deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17042
Published: 2018-09-14
Description: An issue has been found in dbf2txt through 2012-07-19. It is a infinite loop.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/bcsanches/dbf2txt/issues/2; https://github.com/grandnew/software-vulnerabilities/tree/master/dbf2txt#infinite-loop; https://github.com/bcsanches/dbf2txt/issues/2
CVE: CVE-2018-17043
Published: 2018-09-14
Description: An issue has been found in doc2txt through 2014-03-19. It is a heap-based buffer overflow in the function Storage::init in Storage.cpp, called from parse_doc in parse_doc.cpp.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/grandnew/software-vulnerabilities/tree/master/doc2txt#heap-buffer-overflow-in-function-storageinit; https://github.com/tsfn/doc2txt/issues/1; https://github.com/grandnew/software-vulnerabilities/tree/master/doc2txt#heap-buffer-overflow-in-function-storageinit
CVE: CVE-2018-17044
Published: 2018-09-14
Description: In YzmCMS 5.1, stored XSS exists via the admin/system_manage/user_config_add.html title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/3; https://github.com/yzmcms/yzmcms/issues/3
CVE: CVE-2018-17045
Published: 2018-09-14
Description: An issue was discovered in CMS MaeloStore V.1.5.0. There is a CSRF vulnerability that can change the administrator password via admin/modul/users/aksi_users.php?act=update.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/maelosoki/MaeloStore/issues/1; https://github.com/maelosoki/MaeloStore/issues/1
CVE: CVE-2018-17046
Published: 2018-09-14
Description: translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/magic-FE/translate-man/issues/49; https://github.com/magic-FE/translate-man/issues/49
CVE: CVE-2018-17049
Published: 2018-09-14
Description: CQU-LANKERS through 2017-11-02 has XSS via the public/api.php callback parameter in an uploadpic action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TREYWANGCQU/LANKERS/issues/1; https://github.com/TREYWANGCQU/LANKERS/issues/1
CVE: CVE-2018-17051
Published: 2018-09-14
Description: K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/adilinden/cisco-config-manager/issues/3; https://github.com/adilinden/cisco-config-manager/issues/3
CVE: CVE-2018-0718
Published: 2018-09-14
Description: Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.qnap.com/zh-tw/security-advisory/nas-201809-14; https://www.qnap.com/zh-tw/security-advisory/nas-201809-14
CVE: CVE-2018-1719
Published: 2018-09-14
Description: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS protocol. A remote attacker could exploit this vulnerability to perform man-in-the-middle attacks. IBM X-Force ID: 147292.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securitytracker.com/id/1041718; https://exchange.xforce.ibmcloud.com/vulnerabilities/147292; https://www.ibm.com/support/docview.wss?uid=ibm10718837
CVE: CVE-2018-1791
Published: 2018-09-14
Description: IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/148946; https://www.ibm.com/support/docview.wss?uid=ibm10731207; https://exchange.xforce.ibmcloud.com/vulnerabilities/148946
CVE: CVE-2018-14638
Published: 2018-09-14
Description: A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-415
References: https://access.redhat.com/errata/RHSA-2018:2757; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14638; https://pagure.io/389-ds-base/c/78fc627accacfa4061ce48977e22301f81ea8d73
CVE: CVE-2018-11058
Published: 2018-09-14
Description: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2018/Aug/46; http://www.securityfocus.com/bid/108106; https://www.oracle.com/security-alerts/cpuapr2020.html
CVE: CVE-2018-11087
Published: 2018-09-14
Description: Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://pivotal.io/security/cve-2018-11087; https://pivotal.io/security/cve-2018-11087
CVE: CVE-2018-17057
Published: 2018-09-14
Description: An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/152200/TCPDF-6.2.19-Deserialization-Remote-Code-Execution.html; http://packetstormsecurity.com/files/152360/LimeSurvey-Deserialization-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2019/Mar/36
CVE: CVE-2017-16639
Published: 2018-09-14
Description: Tor Browser on Windows before 8.0 allows remote attackers to bypass the intended anonymity feature and discover a client IP address, a different vulnerability than CVE-2017-16541. User interaction is required to trigger this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/149351/Tor-Browser-SMB-Deanonymization-Information-Disclosure.html; http://www.securityfocus.com/bid/105346; https://seclists.org/bugtraq/2018/Sep/29
CVE: CVE-2018-10763
Published: 2018-09-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149324/SynaMan-4.0-Build-1488-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45386/; http://packetstormsecurity.com/files/149324/SynaMan-4.0-Build-1488-Cross-Site-Scripting.html
