deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20592
Published: 2018-12-30
Description: In Mini-XML (aka mxml) v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/michaelrsweet/mxml/issues/237; https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_1.txt.err; https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/uaf_mxml-node.c:128_2.txt.err
CVE: CVE-2018-20593
Published: 2018-12-30
Description: In Mini-XML (aka mxml) v2.12, there is stack-based buffer overflow in the scan_file function in mxmldoc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/michaelrsweet/mxml/issues/237; https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2971_1.txt.err; https://github.com/ntu-sec/pocs/blob/master/mxml-53c75b0/crashes/so_mxmldoc.c:2987_1.txt.err
CVE: CVE-2018-20594
Published: 2018-12-30
Description: An issue was discovered in hsweb 3.0.4. It is a reflected XSS vulnerability due to the absence of type parameter checking in FlowableModelManagerController.java.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hs-web/hsweb-framework/commit/b72a2275ed21240296c6539bae1049c56abb542f; https://github.com/hs-web/hsweb-framework/issues/107; https://github.com/hs-web/hsweb-framework/commit/b72a2275ed21240296c6539bae1049c56abb542f
CVE: CVE-2018-20595
Published: 2018-12-30
Description: A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/hs-web/hsweb-framework/commit/40929e9b0d336a26281a5ed2e0e721d54dd8d2f2; https://github.com/hs-web/hsweb-framework/issues/107; https://github.com/hs-web/hsweb-framework/commit/40929e9b0d336a26281a5ed2e0e721d54dd8d2f2
CVE: CVE-2018-20597
Published: 2018-12-30
Description: UCMS 1.4.7 has XSS via the dir parameter in an index.php sadmin_fileedit action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss1; https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss1
CVE: CVE-2018-20598
Published: 2018-12-30
Description: UCMS 1.4.7 has ?do=user_addpost CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#csrf; https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#csrf
CVE: CVE-2018-20599
Published: 2018-12-30
Description: UCMS 1.4.7 allows remote attackers to execute arbitrary PHP code by entering this code during an index.php sadmin_fileedit action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#getshell; https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#getshell
CVE: CVE-2018-20600
Published: 2018-12-30
Description: sadmin\cedit.php in UCMS 1.4.7 has XSS via an index.php sadmin_cedit action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss2; https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss2
CVE: CVE-2018-20601
Published: 2018-12-30
Description: UCMS 1.4.7 has XSS via the description parameter in an index.php list_editpost action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss3; https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss3
CVE: CVE-2018-20602
Published: 2018-12-30
Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#information_disclosure; https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#information_disclosure
CVE: CVE-2018-20603
Published: 2018-12-30
Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#csrf; https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#csrf
CVE: CVE-2018-20604
Published: 2018-12-30
Description: Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#directory-traversal; https://github.com/AvaterXXX/CVEs/blob/master/lfdycms.md#directory-traversal
CVE: CVE-2018-20605
Published: 2018-12-30
Description: imcat 4.4 allows remote attackers to execute arbitrary PHP code by using root/run/adm.php to modify the boot/bootskip.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#getshell; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#getshell
CVE: CVE-2018-20606
Published: 2018-12-30
Description: imcat 4.4 allows full path disclosure via a dev.php?tools-ipaddr&api=Pcoln&uip= URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure4; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure4
CVE: CVE-2018-20607
Published: 2018-12-30
Description: imcat 4.4 allows remote attackers to obtain potentially sensitive debugging information via the root/tools/adbug/binfo.php URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2
CVE: CVE-2018-20608
Published: 2018-12-30
Description: imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure
CVE: CVE-2018-20609
Published: 2018-12-30
Description: imcat 4.4 allows remote attackers to obtain potentially sensitive configuration information via the root/tools/adbug/check.php URI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#information-disclosure2
CVE: CVE-2018-20610
Published: 2018-12-30
Description: imcat 4.4 allows directory traversal via the root/run/adm.php efile parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#directory-traversal; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#directory-traversal
CVE: CVE-2018-20611
Published: 2018-12-30
Description: imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#xss; https://github.com/AvaterXXX/CVEs/blob/master/imcat.md#xss
CVE: CVE-2018-20612
Published: 2018-12-30
Description: UWA 2.3.11 allows index.php?g=admin&c=admin&a=add_admin_do CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/CVEs/blob/master/UWA.md; https://github.com/AvaterXXX/CVEs/blob/master/UWA.md
CVE: CVE-2018-20613
Published: 2018-12-30
Description: TEMMOKU T1.09 Beta allows admin/user/add CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/CVEs/blob/master/temmoku.md; https://github.com/AvaterXXX/CVEs/blob/master/temmoku.md
