deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15513
Published: 2018-01-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-17999
Published: 2018-01-23
Description: SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledge_base/get_article_suggestion/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/145902/RISE-1.9-SQL-Injection.html; https://www.exploit-db.com/exploits/43591/; http://packetstormsecurity.com/files/145902/RISE-1.9-SQL-Injection.html
CVE: CVE-2017-18030
Published: 2018-01-23
Description: The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2018/01/15/3; http://www.securityfocus.com/bid/102520; https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3
CVE: CVE-2018-5359
Published: 2018-01-23
Description: The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/145900/SysGauge-Server-3.6.18-Buffer-Overflow.html; https://www.exploit-db.com/exploits/43588/; http://packetstormsecurity.com/files/145900/SysGauge-Server-3.6.18-Buffer-Overflow.html
CVE: CVE-2018-5683
Published: 2018-01-23
Description: The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2018/01/15/2; http://www.securityfocus.com/bid/102518; https://access.redhat.com/errata/RHSA-2018:0816
CVE: CVE-2018-5749
Published: 2018-01-23
Description: install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the (1) database_server, (2) database_user, (3) database_password, or (4) database_name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.rastating.com/minecraft-servers-list-unauthenticated-shell-upload/; https://www.rastating.com/minecraft-servers-list-unauthenticated-shell-upload/
CVE: CVE-2017-15531
Published: 2018-01-23
Description: Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users.  A remote attacker can use brute force search to guess a user password and gain access to Reporter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/102751; https://www.symantec.com/security-center/network-protection-security-advisories/SA158; http://www.securityfocus.com/bid/102751
CVE: CVE-2017-12632
Published: 2018-01-23
Description: A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://nifi.apache.org/security.html#CVE-2017-12632; https://nifi.apache.org/security.html#CVE-2017-12632
CVE: CVE-2017-15697
Published: 2018-01-23
Description: A malicious X-ProxyContextPath or X-Forwarded-Context header containing external resources or embedded code could cause remote code execution. The fix to properly handle these headers was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://nifi.apache.org/security.html#CVE-2017-15697; https://nifi.apache.org/security.html#CVE-2017-15697
CVE: CVE-2017-18075
Published: 2018-01-24
Description: crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d76c68109f37cb85b243a1cf0f40313afd2bae68; http://www.securityfocus.com/bid/102813; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2018-5969
Published: 2018-01-24
Description: Cross Site Request Forgery (CSRF) exists in Photography CMS 1.0 via clients/resources/ajax/ajax_new_admin.php, as demonstrated by adding an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/43867/; https://www.exploit-db.com/exploits/43867/
CVE: CVE-2018-5972
Published: 2018-01-24
Description: SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43868/; https://www.exploit-db.com/exploits/43868/
CVE: CVE-2018-5976
Published: 2018-01-24
Description: Cross Site Request Forgery (CSRF) exists in RSVP Invitation Online 1.0 via function/account.php, as demonstrated by modifying the admin password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/43862/; https://www.exploit-db.com/exploits/43862/
CVE: CVE-2018-5977
Published: 2018-01-24
Description: SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&price_type=range&price= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43861/; https://www.exploit-db.com/exploits/43861/
CVE: CVE-2018-5978
Published: 2018-01-24
Description: SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43865/; https://www.exploit-db.com/exploits/43865/
CVE: CVE-2018-5979
Published: 2018-01-24
Description: SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43864/; https://www.exploit-db.com/exploits/43864/
CVE: CVE-2018-5984
Published: 2018-01-24
Description: SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43866/; https://www.exploit-db.com/exploits/43866/
CVE: CVE-2018-5985
Published: 2018-01-24
Description: SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43860/; https://www.exploit-db.com/exploits/43860/
CVE: CVE-2018-5986
Published: 2018-01-24
Description: SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43863/; https://www.exploit-db.com/exploits/43863/
CVE: CVE-2018-5988
Published: 2018-01-24
Description: SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43869/; https://www.exploit-db.com/exploits/43869/
CVE: CVE-2018-6184
Published: 2018-01-24
Description: ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/zeit/next.js/releases/tag/4.2.3; https://github.com/zeit/next.js/releases/tag/4.2.3
CVE: CVE-2018-6187
Published: 2018-01-24
Description: In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/102823; https://bugs.ghostscript.com/show_bug.cgi?id=698908; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=3e30fbb7bf5efd88df431e366492356e7eb969ec
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://github.com/lajarajorge/CVE-2[PII_REDACTED]/blob/master/README.md; https://www.exploit-db.com/exploits/48044; https://github.com/lajarajorge/CVE-2[PII_REDACTED]/blob/master/README.md
CVE: CVE-2017-15718
Published: 2018-01-24
Description: The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E; https://lists.apache.org/thread.html/773c93c2d8a6a52bbe97610c2b1c2ad205b970e1b8c04fb5b2fccad6%40%3Cgeneral.hadoop.apache.org%3E
CVE: CVE-2017-1769
Published: 2018-01-24
Description: IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22011579; http://www.securityfocus.com/bid/102777; http://www.securitytracker.com/id/1040298
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=1536941; https://gerrit.ovirt.org/#/c/86635/; https://bugzilla.redhat.com/show_bug.cgi?id=1536941
