deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0026
Published: 2018-07-11
Description: After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0> show interfaces <interface_name> extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does not show the applied firewall filter. The correct output should show the applied firewall filter, for example: user@re0> show interfaces <interface_name> extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Input Filters: FIREWAL_FILTER_NAME-<interface_name> This issue affects firewall filters for every address family. Affected releases are Juniper Networks Junos OS: 15.1R4, 15.1R5, 15.1R6 and SRs based on these MRs. 15.1X8 versions prior to 15.1X8.3.
CVSS Score: 4.7 (MEDIUM)
References: http://www.securityfocus.com/bid/104720; http://www.securitytracker.com/id/1041315; https://kb.juniper.net/JSA10859
CVE: CVE-2018-0027
Published: 2018-07-11
Description: Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via that interface. This issue only affects Juniper Networks Junos OS 16.1 versions prior to 16.1R3. This issue does not affect Junos releases prior to 16.1R1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104721; http://www.securitytracker.com/id/1041318; https://kb.juniper.net/JSA10861
CVE: CVE-2018-0029
Published: 2018-07-11
Description: While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart (vmcore). This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases prior to Junos OS 15.1 are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S11, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R5-S4, 16.1R6-S1, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D90, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400
References: http://www.securitytracker.com/id/1041319; https://kb.juniper.net/JSA10863; http://www.securitytracker.com/id/1041319
CVE: CVE-2018-0030
Published: 2018-07-11
Description: Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securitytracker.com/id/1041325; https://kb.juniper.net/JSA10864; https://kb.juniper.net/KB25385
CVE: CVE-2018-0031
Published: 2018-07-11
Description: Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a service interruption (e.g. RPD crash), but receipt of a high rate of UDP packets may be able to contribute to a denial of service attack. This issue only affects processing of transit UDP/IP packets over MPLS, received on an interface with MPLS enabled. TCP packet processing and non-MPLS encapsulated UDP packet processing are unaffected by this issue. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D76; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D66, 12.3X48-D70; 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D131, 15.1X49-D140; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400; 15.1X53 versions prior to 15.1X53-D67 on QFX10K; 15.1X53 versions prior to 15.1X53-D233 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D100; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2; 18.2X75 versions prior to 18.2X75-D5.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: http://www.securitytracker.com/id/1041326; https://kb.juniper.net/JSA10865; http://www.securitytracker.com/id/1041326
CVE: CVE-2018-0032
Published: 2018-07-11
Description: The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this advisory. Earlier releases are unaffected by this vulnerability. This crafted BGP UPDATE does not propagate to other BGP peers. Affected releases are Juniper Networks Junos OS: 16.1X65 versions prior to 16.1X65-D47; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D110; 17.3 versions prior to 17.3R1-S4, 17.3R2; 17.4 versions prior to 17.4R1-S3, 17.4R2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041337; https://kb.juniper.net/JSA10866; http://www.securitytracker.com/id/1041337
CVE: CVE-2018-0034
Published: 2018-07-11
Description: A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing using the JDHCPD daemon. This issue does not affect IPv4 DHCP packet processing. Affected releases are Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S10 on EX Series; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 14.1X53 versions prior to 14.1X53-D130 on QFabric; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D67 on QFX10000 Series; 15.1X53 versions prior to 15.1X53-D233 on QFX5110, QFX5200; 15.1X53 versions prior to 15.1X53-D471 on NFX 150, NFX 250; 16.1 versions prior to 16.1R3-S9, 16.1R4-S8, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.2 versions prior to 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S6, 17.2R2-S4, 17.2R3; 17.3 versions prior to 17.3R1-S4, 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S3, 17.4R2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041338; https://apps.juniper.net/feature-explorer/search.html#q=dhcp; https://kb.juniper.net/JSA10868
CVE: CVE-2018-0035
Published: 2018-07-11
Description: QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment (ONIE) partition. This additional partition allows the superuser to reboot to the ONIE partition which will wipe out the content of the Junos partition and its configuration. Once rebooted, the ONIE partition will not have root password configured, thus any user can access the console or SSH, using an IP address acquired from DHCP, as root without password. Once the device has been shipped or upgraded with the ONIE partition installed, the issue will persist. Simply upgrading to higher release via the CLI will not resolve the issue. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 4.4 (MEDIUM)
References: http://www.securitytracker.com/id/1041336; https://kb.juniper.net/JSA10869; http://www.securitytracker.com/id/1041336
CVE: CVE-2018-0037
Published: 2018-07-11
Description: Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. Due to design improvements, this issue does not affect Junos OS 16.1R1, and all subsequent releases. This issue only affects the receiving BGP device and is non-transitive in nature. Affected releases are Juniper Networks Junos OS: 15.1F5 versions starting from 15.1F5-S7 and all subsequent releases; 15.1F6 versions starting from 15.1F6-S3 and later releases prior to 15.1F6-S10; 15.1F7 versions 15.1 versions starting from 15.1R5 and later releases, including the Service Releases based on 15.1R5 and on 15.1R6 prior to 15.1R6-S6 and 15.1R7;
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041339; https://kb.juniper.net/JSA10871; http://www.securitytracker.com/id/1041339
CVE: CVE-2018-0038
Published: 2018-07-11
Description: Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Cassandra.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://kb.juniper.net/JSA10872; https://kb.juniper.net/JSA10872
