deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19557
Published: 2018-11-26
Description: An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/assnr/arcms/issues/1; https://github.com/assnr/arcms/issues/1
CVE: CVE-2018-19558
Published: 2018-11-26
Description: An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/assnr/arcms/issues/1; https://github.com/assnr/arcms/issues/1
CVE: CVE-2018-19559
Published: 2018-11-26
Description: CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/CuppaCMS/CuppaCMS/issues/5; https://github.com/CuppaCMS/CuppaCMS/issues/5
CVE: CVE-2018-19560
Published: 2018-11-26
Description: BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/bagesoft/bagecms/issues/4; https://github.com/bagesoft/bagecms/issues/4
CVE: CVE-2018-19561
Published: 2018-11-26
Description: sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/chenfeizhou/sikcms-v1.1/issues/1; https://github.com/chenfeizhou/sikcms-v1.1/issues/1
CVE: CVE-2018-19562
Published: 2018-11-26
Description: An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.iwantacve.cn/index.php/archives/87/; http://www.iwantacve.cn/index.php/archives/87/
CVE: CVE-2017-1418
Published: 2018-11-26
Description: IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit this vulnerability to modify or delete these files with an unknown impact. IBM X-Force ID: 127406.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-275
References: http://www.ibm.com/support/docview.wss?uid=ibm10735181; https://exchange.xforce.ibmcloud.com/vulnerabilities/127406; http://www.ibm.com/support/docview.wss?uid=ibm10735181
CVE: CVE-2018-1905
Published: 2018-11-26
Description: IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152534.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/106030; https://exchange.xforce.ibmcloud.com/vulnerabilities/152534; https://www.ibm.com/support/docview.wss?uid=ibm10738721
CVE: CVE-2018-16854
Published: 2018-11-26
Description: A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-63183; http://www.securityfocus.com/bid/106017; http://www.securitytracker.com/id/1042154
CVE: CVE-2018-19564
Published: 2018-11-26
Description: Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters (_ikcf_client and _ikcf_position and _ikcf_other) have Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/45900/; https://www.exploit-db.com/exploits/45900/
CVE: CVE-2018-14646
Published: 2018-11-26
Description: The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/errata/RHSA-2018:3651; https://access.redhat.com/errata/RHSA-2018:3666; https://access.redhat.com/errata/RHSA-2018:3843
CVE: CVE-2018-16862
Published: 2018-11-26
Description: A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/106009; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16862; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-11066
Published: 2018-11-26
Description: Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105968; http://www.securitytracker.com/id/1042153; https://seclists.org/fulldisclosure/2018/Nov/49
CVE: CVE-2018-11067
Published: 2018-11-26
Description: Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/105969; http://www.securitytracker.com/id/1042153; https://seclists.org/fulldisclosure/2018/Nov/49
CVE: CVE-2018-11076
Published: 2018-11-26
Description: Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105972; http://www.securitytracker.com/id/1042153; https://seclists.org/fulldisclosure/2018/Nov/50
CVE: CVE-2018-11077
Published: 2018-11-26
Description: 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: http://www.securityfocus.com/bid/105971; http://www.securitytracker.com/id/1042153; https://seclists.org/fulldisclosure/2018/Nov/51
CVE: CVE-2018-18807
Published: 2018-11-26
Description: The web application of the TIBCO Statistica component of TIBCO Software Inc.'s TIBCO Statistica Server contains vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO Statistica Server versions up to and including 13.4.0.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106021; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2018/11/tibco-security-advisory-november-26-2018-tibco-statistica-server
CVE: CVE-2018-19565
Published: 2018-11-26
Description: A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://seclists.org/oss-sec/2018/q4/165; https://seclists.org/oss-sec/2018/q4/171; https://seclists.org/oss-sec/2018/q4/165
CVE: CVE-2018-19566
Published: 2018-11-26
Description: A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://seclists.org/oss-sec/2018/q4/165; https://seclists.org/oss-sec/2018/q4/171; https://seclists.org/oss-sec/2018/q4/165
CVE: CVE-2018-19567
Published: 2018-11-26
Description: A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://seclists.org/oss-sec/2018/q4/165; https://seclists.org/oss-sec/2018/q4/171; https://seclists.org/oss-sec/2018/q4/165
CVE: CVE-2018-19568
Published: 2018-11-26
Description: A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://seclists.org/oss-sec/2018/q4/165; https://seclists.org/oss-sec/2018/q4/171; https://seclists.org/oss-sec/2018/q4/165
CVE: CVE-2018-13308
Published: 2018-11-26
Description: Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "User phrases button" field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13309
Published: 2018-11-26
Description: Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's password.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13310
Published: 2018-11-26