CVE: CVE-2018-20614
Published: 2018-12-30
Description: public\install\install.php in CIM 0.9.3 allows remote attackers to reload the product via the public/install/#/step3 URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/AvaterXXX/CVEs/blob/master/cim.md#reload-application; https://github.com/AvaterXXX/CVEs/blob/master/cim.md#reload-application
CVE: CVE-2018-20616
Published: 2018-12-31
Description: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_wav_decode_ms_adpcm_data function in ok_wav.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/4; https://github.com/brackeen/ok-file-formats/issues/4
CVE: CVE-2018-17191
Published: 2018-12-31
Description: Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE). Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent the execution limits. If a different script engine was used, no execution limits were in place. Both vectors allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/106352; https://lists.apache.org/thread.html/d1c37966a316a326ab4ff4d4bc056322e8adcbe984e8145c0ecda7fa%40%3Cdev.netbeans.apache.org%3E; http://www.securityfocus.com/bid/106352
CVE: CVE-2018-20617
Published: 2018-12-31
Description: ok-file-formats through 2018-10-16 has a heap-based buffer overflow in the ok_csv_decode2 function in ok_csv.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/5; https://github.com/brackeen/ok-file-formats/issues/5
CVE: CVE-2018-18593
Published: 2018-12-31
Description: Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/106374; https://softwaresupport.softwaregrp.com/doc/KM03309650; http://www.securityfocus.com/bid/106374
CVE: CVE-2018-19844
Published: 2018-12-31
Description: FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10319.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19844/blob/master/frog_CMS.pdf; https://github.com/security-breachlock/CVE-2018-19844/blob/master/frog_CMS.pdf
CVE: CVE-2018-19845
Published: 2018-12-31
Description: There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19845/blob/master/XSS.pdf; https://github.com/security-breachlock/CVE-2018-19845/blob/master/XSS.pdf
CVE: CVE-2018-19901
Published: 2018-12-31
Description: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19901/blob/master/XSS-1.pdf; https://github.com/security-breachlock/CVE-2018-19901/blob/master/XSS-1.pdf
CVE: CVE-2018-19902
Published: 2018-12-31
Description: No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19902/blob/master/XSS.pdf; https://github.com/security-breachlock/CVE-2018-19902/blob/master/XSS.pdf
CVE: CVE-2018-19903
Published: 2018-12-31
Description: Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19903/blob/master/XSS1.pdf; https://github.com/security-breachlock/CVE-2018-19903/blob/master/XSS1.pdf
CVE: CVE-2018-19904
Published: 2018-12-31
Description: Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/security-breachlock/CVE-2018-19904/blob/master/XSS2.pdf; https://github.com/security-breachlock/CVE-2018-19904/blob/master/XSS2.pdf
CVE: CVE-2018-19905
Published: 2018-12-31
Description: HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/security-breachlock/CVE-2018-19905/blob/master/RAZOR_HTML.pdf; https://github.com/security-breachlock/CVE-2018-19905/blob/master/RAZOR_HTML.pdf
CVE: CVE-2018-19906
Published: 2018-12-31
Description: Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/security-breachlock/CVE-2018-19906/blob/master/razor_xss.pdf; https://github.com/smiffy6969/razorCMS/issues/56; https://github.com/security-breachlock/CVE-2018-19906/blob/master/razor_xss.pdf
CVE: CVE-2018-19918
Published: 2018-12-31
Description: CuppaCMS has XSS via an SVG document uploaded to the administrator/#/component/table_manager/view/cu_views URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/CuppaCMS/CuppaCMS/issues/3; https://github.com/security-breachlock/CVE-2018-19918/blob/master/cuppa_svg.pdf; https://github.com/CuppaCMS/CuppaCMS/issues/3
CVE: CVE-2018-20618
Published: 2018-12-31
Description: ok-file-formats through 2018-10-16 has a heap-based buffer over-read in the ok_mo_decode2 function in ok_mo.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/brackeen/ok-file-formats/issues/6; https://github.com/brackeen/ok-file-formats/issues/6
CVE: CVE-2018-18600
Published: 2018-12-31
Description: The remote upgrade feature in Guardzilla GZ180 devices allow command injection via a crafted new firmware version parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/; https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE: CVE-2018-18601
Published: 2018-12-31
Description: The TK_set_deviceModel_req_handle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-119
References: https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/; https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE: CVE-2018-18602
Published: 2018-12-31
Description: The Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330, CWE-330
References: https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/; https://labs.bitdefender.com/2018/12/iot-report-major-flaws-in-guardzilla-cameras-allow-remote-hijack-of-the-security-device/
CVE: CVE-2018-19937
Published: 2018-12-31
Description: A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/videolan/vlc-ios/pull/178/commits/d84d7c0a94eb7fba202d2c5fc3739276d2d3986f; https://itunes.apple.com/ms/app/vlc-for-mobile/id650377962?mt=8; https://github.com/videolan/vlc-ios/pull/178/commits/d84d7c0a94eb7fba202d2c5fc3739276d2d3986f
CVE: CVE-2018-6668
Published: 2018-12-31
Description: A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell.
