deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11204
Published: 2018-05-16
Description: A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE: CVE-2018-11205
Published: 2018-05-16
Description: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5
CVE: CVE-2018-11206
Published: 2018-05-16
Description: An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README2.md; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html
CVE: CVE-2018-11207
Published: 2018-05-16
Description: A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/SegfaultMasters/covering360/tree/master/HDF5#divided-by-zero---divbyzero__h5d_chunk_poc; https://github.com/Twi1ight/fuzzing-pocs/tree/master/hdf5; https://github.com/SegfaultMasters/covering360/tree/master/HDF5#divided-by-zero---divbyzero__h5d_chunk_poc
CVE: CVE-2018-11208
Published: 2018-05-16
Description: An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/zblogcn/zblogphp/issues/187; https://github.com/zblogcn/zblogphp/issues/205; https://github.com/zblogcn/zblogphp/issues/187
CVE: CVE-2018-11209
Published: 2018-05-16
Description: An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-327
References: https://github.com/zblogcn/zblogphp/issues/188; https://github.com/zblogcn/zblogphp/issues/205; https://github.com/zblogcn/zblogphp/issues/188
CVE: CVE-2018-11210
Published: 2018-05-16
Description: TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use of the library and not a vulnerability in tinyxml2
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/leethomason/tinyxml2/issues/675; https://github.com/leethomason/tinyxml2/issues/675#issuecomment-439933437; https://github.com/leethomason/tinyxml2/issues/675#issuecomment-462194018
CVE: CVE-2018-8014
Published: 2018-05-16
Description: The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CORS filter will have configured it appropriately for their environment rather than using it in the default configuration. Therefore, it is expected that most users will not be impacted by this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://tomcat.apache.org/security-7.html; http://tomcat.apache.org/security-8.html; http://tomcat.apache.org/security-9.html
CVE: CVE-2018-11212
Published: 2018-05-16
Description: An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00028.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
CVE: CVE-2018-11213
Published: 2018-05-16
Description: An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
References: https://access.redhat.com/errata/RHSA-2019:2052; https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a; https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html
CVE: CVE-2018-11214
Published: 2018-05-16
Description: An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
References: https://access.redhat.com/errata/RHSA-2019:2052; https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9a; https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html
CVE: CVE-2018-4850
Published: 2018-05-16
Description: A vulnerability has been identified in SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below (All versions), SIMATIC S7-400 (incl. F) CPU hardware version 5.0 (All firmware versions < V5.2), SIMATIC S7-400H CPU hardware version 4.5 and below (All versions). The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104217; https://cert-portal.siemens.com/productcert/pdf/ssa-914382.pdf; https://www.siemens.com/global/en/home/products/services/cert.html#SecurityPublications
CVE: CVE-2017-17688
Published: 2018-05-16
Description: The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification
CVSS Score: 5.9 (MEDIUM)
References: http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html; http://www.securityfocus.com/bid/104162; http://www.securitytracker.com/id/1040904
CVE: CVE-2017-17689
Published: 2018-05-16
Description: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/104165; https://efail.de; https://news.ycombinator.com/item?id=17066419
CVE: CVE-2018-1172
Published: 2018-05-16
Description: This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition to users of the system. Was ZDI-CAN-6088.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.squid-cache.org/Advisories/SQUID-2018_3.txt; https://zerodayinitiative.com/advisories/ZDI-18-309; http://www.squid-cache.org/Advisories/SQUID-2018_3.txt
CVE: CVE-2018-0222
Published: 2018-05-17
Description: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credentials. The vulnerability is due to the presence of undocumented, static user credentials for the default administrative account for the affected software. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands with root privileges. This vulnerability affects all releases of Cisco DNA Center Software prior to Release 1.1.3. Cisco Bug IDs: CSCvh98929.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/104193; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dnac; http://www.securityfocus.com/bid/104193
CVE: CVE-2018-0268
Published: 2018-05-17
Description: A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-358, CWE-358
References: http://www.securityfocus.com/bid/104192; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna; http://www.securityfocus.com/bid/104192
CVE: CVE-2018-0270
Published: 2018-05-17