CVE: CVE-2018-10814
Published: 2018-09-14
Description: Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html; https://www.exploit-db.com/exploits/45387/; http://packetstormsecurity.com/files/149326/SynaMan-40-Build-1488-SMTP-Credential-Disclosure.html
CVE: CVE-2018-12086
Published: 2018-09-14
Description: Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/105538; http://www.securitytracker.com/id/1041909
CVE: CVE-2018-12585
Published: 2018-09-14
Description: An XXE vulnerability in the OPC UA Java and .NET Legacy Stack can allow remote attackers to trigger a denial of service.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/105538; https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-12585.pdf; http://www.securityfocus.com/bid/105538
CVE: CVE-2018-16242
Published: 2018-09-14
Description: oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-294
References: https://seclists.org/bugtraq/2018/Sep/30; https://seclists.org/bugtraq/2018/Sep/30
CVE: CVE-2018-16286
Published: 2018-09-14
Description: LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html; http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
CVE: CVE-2018-16287
Published: 2018-09-14
Description: LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html; http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
CVE: CVE-2018-16288
Published: 2018-09-14
Description: LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html; https://www.exploit-db.com/exploits/45440/; http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
CVE: CVE-2018-16706
Published: 2018-09-14
Description: LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html; http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html
CVE: CVE-2018-17061
Published: 2018-09-15
Description: BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40Mthirup/hacking-your-own-antivirus-for-fun-and-profit-safe-browsing-gone-wrong-365db9d1d3f7; https://www.bullguard.com/about/release-notes; https://medium.com/%40Mthirup/hacking-your-own-antivirus-for-fun-and-profit-safe-browsing-gone-wrong-365db9d1d3f7
CVE: CVE-2018-17063
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWithHost route. This could lead to command injection via shell metacharacters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_3; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_3
CVE: CVE-2018-17064
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_2; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_2
CVE: CVE-2018-17065
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/stack_overflow_1; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/stack_overflow_1
CVE: CVE-2018-17066
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_0; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_0
CVE: CVE-2018-17067
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/stack_overflow_0; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/stack_overflow_0
CVE: CVE-2018-17068
Published: 2018-09-15
Description: An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command injection via shell metacharacters in the sendNum parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_1; https://github.com/PAGalaxyLab/VulInfo/tree/master/D-Link/DIR-816/cmd_injection_1
CVE: CVE-2018-17069
Published: 2018-09-15
Description: An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/unlcms/UNL-CMS/issues/941; https://github.com/unlcms/UNL-CMS/issues/941
CVE: CVE-2018-17070
Published: 2018-09-15
Description: An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/unlcms/UNL-CMS/issues/941; https://github.com/unlcms/UNL-CMS/issues/941
CVE: CVE-2018-16554
Published: 2018-09-16
Description: The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAG_GPS_ALT handling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908176; https://lists.debian.org/debian-lts-announce/2019/12/msg00037.html; https://nimo-zhang.github.io/2018/09/07/bug-analysis-1/#more
CVE: CVE-2018-17072
Published: 2018-09-16
Description: JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/tunnuz/json/issues/11; https://github.com/tunnuz/json/issues/11
CVE: CVE-2018-17073
Published: 2018-09-16
Description: wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/wernsey/bitmap/issues/1; https://github.com/wernsey/bitmap/issues/1
CVE: CVE-2018-17074
Published: 2018-09-16
Description: The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://hackerone.com/reports/22142; https://plugins.trac.wordpress.org/browser/wordpress-feed-statistics/trunk/feed-statistics.php?rev=960868; https://wordpress.org/plugins/wordpress-feed-statistics/#developers
CVE: CVE-2018-17075
Published: 2018-09-16
