deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9049
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002833.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002833; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002833
CVE: CVE-2018-9050
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100202d.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100202D; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100202D
CVE: CVE-2018-9051
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002021.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002021; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002021
CVE: CVE-2018-9052
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100283c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100283c; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100283c
CVE: CVE-2018-9053
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf10026cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf10026cc; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf10026cc
CVE: CVE-2018-9054
Published: 2018-03-27
Description: In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100284c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100284c; https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf100284c
CVE: CVE-2018-9055
Published: 2018-03-27
Description: JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpc_firstone in libjasper/jpc/jpc_math.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/103577; https://github.com/mdadams/jasper/issues/172; https://security.gentoo.org/glsa/201908-03
CVE: CVE-2017-12310
Published: 2018-03-27
Description: A vulnerability in the auto discovery phase of Cisco Spark Hybrid Calendar Service could allow an unauthenticated, remote attacker to view sensitive information in the unencrypted headers of an HTTP method request. The attacker could use this information to conduct additional reconnaissance attacks leading to the disclosure of sensitive customer data. The vulnerability exists in the auto discovery phase because an unencrypted HTTP request is made due to requirements for implementing the Hybrid Calendar service. An attacker could exploit this vulnerability by monitoring the unencrypted traffic on the network. An exploit could allow the attacker to access sensitive customer data belonging to Office365 users, such as email and calendar events. Cisco Bug IDs: CSCvg35593.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-319
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171023-spark; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171023-spark
CVE: CVE-2017-12319
Published: 2018-03-27
Description: A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or potentially corrupt the BGP routing table, which could result in network instability. The vulnerability exists due to changes in the implementation of the BGP MPLS-Based Ethernet VPN RFC (RFC 7432) draft between IOS XE software releases. When the BGP Inclusive Multicast Ethernet Tag Route or BGP EVPN MAC/IP Advertisement Route update packet is received, it could be possible that the IP address length field is miscalculated. An attacker could exploit this vulnerability by sending a crafted BGP packet to an affected device after the BGP session was established. An exploit could allow the attacker to cause the affected device to reload or corrupt the BGP routing table; either outcome would result in a DoS. The vulnerability may be triggered when the router receives a crafted BGP message from a peer on an existing BGP session. This vulnerability affects all releases of Cisco IOS XE Software prior to software release 16.3 that support BGP EVPN configurations. If the device is not configured for EVPN, it is not vulnerable. Cisco Bug IDs: CSCui67191, CSCvg52875.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101676; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171103-bgp; http://www.securityfocus.com/bid/101676
CVE: CVE-2018-0198
Published: 2018-03-27
Description: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. A successful exploit could allow the attacker to view data library information. Cisco Bug IDs: CSCvh66592.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-693, CWE-425
References: http://www.securityfocus.com/bid/102965; http://www.securitytracker.com/id/1040342; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucm1
CVE: CVE-2018-0202
Published: 2018-03-27
Description: clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation checking mechanisms when handling Portable Document Format (.pdf) files sent to an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted .pdf file to an affected device. This action could cause an out-of-bounds read when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition. This concerns pdf_parse_array and pdf_parse_string in libclamav/pdfng.c. Cisco Bug IDs: CSCvh91380, CSCvh91400.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.clamav.net/show_bug.cgi?id=11973; https://bugzilla.clamav.net/show_bug.cgi?id=11980; https://lists.debian.org/debian-lts-announce/2018/03/msg00011.html
CVE: CVE-2014-0486
Published: 2018-03-27
Description: Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/70097; https://exchange.xforce.ibmcloud.com/vulnerabilities/96185; https://gitlab.labs.nic.cz/knot/knot-dns/issues/294
CVE: CVE-2014-4959
Published: 2018-03-27
Description: **DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to execute arbitrary SQL commands via the delete method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/127651/Android-SDK-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Jul/138; http://seclists.org/fulldisclosure/2014/Jul/139
CVE: CVE-2018-1231
Published: 2018-03-27
Description: Cloud Foundry BOSH CLI, versions prior to v3.0.1, contains an improper access control vulnerability. A user with access to an instance using the BOSH CLI can access the BOSH CLI configuration file and use its contents to perform authenticated requests to BOSH.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://www.cloudfoundry.org/blog/cve-2018-1231/; https://www.cloudfoundry.org/blog/cve-2018-1231/
CVE: CVE-2018-1266
Published: 2018-03-27
Description: Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user can predict the location of application blobs and leverage path traversal to create a malicious application that has the ability to overwrite arbitrary files on the Cloud Controller instance.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-330
References: https://www.cloudfoundry.org/blog/cve-2018-1266/; https://www.cloudfoundry.org/blog/cve-2018-1266/