Description: A vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and alter the data of existing users and groups on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the user has administrative privileges, the attacker could create a new, privileged account to obtain full control over the device interface. This vulnerability affects Connected Grid Network Management System, if running a software release prior to IoT-FND Release 3.0; and IoT Field Network Director, if running a software release prior to IoT-FND Release 4.1.1-6 or 4.2.0-123. Cisco Bug IDs: CSCvi02448.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/104242; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-fnd; http://www.securityfocus.com/bid/104242
CVE: CVE-2018-0271
Published: 2018-05-17
Description: A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could exploit this vulnerability by submitting a crafted URL designed to exploit the issue. A successful exploit could allow the attacker to gain unauthenticated access to critical services, resulting in elevated privileges in DNA Center. This vulnerability affects Cisco DNA Center Software Releases prior to 1.1.2. Cisco Bug IDs: CSCvi09394.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/104191; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna2; http://www.securityfocus.com/bid/104191
CVE: CVE-2018-0277
Published: 2018-05-17
Description: A vulnerability in the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) certificate validation during EAP authentication for the Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause the ISE application server to restart unexpectedly, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to incomplete input validation of the client EAP-TLS certificate. An attacker could exploit this vulnerability by initiating EAP authentication over TLS to the ISE with a crafted EAP-TLS certificate. A successful exploit could allow the attacker to restart the ISE application server, resulting in a DoS condition on the affected system. The ISE application could continue to restart while the client attempts to establish the EAP authentication connection. If an attacker attempted to import the same EAP-TLS certificate to the ISE trust store, it could trigger a DoS condition on the affected system. This exploit vector would require the attacker to have valid administrator credentials. The vulnerability affects Cisco ISE, Cisco ISE Express, and Cisco ISE Virtual Appliance. Cisco Bug IDs: CSCve31857.
CVSS Score: 8.6 (HIGH)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/104212; http://www.securitytracker.com/id/1040922; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-iseeap
CVE: CVE-2018-0279
Published: 2018-05-17
Description: A vulnerability in the Secure Copy Protocol (SCP) server of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation of command arguments. An attacker could exploit this vulnerability by using crafted arguments when opening a connection to the affected device. An exploit could allow the attacker to gain shell access with a non-root user account to the underlying Linux operating system on the affected device. Due to the system design, access to the Linux shell could allow execution of additional attacks that may have a significant impact on the affected system. This vulnerability affects Cisco devices that are running release 3.7.1, 3.6.3, or earlier releases of Cisco Enterprise NFV Infrastructure Software (NFVIS) when access to the SCP server is allowed on the affected device. Cisco NFVIS Releases 3.5.x and 3.6.x do allow access to the SCP server by default, while Cisco NFVIS Release 3.7.1 does not. Cisco Bug IDs: CSCvh25026.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-78
References: http://www.securityfocus.com/bid/104243; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis; http://www.securityfocus.com/bid/104243
CVE: CVE-2018-0280
Published: 2018-05-17
Description: A vulnerability in the Real-Time Transport Protocol (RTP) bitstream processing of the Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation of incoming RTP bitstreams. An attacker could exploit this vulnerability by sending a crafted RTP bitstream to an affected Cisco Meeting Server. A successful exploit could allow the attacker to deny audio and video services by causing media process crashes resulting in a DoS condition on the affected product. This vulnerability affects Cisco Meeting Server deployments that are running Cisco Meeting Server Software Releases 2.0, 2.1, 2.2, and 2.3. Cisco Bug IDs: CSCve79693, CSCvf91393, CSCvg64656, CSCvh30725, CSCvi86363.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/104209; http://www.securitytracker.com/id/1040923; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-msms
CVE: CVE-2018-0289
Published: 2018-05-17
Description: A vulnerability in the logs component of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of requests stored in logs in the application management interface. An attacker could exploit this vulnerability by sending malicious requests to the targeted system. An exploit could allow the attacker to conduct cross-site scripting attacks when an administrator views the log files. Cisco Bug IDs: CSCvh11308.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/104196; http://www.securitytracker.com/id/1040925; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ise-xss