CVE: CVE-2018-0039
Published: 2018-07-11
Description: Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-561, CWE-798, CWE-798
References: https://kb.juniper.net/JSA10872; https://kb.juniper.net/JSA10872
CVE: CVE-2018-0040
Published: 2018-07-11
Description: Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321, CWE-798
References: https://kb.juniper.net/JSA10872; https://kb.juniper.net/JSA10872
CVE: CVE-2018-0041
Published: 2018-07-11
Description: Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://kb.juniper.net/JSA10872; https://kb.juniper.net/JSA10872
CVE: CVE-2018-0042
Published: 2018-07-11
Description: Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://kb.juniper.net/JSA10872; https://kb.juniper.net/JSA10872
CVE: CVE-2016-0708
Published: 2018-07-11
Description: Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service details. For applications to be vulnerable, they must have been staged using automatic buildpack detection, passed through the Java Buildpack detection script, and allow the serving of static content from within the deployed artifact. The default Apache Tomcat configuration in the affected java buildpack versions for some basic web application archive (WAR) packaged applications are vulnerable to this issue.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://www.cloudfoundry.org/blog/cve-2016-0708/; https://www.cloudfoundry.org/blog/cve-2016-0708/
CVE: CVE-2018-11045
Published: 2018-07-11
Description: Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRNG) seed file embedded in the appliance image. An attacker with knowledge of the exact version and IaaS of a running OpsManager could get the contents of the corresponding seed from the published image and therefore infer the initial state of the LRNG.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://pivotal.io/security/cve-2018-11045; https://pivotal.io/security/cve-2018-11045
CVE: CVE-2018-11049
Published: 2018-07-11
Description: RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: http://seclists.org/fulldisclosure/2018/Jul/23; http://www.securityfocus.com/bid/104722; http://www.securitytracker.com/id/1041228
CVE: CVE-2018-10895
Published: 2018-07-12
Description: qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/set' URL, which then sets 'editor.command' to a bash script, resulting in arbitrary code execution.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-352, CWE-352
References: http://www.openwall.com/lists/oss-security/2018/07/11/7; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10895; https://github.com/qutebrowser/qutebrowser/commit/43e58ac865ff862c2008c510fc5f7627e10b4660
CVE: CVE-2018-13996
Published: 2018-07-12
Description: Genann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/codeplea/genann/issues/24#issue-340516591; https://github.com/codeplea/genann/issues/24#issue-340516591
CVE: CVE-2018-13997
Published: 2018-07-12
Description: Genann through 2018-07-08 has a SEGV in genann_run in genann.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/codeplea/genann/issues/24#issuecomment-404429236; https://github.com/codeplea/genann/issues/24#issuecomment-404429236
CVE: CVE-2018-13998
Published: 2018-07-12
Description: ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/ClipperCMS/ClipperCMS/issues/491; https://github.com/ClipperCMS/ClipperCMS/issues/491
CVE: CVE-2018-13999
Published: 2018-07-12
Description: Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/xwlrbh/Catfish/issues/2; https://github.com/xwlrbh/Catfish/issues/2
CVE: CVE-2018-1334
Published: 2018-07-12
Description: In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/4d6d210e319a501b740293daaeeeadb51927111fb8261a3e4cd60060%40%3Cdev.spark.apache.org%3E; https://spark.apache.org/security.html#CVE-2018-1334; https://lists.apache.org/thread.html/4d6d210e319a501b740293daaeeeadb51927111fb8261a3e4cd60060%40%3Cdev.spark.apache.org%3E
CVE: CVE-2018-8024
Published: 2018-07-12
Description: In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the user's view of the Spark UI. While some browsers like recent versions of Chrome and Safari are able to block this type of attack, current versions of Firefox (and possibly others) do not.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: https://lists.apache.org/thread.html/5f241d2cda21cbcb3b63e46e474cf5f50cce66927f08399f4fab0aba%40%3Cdev.spark.apache.org%3E; https://spark.apache.org/security.html#CVE-2018-8024; https://lists.apache.org/thread.html/5f241d2cda21cbcb3b63e46e474cf5f50cce66927f08399f4fab0aba%40%3Cdev.spark.apache.org%3E
CVE: CVE-2017-18155
Published: 2018-07-12
Description: While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE: CVE-2018-12540
Published: 2018-07-12
Description: In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://access.redhat.com/errata/RHSA-2018:2371; https://bugs.eclipse.org/bugs/show_bug.cgi?id=536948; https://lists.apache.org/thread.html/r10aef585c521f8ef603f5831f9d97a27d[PII_REDACTED]31da950e0c62f%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2018-13836
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/Rocket%20Coin%28XRC%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14001
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14002
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/MP3%20Coin%28MP3%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14003
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/WeMediaChain%28WMC%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14004
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/GlobeCoin%28GLB%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14005
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/Malaysia%20coins%28Xmc%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2018-14006
Published: 2018-07-12
Description: An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md; https://github.com/VenusADLab/EtherTokens/tree/master/Neo%20Genesis%20Token%28NGT%29; https://github.com/VenusADLab/EtherTokens/blob/master/SHARKTECH/SHARKTECH.md
CVE: CVE-2017-14612
Published: 2018-07-12
Description: "Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/; https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/
CVE: CVE-2017-14709
Published: 2018-07-12
Description: The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200, CWE-295
References: https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/; https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/
CVE: CVE-2017-14710
Published: 2018-07-12
Description: The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/; https://www.crissyfield.de/blog/2017/12/14/missing-certificate-validation/