Description: The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>. This is related to HTMLTreeBuilder.cpp in WebKit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugs.chromium.org/p/chromium/issues/detail?id=829668; https://github.com/golang/go/issues/27016; https://github.com/golang/net/commit/aaf60122140d3fcf75376d319f[PII_REDACTED]eb50
CVE: CVE-2018-17076
Published: 2018-09-16
Description: GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/logological/gpp/issues/26; https://github.com/logological/gpp/issues/26
CVE: CVE-2018-17077
Published: 2018-09-16
Description: An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wacj1425/yiqicms/issues/1; https://github.com/wacj1425/yiqicms/issues/1
CVE: CVE-2018-17082
Published: 2018-09-16
Description: The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php; https://access.redhat.com/errata/RHSA-2019:2519
CVE: CVE-2018-17062
Published: 2018-09-16
Description: An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://secwk.blogspot.com/2018/09/seacms-664-xss-vulnerability.html; https://secwk.blogspot.com/2018/09/seacms-664-xss-vulnerability.html
CVE: CVE-2018-17085
Published: 2018-09-16
Description: An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters: dataTypeCN dataMode dataModeStr.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://secwk.blogspot.com/2018/09/otcms-361-reflected-xss-usersphp.html; http://secwk.blogspot.com/2018/09/otcms-361-reflected-xss-usersphp.html
CVE: CVE-2018-17086
Published: 2018-09-16
Description: An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters: fieldName fieldName2 tabName.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://secwk.blogspot.com/2018/09/otcms-361-reflected-xss-shareswitchphp.html; http://secwk.blogspot.com/2018/09/otcms-361-reflected-xss-shareswitchphp.html
CVE: CVE-2018-17088
Published: 2018-09-16
Description: The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. This gpsinfo.c vulnerability is unrelated to the CVE-2018-16554 gpsinfo.c vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907925; https://lists.debian.org/debian-lts-announce/2019/12/msg00037.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907925
CVE: CVE-2018-17090
Published: 2018-09-16
Description: An issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php are vulnerable to stored XSS that can be triggered by closing <textarea> followed by <script></script> tags.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.safecomp.com/blog/donlinkage.html; http://www.safecomp.com/blog/donlinkage.html
CVE: CVE-2018-17091
Published: 2018-09-16
Description: An issue was discovered in DonLinkage 6.6.8. It allows remote attackers to obtain potentially sensitive information via a direct request for files/temporary.txt.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200
References: http://www.safecomp.com/blog/donlinkage.html; http://www.safecomp.com/blog/donlinkage.html
CVE: CVE-2018-17092
Published: 2018-09-16
Description: An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: http://www.safecomp.com/blog/donlinkage.html; http://www.safecomp.com/blog/donlinkage.html
CVE: CVE-2018-17093
Published: 2018-09-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11125. Reason: This candidate is a duplicate of CVE-2017-11125. Notes: All CVE users should reference CVE-2017-11125 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-17094
Published: 2018-09-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11124. Reason: This candidate is a duplicate of CVE-2017-11124. Notes: All CVE users should reference CVE-2017-11124 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-17095
Published: 2018-09-16
Description: An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/mpruett/audiofile/issues/50; https://github.com/mpruett/audiofile/issues/51; https://usn.ubuntu.com/3800-1/
CVE: CVE-2018-17096
Published: 2018-09-16
Description: The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03; https://gitlab.com/soundtouch/soundtouch/issues/14; https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03
CVE: CVE-2018-17097
Published: 2018-09-16
Description: The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03; https://gitlab.com/soundtouch/soundtouch/issues/14; https://github.com/TeamSeri0us/pocs/tree/master/soundtouch/2018_09_03
CVE: CVE-2018-17098
Published: 2018-09-16
Description: The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/2018_09_03; https://gitlab.com/soundtouch/soundtouch/issues/14; https://github.com/TeamSeri0us/pocs/blob/master/soundtouch/2018_09_03
CVE: CVE-2018-17100
Published: 2018-09-16
Description: An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://bugzilla.maptools.org/show_bug.cgi?id=2810; https://access.redhat.com/errata/RHSA-2019:2053; https://gitlab.com/libtiff/libtiff/merge_requests/33/diffs?commit_id=6da1fb3f64d43be37e640efbec60400d1f1ac39e