CVE: CVE-2018-0290
Published: 2018-05-17
Description: A vulnerability in the TCP stack of Cisco SocialMiner could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the notification system. The vulnerability is due to faulty handling of new TCP connections to the affected application. An attacker could exploit this vulnerability by sending a malicious TCP packet to the vulnerable service. An exploit could allow the attacker to create a DoS condition by interrupting certain phone services. A manual restart of the service may be required to restore full functionalities. Cisco Bug IDs: CSCvh48368.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/104201; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-socmin-dos; http://www.securityfocus.com/bid/104201
CVE: CVE-2018-0297
Published: 2018-05-17
Description: A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer (SSL) Access Control (AC) policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets received out of order. An attacker could exploit this vulnerability by sending a crafted SSL connection through the affected device. A successful exploit could allow the attacker to bypass a configured SSL AC policy to block SSL traffic. Cisco Bug IDs: CSCvg09316.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-693, CWE-693
References: http://www.securityfocus.com/bid/104197; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-firepwr-pb; http://www.securityfocus.com/bid/104197
CVE: CVE-2018-0323
Published: 2018-05-17
Description: A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request parameters. An attacker who has access to the web management interface of the affected application could exploit this vulnerability by sending a malicious web request to the affected device. A successful exploit could allow the attacker to access sensitive information on the affected system. Cisco Bug IDs: CSCvh99631.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/104206; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis-path-traversal; http://www.securityfocus.com/bid/104206
CVE: CVE-2018-0324
Published: 2018-05-17
Description: A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, high-privileged, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command parameters in the CLI parser. An attacker could exploit this vulnerability by invoking a vulnerable CLI command with crafted malicious parameters. An exploit could allow the attacker to execute arbitrary commands with a non-root user account on the underlying Linux operating system of the affected device. Cisco Bug IDs: CSCvi09723.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: http://www.securityfocus.com/bid/104208; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis-cli-command-injection; http://www.securityfocus.com/bid/104208
CVE: CVE-2018-0325
Published: 2018-05-17
Description: A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 7800 Series phones and Cisco IP Phone 8800 Series phones could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to incomplete input validation of SIP Session Description Protocol (SDP) parameters by the SDP parser of an affected phone. An attacker could exploit this vulnerability by sending a malformed SIP packet to an affected phone. A successful exploit could allow the attacker to cause all active phone calls on the affected phone to be dropped while the SIP process on the phone unexpectedly restarts, resulting in a DoS condition. Cisco Bug IDs: CSCvf40066.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/104202; http://www.securitytracker.com/id/1040927; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ip-phone-dos
CVE: CVE-2018-0326
Published: 2018-05-17
Description: A vulnerability in the web UI of Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to conduct a cross-frame scripting (XFS) attack against a user of the web UI of the affected software. The vulnerability is due to insufficient protections for HTML inline frames (iframes) by the web UI of the affected software. An attacker could exploit this vulnerability by persuading a user of the affected UI to navigate to an attacker-controlled web page that contains a malicious HTML iframe. A successful exploit could allow the attacker to conduct click-jacking or other client-side browser attacks on the affected system. Cisco Bug IDs: CSCun79565.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-693, CWE-693
References: http://www.securityfocus.com/bid/104204; http://www.securitytracker.com/id/1040930; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-telepres-xfs
CVE: CVE-2018-0327
Published: 2018-05-17
Description: A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvg86743.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/104194; http://www.securitytracker.com/id/1040926; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-ident-se-xss
CVE: CVE-2018-0328
Published: 2018-05-17
Description: A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvg89116.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/104200; http://www.securitytracker.com/id/1040928; http://www.securitytracker.com/id/1040929