CVE: CVE-2018-1267
Published: 2018-03-27
Description: Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network, any applications can reach any other application on the network regardless of the configured routing policies.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732
References: https://www.cloudfoundry.org/blog/cve-2018-1267/; https://www.cloudfoundry.org/blog/cve-2018-1267/
CVE: CVE-2018-6882
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Location header in an email attachment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/fulldisclosure/2018/Mar/52; http://www.securityfocus.com/archive/1/541891/100/0/threaded; https://bugzilla.zimbra.com/show_bug.cgi?id=108786
CVE: CVE-2018-8718
Published: 2018-03-27
Description: Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2018/03/26/3; http://www.securityfocus.com/bid/103691; https://jenkins.io/security/advisory/2018-03-26/
CVE: CVE-2018-8763
Published: 2018-03-27
Description: Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=rename_form URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Mar/45; https://lists.debian.org/debian-lts-announce/2018/04/msg00007.html
CVE: CVE-2018-8764
Published: 2018-03-27
Description: Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Mar/45; https://www.debian.org/security/2018/dsa-4165
CVE: CVE-2015-4954
Published: 2018-03-27
Description: IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified vectors. IBM X-Force ID: 105200.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www-01.ibm.com/support/docview.wss?uid=swg21972042; https://exchange.xforce.ibmcloud.com/vulnerabilities/105200; http://www-01.ibm.com/support/docview.wss?uid=swg21972042
CVE: CVE-2015-4987
Published: 2018-03-27
Description: The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://www-01.ibm.com/support/docview.wss?uid=swg21981017; https://exchange.xforce.ibmcloud.com/vulnerabilities/105896; http://www-01.ibm.com/support/docview.wss?uid=swg21981017
CVE: CVE-2015-5016
Published: 2018-03-27
Description: IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21971160; https://exchange.xforce.ibmcloud.com/vulnerabilities/106460; http://www-01.ibm.com/support/docview.wss?uid=swg21971160
CVE: CVE-2018-6765
Published: 2018-03-27
Description: Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. The specific flaw exists within the handling of several DLLs (dwmapi.dll, IPHLPAPI.DLL, WindowsCodecs.dll, RpcRtRemote.dll, CRYPTSP.dll, rasadhlp.dll, DNSAPI.dll, ntmarta.dll, netbios.dll, olepro32.dll, security.dll, winhttp.dll, WINSTA.dll) loaded by the MySwisscomAssistant_Setup.exe process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6765_myswisscomassistant.txt; https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6765_myswisscomassistant.txt
CVE: CVE-2018-6766
Published: 2018-03-27
Description: Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge. The specific flaw exists within the handling of several DLLs (dwmapi.dll, PROPSYS.dll, cscapi.dll, SAMLIB.dll, netbios.dll, winhttp.dll, security.dll, ntmarta.dll, WindowsCodecs.dll, apphelp.dll) loaded by the SwisscomTVMediaHelper.exe process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6766_tvmediahelper.txt; https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2018-6766_tvmediahelper.txt
CVE: CVE-2018-7192
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c; https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
CVE: CVE-2018-7193
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c; https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
CVE: CVE-2018-7194
Published: 2018-03-27
Description: Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) via a large number of digits in the ticket number format setting.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-190
References: https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c; https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
CVE: CVE-2018-7195
Published: 2018-03-27
Description: Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail address is known) by leveraging guest access and guessing a 6-digit number.
CVSS Score: 8.1 (HIGH)
References: https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c; https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
CVE: CVE-2018-7196
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c; https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
CVE: CVE-2018-8048
Published: 2018-03-27
Description: In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2018/03/19/5; https://github.com/flavorjones/loofah/issues/144; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-9056
Published: 2018-03-27
Description: Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf; https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/; http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf
CVE: CVE-2018-7700
Published: 2018-03-27
Description: DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/; https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/
CVE: CVE-2018-9057
Published: 2018-03-27
Description: aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-332
References: https://github.com/terraform-providers/terraform-provider-aws/pull/3934; https://github.com/terraform-providers/terraform-provider-aws/pull/3934
CVE: CVE-2014-5130
Published: 2018-03-27
Description: Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html; http://www.securityfocus.com/archive/1/533345/100/0/threaded; http://www.securityfocus.com/bid/69621
CVE: CVE-2014-5131
Published: 2018-03-27
Description: Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html; http://www.securityfocus.com/archive/1/533345/100/0/threaded; http://www.securityfocus.com/bid/69632
CVE: CVE-2014-5132
Published: 2018-03-27
Description: Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html; http://www.securityfocus.com/archive/1/533345/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/95737
CVE: CVE-2017-7630
Published: 2018-03-27
Description: QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-23; https://www.qnap.com/zh-tw/security-advisory/nas-201803-23
CVE: CVE-2017-7631
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-23; https://www.qnap.com/zh-tw/security-advisory/nas-201803-23
CVE: CVE-2017-7632
Published: 2018-03-27
Description: Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-23; https://www.qnap.com/zh-tw/security-advisory/nas-201803-23
CVE: CVE-2018-0733
Published: 2018-03-27
Description: Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).
CVSS Score: 5.9 (MEDIUM)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103517