deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution. This attack appear to be exploitable via Use of another weakness in backend application to reflect ESI directives. This vulnerability appears to have been fixed in 5.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/esigate/esigate/issues/209; https://github.com/esigate/esigate/issues/209
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/basecamp/easymon/issues/26; https://github.com/basecamp/easymon/pull/25; https://github.com/basecamp/easymon/issues/26
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/80; https://github.com/domainmod/domainmod/issues/80
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin/log-user-session that can result in User to root privilege escalation. This attack appear to be exploitable via Malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://www.halfdog.net/Security/2018/LogUserSessionLocalRootPrivilegeEscalation/; https://www.halfdog.net/Security/2018/LogUserSessionLocalRootPrivilegeEscalation/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://sektioneins.de/en/advisories/advisory-012018-gnupg-wkd.html; https://sektioneins.de/en/blog/18-11-23-gnupg-wkd.html; https://usn.ubuntu.com/3853-1/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page encapsulated in single quotes. Editing the value of the cookie to r5zkh'><script>alert(1)</script>quqtl exploits an XSS vulnerability. that can result in Arbitrary code executes in victims browser.. This attack appear to be exploitable via Needs to be chained with another exploit that allows an attacker to set or modify a cookie for the phpIPAM instance's domain..
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/2338; https://github.com/phpipam/phpipam/issues/2338
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://bugs.webidsupport.com/view.php?id=647; https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f; https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must click a malicous link. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://bugs.webidsupport.com/view.php?id=648; https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f; https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection.. This attack appear to be exploitable via Rough user, exploiting the vulnerability to access information he/she does not have access to.. This vulnerability appears to have been fixed in 1.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/phpipam/phpipam/commit/856b10ca85a24c04ed8651f4e13f867ec78a353d; https://github.com/phpipam/phpipam/issues/2344; https://github.com/phpipam/phpipam/commit/856b10ca85a24c04ed8651f4e13f867ec78a353d
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerability in /app/admin/users/print-user.php that can result in Execute code in the victims browser. This attack appear to be exploitable via Attacker change theme parameter in user settings. Admin(Victim) views user in admin-panel and gets exploited.. This vulnerability appears to have been fixed in 1.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/552fbb0fc7ecb84bda4a131b4f290a3de9980040; https://github.com/phpipam/phpipam/issues/2326; https://github.com/phpipam/phpipam/commit/552fbb0fc7ecb84bda4a131b4f290a3de9980040
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in "id_utente_mod" parameter in gestione_utenti.php file that can result in An attacker can dump all the database records of backend webserver. This attack appear to be exploitable via the attack can be done by anyone via specially crafted sql query passed to the "id_utente_mod=1" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/45976; https://www.exploit-db.com/exploits/45976
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/OpenKMIP/PyKMIP/issues/430; https://github.com/OpenKMIP/PyKMIP/issues/430
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1665601; https://github.com/FasterXML/jackson-modules-java8/issues/90; https://github.com/FasterXML/jackson-modules-java8/pull/87
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a three backtick wrapped payload with a character in front: L: "```<script>alert();</script>```". NOTE: This has been argued as a non-issue (see references) since it is not the parser's job to sanitize malicious code from a parsed document
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/cebe/markdown/issues/166; https://github.com/cebe/markdown/issues/166#issuecomment-508230493; https://github.com/cebe/markdown/issues/166
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/BOINC/boinc/issues/2907; https://github.com/BOINC/boinc/issues/2907
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca[PII_REDACTED]60574eabfd7f18f.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html; http://www.securityfocus.com/bid/106304
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: libarchive version commit[PII_REDACTED]49219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415: Double Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c, parse_codes(), realloc(rar->lzss.window, new_size) with new_size = 0 that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: libarchive version commit[PII_REDACTED]49219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416: Use After Free vulnerability in RAR decoder - libarchive/archive_read_support_format_rar.c that can result in Crash/DoS - it is unknown if RCE is possible. This attack appear to be exploitable via the victim must open a specially crafted RAR archive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00015.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can result in Crash/DoS. This attack appear to be exploitable via the victim must open a specially crafted archive file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://www.securityfocus.com/bid/106324; https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: libarchive version commit[PII_REDACTED]c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that can result in DoS - quasi-infinite run time and disk usage from tiny file. This attack appear to be exploitable via the victim must open a specially crafted WARC file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00055.html; http://www.securityfocus.com/bid/106324; https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web application request by a self-registered user. This vulnerability appears to have been fixed in 4.1 and later.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://appcheck-ng.com/advisory-remote-code-execution-traccar-server/; https://appcheck-ng.com/advisory-remote-code-execution-traccar-server/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://bugs.webidsupport.com/view.php?id=646; https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7f; https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txt
