp=8ec561d1bccc46e9db40a9f61310cd8b3763914e; http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=71ceebcf56e682504da22c4035b39a2d451e8ffd%3Bhp=7f82c[PII_REDACTED]2615492f8e220f4348ba46995; http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=f597300439e62f5e921f0d7b1e880b5c1a1f1607%3Bhp=093fc3b098dc5fadef5d8ad4b225db9fb124758b
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently trusted by the controller. that can result in Denial of Service, Unauthorized Access, Network Instability. This attack appear to be exploitable via Network connectivity: the attacker must first establish a transport connection with the OpenFlow controller and then initiate the OpenFlow handshake.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: http://users.sec.t-labs.tu-berlin.de/~hashkash/openflow/BrianOnosSecurityRequest.pdf; http://users.sec.t-labs.tu-berlin.de/~hashkash/openflow/BrianOnosSecurityRequest.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html; http://www.securitytracker.com/id/1040806; https://access.redhat.com/errata/RHSA-2018:1318
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/104207
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-24
Description: curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/104225
CVE: CVE-2018-9920
Published: 2018-05-24
Description: Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://www.securityfocus.com/archive/1/542035/100/0/threaded; http://www.securityfocus.com/archive/1/542035/100/0/threaded
CVE: CVE-2017-17158
Published: 2018-05-24
Description: Some Huawei smart phones with the versions before Berlin-L21HNC185B381; the versions before Prague-AL00AC00B223; the versions before Prague-AL00BC00B223; the versions before Prague-AL00CC00B223; the versions before Prague-L31C432B208; the versions before Prague-TL00AC01B223; the versions before Prague-TL00AC01B223 have an information exposure vulnerability. When the user's smart phone connects to the malicious device for charging, an unauthenticated attacker may activate some specific function by sending some specially crafted messages. Due to insufficient input validation of the messages, successful exploit may cause information exposure.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-phone-en
CVE: CVE-2017-17315
Published: 2018-05-24
Description: Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have a numeric errors vulnerability. An unauthenticated, remote attacker may send specially crafted SCCP messages to the affected products. Due to the improper validation of the messages, it will cause numeric errors when handling the messages. Successful exploit will cause some services abnormal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-sccp-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180502-01-sccp-en
CVE: CVE-2018-5485
Published: 2018-05-24
Description: NetApp OnCommand Unified Manager for Windows versions 7.2 through 7.3 are susceptible to a vulnerability which could lead to a privilege escalation attack.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-5487
Published: 2018-05-24
Description: NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service bound to the network, and are susceptible to unauthenticated remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-7902
Published: 2018-05-24
Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
CVSS Score: 8.8 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE: CVE-2018-7903
Published: 2018-05-24
Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
CVSS Score: 8.8 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE: CVE-2018-7904
Published: 2018-05-24
Description: Huawei 1288H V5 and 288H V5 with software of V100R005C00 have a JSON injection vulnerability. An authenticated, remote attacker can launch a JSON injection to modify the password of administrator. Due to insufficient verification of the input, this could be exploited to obtain the management privilege of the system.
CVSS Score: 8.8 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-json-en
CVE: CVE-2018-7942
Published: 2018-05-24
Description: The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some information leak.
CVSS Score: 7.5 (HIGH)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-server-en; https://exchange.xforce.ibmcloud.com/vulnerabilities/143686; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180523-01-server-en
CVE: CVE-2018-10593
Published: 2018-05-24
Description: A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in data corruption.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-356, CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01; https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula; https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
CVE: CVE-2018-10595
Published: 2018-05-24
Description: A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-356, CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01; https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletin-bd-kiestra-tla-bd-kiestra-wca-bd-inoqula; https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01
CVE: CVE-2018-11332
Published: 2018-05-24
Description: Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the manager/processors/save_settings.processor.php file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/ClipperCMS/ClipperCMS/issues/483; https://www.exploit-db.com/exploits/44775/; https://github.com/ClipperCMS/ClipperCMS/issues/483
CVE: CVE-2018-8013
Published: 2018-05-24
Description: In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/104252
CVE: CVE-2018-11412
Published: 2018-05-24
Description: In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104291; https://access.redhat.com/errata/RHSA-2019:0525; https://bugs.chromium.org/p/project-zero/issues/detail?id=1580
CVE: CVE-2018-11413
Published: 2018-05-24
Description: An issue was discovered in BearAdmin 0.5. Remote attackers can download arbitrary files via /admin/databack/download.html?name= directory traversal sequences, as demonstrated by name=../application/database.php to read the MySQL credentials in the configuration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/yupoxiong/BearAdmin/issues/5; https://github.com/yupoxiong/BearAdmin/issues/5
CVE: CVE-2018-11414
Published: 2018-05-24
Description: An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/yupoxiong/BearAdmin/issues/5; https://github.com/yupoxiong/BearAdmin/issues/5
CVE: CVE-2018-11415
Published: 2018-05-24
Description: SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: the vendor has reportedly indicated that there will not be any further releases of this product.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104311; https://github.com/0xd0m7/SAP; https://www.exploit-db.com/exploits/44755/
CVE: CVE-2017-14187
Published: 2018-05-24
Description: A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/104312; http://www.securitytracker.com/id/1040983; https://fortiguard.com/advisory/FG-IR-17-245
CVE: CVE-2017-9664
Published: 2018-05-24
Description: In ABB SREA-01 revisions A, B, C: application versions up to 3.31.5, and SREA-50 revision A: application versions up to 3.32.8, an attacker may access internal files of ABB SREA-01 and SREA-50 legacy remote monitoring tools without any authorization over the network using a HTTP request which refers to files using ../../ relative paths. Once the internal password file is retrieved, the password hash can be identified using a brute force attack. There is also an exploit allowing running of commands after authorization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-22
References: http://www.securityfocus.com/bid/100260; https://ics-cert.us-cert.gov/advisories/ICSA-17-222-05; http://www.securityfocus.com/bid/100260
CVE: CVE-2018-11416
Published: 2018-05-24
Description: jpegoptim.c in jpegoptim 1.4.5 (fixed in 1.4.6) has an invalid use of realloc() and free(), which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://github.com/tjko/jpegoptim/blob/master/README; https://github.com/tjko/jpegoptim/issues/57; https://github.com/tjko/jpegoptim/blob/master/README
CVE: CVE-2018-11418
Published: 2018-05-24
Description: An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_utf8 function via a RegExp("[\\u0020") payload, related to re_parse_char_class in parser/regexp/re-parser.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/jerryscript-project/jerryscript/issues/2237; https://github.com/jerryscript-project/jerryscript/issues/2237