CVSS Score: 6.1 (MEDIUM)
References: http://www.securityfocus.com/bid/106282; https://kc.mcafee.com/corporate/index?page=content&id=SB10261; http://www.securityfocus.com/bid/106282
CVE: CVE-2018-20622
Published: 2018-12-31
Description: JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772, CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; http://www.securityfocus.com/bid/106373
CVE: CVE-2018-20623
Published: 2018-12-31
Description: In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/106370
CVE: CVE-2018-6334
Published: 2018-12-31
Description: Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexpected behavior. This affects all supported versions of HHVM prior to the patch (3.25.1, 3.24.5, and 3.21.9 and below).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-621, CWE-20
References: https://github.com/facebook/hhvm/commit/6937de5544c3eead3466b75020d8382080ed0cff; https://hhvm.com/blog/2018/03/30/hhvm-3.25.2.html; https://github.com/facebook/hhvm/commit/6937de5544c3eead3466b75020d8382080ed0cff
CVE: CVE-2018-6335
Published: 2018-12-31
Description: A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: https://github.com/facebook/hhvm/commit/4cb57dd753a339654ca464c139db9871fe961d56; https://hhvm.com/blog/2018/05/04/hhvm-3.25.3.html; https://github.com/facebook/hhvm/commit/4cb57dd753a339654ca464c139db9871fe961d56
CVE: CVE-2018-6336
Published: 2018-12-31
Description: An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7
CVSS Score: 7.8 (HIGH)
CWE: CWE-254, CWE-354
References: https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/; https://www.okta.com/security-blog/2018/06/issues-around-third-party-apple-code-signing-checks/
CVE: CVE-2018-6337
Published: 2018-12-31
Description: folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-212, CWE-119
References: https://github.com/facebook/folly/commit/8e927ee48b114c8a2f90d0cbd5ac753795a6761f; https://github.com/facebook/hhvm/commit/e2d10a1e32d01f71aaadd81169bcb9ae86c5d6b8; https://hhvm.com/blog/2018/05/24/hhvm-3.26.3.html
CVE: CVE-2018-6340
Published: 2018-12-31
Description: The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/facebook/hhvm/commit/4bff3bfbe90d10451e4638c2118d1ad1117bb3e3; https://hhvm.com/blog/2018/12/18/hhvm-3.30.1.html; https://github.com/facebook/hhvm/commit/4bff3bfbe90d10451e4638c2118d1ad1117bb3e3
CVE: CVE-2018-6341
Published: 2018-12-31
Description: React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html; https://twitter.com/reactjs/status/[PII_REDACTED]87887104; https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html
CVE: CVE-2018-6342
Published: 2018-12-31
Description: react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/facebook/create-react-app/pull/4866; https://github.com/facebook/create-react-app/releases/tag/v1.1.5; https://github.com/facebook/create-react-app/pull/4866
CVE: CVE-2018-6343
Published: 2018-12-31
Description: Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-20
References: https://github.com/facebook/proxygen/commit/0600ebe59c3e82cd012def77ca9ca1918da74a71; https://github.com/facebook/proxygen/commit/0600ebe59c3e82cd012def77ca9ca1918da74a71
CVE: CVE-2018-6344
Published: 2018-12-31
Description: A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to v2.18.172.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/106365; https://googleprojectzero.blogspot.com/2018/12/adventures-in-video-conferencing-part-3.html; http://www.securityfocus.com/bid/106365
CVE: CVE-2018-6346
Published: 2018-12-31
Description: A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 priority settings (specifically a circular dependency). This affects Proxygen prior to v2018.12.31.00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-388
References: https://github.com/facebook/proxygen/commit/52cf331743ebd74194d6343a6c2ec52bb917c982; https://github.com/facebook/proxygen/commit/52cf331743ebd74194d6343a6c2ec52bb917c982
CVE: CVE-2018-6347
Published: 2018-12-31
Description: An issue in the Proxygen handling of HTTP2 parsing of headers/trailers can lead to a denial-of-service attack. This affects Proxygen prior to v2018.12.31.00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: https://github.com/facebook/proxygen/commit/223e0aa6bc7590e86af1e917185a2e0efe160711; https://github.com/facebook/proxygen/commit/223e0aa6bc7590e86af1e917185a2e0efe160711
CVE: CVE-2018-6331
Published: 2018-12-31
Description: Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/facebook/buck/commit/8c[PII_REDACTED]564877bd122c0f8fab48d3528ddf; https://github.com/facebook/buck/commit/8c[PII_REDACTED]564877bd122c0f8fab48d3528ddf