CVE: CVE-2018-19233
Published: 2018-12-20
Description: COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html; http://seclists.org/fulldisclosure/2018/Nov/55; https://seclists.org/bugtraq/2018/Nov/37
CVE: CVE-2018-19234
Published: 2018-12-20
Description: The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: http://packetstormsecurity.com/files/150427/Miss-Marple-Enterprise-Edition-File-Upload-Hardcoded-AES-Key.html; http://seclists.org/fulldisclosure/2018/Nov/55; https://seclists.org/bugtraq/2018/Nov/37
CVE: CVE-2018-15329
Published: 2018-12-20
Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862
References: https://support.f5.com/csp/article/K61620494; https://support.f5.com/csp/article/K61620494
CVE: CVE-2018-15330
Published: 2018-12-20
Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will experience a fatal error and may cause the Traffic Management Microkernel (TMM) to produce a core file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K23328310; https://support.f5.com/csp/article/K23328310
CVE: CVE-2018-15331
Published: 2018-12-20
Description: On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.f5.com/csp/article/K54843525; https://support.f5.com/csp/article/K54843525
CVE: CVE-2018-8888
Published: 2018-12-20
Description: A stored cross-site scripting (XSS) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000054162; http://support.blackberry.com/kb/articleDetail?articleNumber=000054162
CVE: CVE-2018-8891
Published: 2018-12-20
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000054162; http://support.blackberry.com/kb/articleDetail?articleNumber=000054162
CVE: CVE-2018-8892
Published: 2018-12-20
Description: A cross-site request forgery (CSRF) vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000054162; http://support.blackberry.com/kb/articleDetail?articleNumber=000054162
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a value to be sent as a cookie. This vulnerability appears to have been fixed in >= 1.3.5 or ~> 1.2.5 or ~> 1.1.9 or ~> 1.0.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/dependabot/elixir-security-advisories/blob/master/packages/plug/2017-04-17.yml; https://github.com/elixir-plug/plug/commit/8857f8ab4acf9b9c22e80480dae2636692f5f573; https://github.com/dependabot/elixir-security-advisories/blob/master/packages/plug/2017-04-17.yml
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code -- web/reset/index.php, line 51 that can result in Possible to determine password reset codes, attacker is able to change administrator password. This attack appear to be exploitable via Unauthenticated network connectivity. This vulnerability appears to have been fixed in After commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- release version 0.9.8-19.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-203
References: https://github.com/serghey-rodin/vesta/commit/5f68c1b634abec2d5a4f83156bfd223d3a792f77#diff-4d7863e8c24a5e6102073acc2fb0f227; https://github.com/serghey-rodin/vesta/commit/5f68c1b634abec2d5a4f83156bfd223d3a792f77#diff-4d7863e8c24a5e6102073acc2fb0f227
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in function pgp_exec() phkp.php:98 that can result in It is possible to manipulate gpg-keys or execute commands remotely. This attack appear to be exploitable via HKP-Api: /pks/lookup?search.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://tech.feedyourhead.at/content/full-disclosure-remote-command-execution-in-phkp; https://tech.feedyourhead.at/content/full-disclosure-remote-command-execution-in-phkp
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This attack appear to be exploitable via a crafted nasm input file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392514; https://bugzilla.nasm.us/show_bug.cgi?id=3392514
CVE: CVE-2018-1160
Published: 2018-12-20
Description: Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787, CWE-787
References: http://netatalk.sourceforge.net/3.1/ReleaseNotes3.1.12.html; http://packetstormsecurity.com/files/152440/QNAP-Netatalk-Authentication-Bypass.html; http://www.securityfocus.com/bid/106301
CVE: CVE-2018-15720
Published: 2018-12-20
Description: Logitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server that gave remote users access to the local API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://www.tenable.com/security/research/tra-2018-47; https://www.tenable.com/security/research/tra-2018-47
CVE: CVE-2018-15721
Published: 2018-12-20
Description: The XMPP server in Logitech Harmony Hub before version 4.15.206 is vulnerable to authentication bypass via a crafted XMPP request. Remote attackers can use this vulnerability to gain access to the local API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.tenable.com/security/research/tra-2018-47; https://www.tenable.com/security/research/tra-2018-47
CVE: CVE-2018-15722
Published: 2018-12-20
Description: The Logitech Harmony Hub before version 4.15.206 is vulnerable to OS command injection via the time update request. A remote server or man in the middle can inject OS commands with a properly formatted response.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.tenable.com/security/research/tra-2018-47; https://www.tenable.com/security/research/tra-2018-47
CVE: CVE-2018-15723
Published: 2018-12-20
Description: The Logitech Harmony Hub before version 4.15.206 is vulnerable to application level command injection via crafted HTTP request. An unauthenticated remote attacker can leverage this vulnerability to execute application defined commands (e.g. harmony.system?systeminfo).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://www.tenable.com/security/research/tra-2018-47; https://www.tenable.com/security/research/tra-2018-47
CVE: CVE-2018-18871
Published: 2018-12-20
Description: Missing password verification in the web interface on Gigaset Maxwell Basic VoIP phones with firmware 2.22.7 would allow a remote attacker (in the same network as the device) to change the admin password without authentication (and without knowing the original password).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Gigaset_Maxwell.pdf?_=[PII_REDACTED]; https://www.sit.fraunhofer.de/fileadmin/dokumente/CVE/Advisory_Gigaset_Maxwell.pdf?_=[PII_REDACTED]