deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0119
Published: 2018-02-08
Description: A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated, remote attacker to interact with and view information on an affected device that would normally be prohibited. The vulnerability is due to the improper display of user-account tokens generated in the system. An attacker could exploit this vulnerability by logging in to the device with a token in use by another account. Successful exploitation could allow the attacker to cause a partial impact to the device's confidentiality, integrity, and availability. Cisco Bug IDs: CSCvg05206.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/102961; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-spark; http://www.securityfocus.com/bid/102961
CVE: CVE-2018-0120
Published: 2018-02-08
Description: A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct an SQL injection attack against an affected system. The vulnerability exists because the affected software fails to validate user-supplied input in certain SQL queries that bypass protection filters. An attacker could exploit this vulnerability by submitting crafted HTTP requests that contain malicious SQL statements to an affected system. A successful exploit could allow the attacker to determine the presence of certain values in the database of the affected system. Cisco Bug IDs: CSCvg74810.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/102958; http://www.securitytracker.com/id/1040341; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cucm
CVE: CVE-2018-0122
Published: 2018-02-08
Description: A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are stored in the flash memory of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the affected operating system. An attacker could exploit this vulnerability by injecting crafted command arguments into a vulnerable CLI command for the affected operating system. A successful exploit could allow the attacker to overwrite or modify arbitrary files that are stored in the flash memory of an affected system. To exploit this vulnerability, the attacker would need to authenticate to an affected system by using valid administrator credentials. Cisco Bug IDs: CSCvf93335.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-78
References: http://www.securityfocus.com/bid/103028; http://www.securitytracker.com/id/1040340; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-asr
CVE: CVE-2018-0123
Published: 2018-02-08
Description: A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that can overwrite system files. These system files may be sensitive and should not be able to be overwritten by a user of the diagnostic shell. The vulnerability is due to lack of proper input validation for certain diagnostic shell commands. An attacker could exploit this vulnerability by authenticating to the device, entering the diagnostic shell, and providing crafted user input to commands at the local diagnostic shell CLI. Successful exploitation could allow the attacker to overwrite system files that should be restricted. Cisco Bug IDs: CSCvg41950.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/102967; http://www.securitytracker.com/id/1040346; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ios
CVE: CVE-2018-0125
Published: 2018-02-08
Description: A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to an incomplete input validation on user-controlled input in an HTTP request to the targeted device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user and gain full control of the affected system or cause it to reload, resulting in a DoS condition. This vulnerability is fixed in firmware version 1.0.1.11 for the following Cisco products: RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. Cisco Bug IDs: CSCvg92737, CSCvh60170.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/103140; http://www.securitytracker.com/id/1040336; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x
CVE: CVE-2018-0127
Published: 2018-02-08
Description: A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-306
References: http://www.securityfocus.com/bid/102969; http://www.securitytracker.com/id/1040345; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2
CVE: CVE-2018-0128
Published: 2018-02-08
Description: A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvh02082.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102960; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-dcaf; http://www.securityfocus.com/bid/102960
CVE: CVE-2018-0129
Published: 2018-02-08
Description: A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvh02088.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102959; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-dcaf1; http://www.securityfocus.com/bid/102959
CVE: CVE-2018-0132
Published: 2018-02-08
Description: A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of extremely long routing updates. An attacker could exploit this vulnerability by sending a large routing update. A successful exploit could allow the attacker to trigger inconsistency between the FIB and the RIB, resulting in a DoS condition. Cisco Bug IDs: CSCus84718.
CVSS Score: 8.6 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/102975; http://www.securitytracker.com/id/1040344; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-iosxr
CVE: CVE-2018-0134
Published: 2018-02-08
Description: A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure messages based on the validity of usernames. An attacker could use these messages to determine whether a valid subscriber username has been identified. The attacker could use this information in subsequent attacks against the system. Cisco Bug IDs: CSCvg47830.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-203
References: http://www.securityfocus.com/bid/102954; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cps1; http://www.securityfocus.com/bid/102954
CVE: CVE-2018-0135
Published: 2018-02-08
Description: A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to retrieve sensitive information from the affected system. Cisco Bug IDs: CSCvf17644.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102964; http://www.securitytracker.com/id/1040343; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucm
CVE: CVE-2018-0137
Published: 2018-02-08
Description: A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP SYN packets to the local IP address of the targeted application. A successful exploit could allow the attacker to cause the device to consume a high amount of memory and become slow, or to stop accepting new TCP connections to the application. Cisco Bug IDs: CSCvg48152.