CVE: CVE-2017-12176
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509214; https://cgit.freedesktop.org/xorg/xserver/commit/?id=b747da5e25be944337a9cd1415506fc06b70aa81; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12177
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509218; https://cgit.freedesktop.org/xorg/xserver/commit/?id=4ca68b878e851e2136c234f40a25008297d8d831; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12178
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509219; https://cgit.freedesktop.org/xorg/xserver/commit/?id=859b08d523307eebde7724fd1a0789c44813e821; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12179
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509220; https://cgit.freedesktop.org/xorg/xserver/commit/?id=d088e3c1286b548a58e62afdc70bb40981cdb9e8; https://security.gentoo.org/glsa/201711-05
CVE: CVE-2017-12180
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509221; https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced[PII_REDACTED]b50b3581dbd857b; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12181
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509222; https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced[PII_REDACTED]b50b3581dbd857b; https://security.gentoo.org/glsa/201711-05
CVE: CVE-2017-12182
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509223; https://cgit.freedesktop.org/xorg/xserver/commit/?id=1b1d4c04695dced[PII_REDACTED]b50b3581dbd857b; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12183
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509224; https://cgit.freedesktop.org/xorg/xserver/commit/?id=55caa8b08c84af2b50fbc936cf334a5a93dd7db5; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12184
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509225; https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12185
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509215; https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-12186
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509216; https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e; https://www.debian.org/security/2017/dsa-4000
CVE: CVE-2017-12187
Published: 2018-01-24
Description: xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-391, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1509217; https://cgit.freedesktop.org/xorg/xserver/commit/?id=cad5a1050b7184d828aef9c1dd151c3ab649d37e; https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html
CVE: CVE-2017-13696
Published: 2018-01-24
Description: A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a malicious GET request and exploit the web server component. Successful exploitation of the software will allow an attacker to gain complete access to the system with NT AUTHORITY / SYSTEM level privileges. The vulnerability lies due to improper handling and sanitization of the incoming request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/42557; https://www.exploit-db.com/exploits/42558/; https://www.exploit-db.com/exploits/42559/
CVE: CVE-2017-15135
Published: 2018-01-24
Description: It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison operations correctly during the authentication process. A remote, unauthenticated attacker could potentially use this flaw to bypass the authentication process under very rare and specific circumstances.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00033.html; http://www.securityfocus.com/bid/102811; https://access.redhat.com/errata/RHSA-2018:0414
CVE: CVE-2018-5319
Published: 2018-01-24
Description: RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.exploit-db.com/exploits/43856/; https://www.exploit-db.com/exploits/43856/
CVE: CVE-2018-5777
Published: 2018-01-24
Description: An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a misconfiguration in the TFTP server that could allow attackers to execute arbitrary commands on the TFTP server via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4; https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4
CVE: CVE-2018-5778
Published: 2018-01-24
Description: An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities are present in the legacy .ASP pages, which could allow attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4; https://docs.ipswitch.com/NM/WhatsUpGold2017Plus/01_ReleaseNotes/17PlusSP1/#link4
CVE: CVE-2018-6017
Published: 2018-01-24
Description: Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensitive information by sniffing network traffic.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-319
References: https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/; https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/; https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/
CVE: CVE-2018-6018
Published: 2018-01-24
Description: Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-319
References: https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/; https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/; https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/
CVE: CVE-2018-4834
Published: 2018-01-24
Description: A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-434
References: https://cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-824231.pdf
CVE: CVE-2018-5705
Published: 2018-01-24
Description: Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to the /search URI). Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/145940/Reservo-Image-Hosting-Script-1.5-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/43676/; http://packetstormsecurity.com/files/145940/Reservo-Image-Hosting-Script-1.5-Cross-Site-Scripting.html
CVE: CVE-2018-5759
Published: 2018-01-24
Description: jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows remote attackers to cause a denial of service (excessive recursion) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=4d45a96e57fbabf00a7378b337d0ddcace6f38c1; http://www.securityfocus.com/bid/102833; https://bugs.ghostscript.com/show_bug.cgi?id=698868