CVSS Score: 8.6 (HIGH)
CWE: CWE-399, CWE-770
References: http://www.securityfocus.com/bid/102955; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cpn; http://www.securityfocus.com/bid/102955
CVE: CVE-2018-0138
Published: 2018-02-08
Description: A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected software does not detect BitTorrent handshake messages correctly. An attacker could exploit this vulnerability by sending a crafted BitTorrent connection request to an affected device. A successful exploit could allow the attacker to bypass file policies that are configured to block files transmitted to the affected device via the BitTorrent protocol. Cisco Bug IDs: CSCve26946.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-693, CWE-693
References: http://www.securityfocus.com/bid/102978; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-fss; http://www.securityfocus.com/bid/102978
CVE: CVE-2018-0140
Published: 2018-02-08
Description: A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Appliance could allow an authenticated, remote attacker to download any message from the spam quarantine by modifying browser string information. The vulnerability is due to a lack of verification of authenticated user accounts. An attacker could exploit this vulnerability by modifying browser strings to see messages submitted by other users to the spam quarantine within their company. Cisco Bug IDs: CSCvg39759, CSCvg42295.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-425
References: http://www.securityfocus.com/bid/103090; http://www.securitytracker.com/id/1040338; http://www.securitytracker.com/id/1040339
CVE: CVE-2018-6834
Published: 2018-02-08
Description: static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ether/etherpad-lite/commit/a03422b09468cdd5f192b05643311c705447588b; https://github.com/ether/etherpad-lite/releases/tag/1.6.3; https://github.com/ether/etherpad-lite/commit/a03422b09468cdd5f192b05643311c705447588b
CVE: CVE-2018-6835
Published: 2018-02-08
Description: node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/ether/etherpad-lite/commit/626e58cc5af1db3691b41fca7b06c28ea43141b1; https://github.com/ether/etherpad-lite/releases/tag/1.6.3; https://github.com/ether/etherpad-lite/commit/626e58cc5af1db3691b41fca7b06c28ea43141b1
CVE: CVE-2018-6836
Published: 2018-02-08
Description: The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-763
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14397; https://code.wireshark.org/review/#/c/25660/; https://code.wireshark.org/review/#/c/25660/2/wiretap/netmon.c
CVE: CVE-2018-6844
Published: 2018-02-08
Description: MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://websecnerd.blogspot.com/2018/02/mybb-forum-1.html; https://websecnerd.blogspot.com/2018/02/mybb-forum-1.html
CVE: CVE-2018-0512
Published: 2018-02-08
Description: Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: http://www.iodata.jp/support/information/2018/magicalfinder/; https://jvn.jp/en/jp/JVN36048131/index.html; http://www.iodata.jp/support/information/2018/magicalfinder/
CVE: CVE-2018-0513
Published: 2018-02-08
Description: Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://mtssb.mt-systems.jp/jvn99312352/; https://jvn.jp/en/jp/JVN99312352/index.html; http://mtssb.mt-systems.jp/jvn99312352/
CVE: CVE-2018-0514
Published: 2018-02-08
Description: MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.futomi.com/library/mpmailec.html#history; https://jvn.jp/en/jp/JVN15462187/index.html; http://www.futomi.com/library/mpmailec.html#history
CVE: CVE-2018-0517
Published: 2018-02-08
Description: Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://jvn.jp/en/jp/JVN70615027/index.html; https://jvn.jp/en/jp/JVN70615027/index.html
CVE: CVE-2017-7351
Published: 2018-02-08
Description: A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://labs.nettitude.com/blog/cve-2017-7351-redcap-7-0-0-7-0-10-sql-injection/; https://labs.nettitude.com/blog/cve-2017-7351-redcap-7-0-0-7-0-10-sql-injection/
CVE: CVE-2018-6846
Published: 2018-02-08
Description: Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/zblogcn/zblogphp/issues/176; https://github.com/zblogcn/zblogphp/issues/176
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-08
Description: Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3->Malloc->Thread1->Free's->Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.
CVSS Score: 3.6 (LOW)
CWE: CWE-416, CWE-787
References: https://bugs.python.org/issue31530; https://drive.google.com/file/d/1oyR9DAZjZK_SCn3mor6NRAYLJS6ueXaY/view; https://security.gentoo.org/glsa/201811-02
CVE: CVE-2017-17412
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute arbitrary code in the context of the underlying database. Was ZDI-CAN-4223.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-974; https://zerodayinitiative.com/advisories/ZDI-17-974
CVE: CVE-2017-17413
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4224.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-978; https://zerodayinitiative.com/advisories/ZDI-17-978
CVE: CVE-2017-17414
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4225.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-979; https://zerodayinitiative.com/advisories/ZDI-17-979
CVE: CVE-2017-17415
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4226.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-980; https://zerodayinitiative.com/advisories/ZDI-17-980
CVE: CVE-2017-17416
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus GetPlugins method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4227.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-981; https://zerodayinitiative.com/advisories/ZDI-17-981
CVE: CVE-2017-17417
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4228.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.exploit-db.com/exploits/46446/; https://zerodayinitiative.com/advisories/ZDI-17-982; https://www.exploit-db.com/exploits/46446/
CVE: CVE-2017-17418
Published: 2018-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4229.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zerodayinitiative.com/advisories/ZDI-17-983; https://zerodayinitiative.com/advisories/ZDI-17-983