Description: Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's username.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13311
Published: 2018-11-26
Description: System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13312
Published: 2018-11-26
Description: Cross-site scripting in notice_gen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13315
Published: 2018-11-26
Description: Incorrect access control in formPasswordSetup in TOTOLINK A3002RU version 1.0.8 allows attackers to change the admin user's password via an unauthenticated POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13317
Published: 2018-11-26
Description: Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to obtain the plaintext password for the admin user by making a GET request for password.htm.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13318
Published: 2018-11-26
Description: System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13319
Published: 2018-11-26
Description: Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthenticated POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13320
Published: 2018-11-26
Description: System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the adminUsername and adminPassword parameters.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13321
Published: 2018-11-26
Description: Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13322
Published: 2018-11-26
Description: Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13323
Published: 2018-11-26
Description: Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-13324
Published: 2018-11-26
Description: Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d; https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d
CVE: CVE-2018-14663
Published: 2018-11-26
Description: An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a valid record while not seen by dnsdist. This is an issue when dnsdist is deployed as a DNS Firewall and used to filter some records that should not be received by the backend. This issue occurs only when either the 'useClientSubnet' or the experimental 'addXPF' parameters are used when declaring a new backend.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14663; https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2018-08.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14663
CVE: CVE-2018-19587
Published: 2018-11-27
Description: In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/insi2304/mongoose-fuzz; https://github.com/insi2304/mongoose-fuzz
CVE: CVE-2018-19595
Published: 2018-11-27
Description: PbootCMS V1.3.1 build 2018-11-14 allows remote attackers to execute arbitrary code via use of "eval" with mixed case, as demonstrated by an index.php/list/5/?current={pboot:if(evAl($_GET[a]))}1{/pboot:if}&a=phpinfo(); URI, because of an incorrect apps\home\controller\ParserController.php parserIfLabel protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.ttk7.cn/post-107.html; https://www.pbootcms.com/changelog.html; https://www.pbootcms.com/content/139.html
CVE: CVE-2018-19607
Published: 2018-11-27
Description: Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/561
CVE: CVE-2018-17953
Published: 2018-11-27
Description: A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=1115640; https://bugzilla.suse.com/show_bug.cgi?id=1115640
CVE: CVE-2018-11766
Published: 2018-11-27
Description: In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/106035; https://lists.apache.org/thread.html/ff37bbbe09d5f03090e2dd2c3dea95de16ef4249e731f19b8959ce4c%40%3Cgeneral.hadoop.apache.org%3E; http://www.securityfocus.com/bid/106035
CVE: CVE-2018-16089
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, a field in the header of SMM firmware update images is insufficiently sanitized, allowing post-authentication command injection on the SMM as the root user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16090
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to post-authentication command injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16091
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the SMM certificate creation and parsing logic is vulnerable to several buffer overflows.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16092
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the FFDC feature includes the collection of SMM system files containing sensitive information; notably, the SMM user account credentials and the system shadow file.
CVSS Score: 8.1 (HIGH)
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16094
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, an internal SMM function that retrieves configuration settings is prone to a buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16095
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the SMM records hashed passwords to a debug log when user authentication fails.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-532
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-16096
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the SMM web interface for changing Enclosure VPD fails to sufficiently sanitize all input for HTML tags, possibly opening a path for cross-site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-9083
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-9084
Published: 2018-11-27
Description: In System Management Module (SMM) versions prior to 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.
CVSS Score: 6.5 (MEDIUM)
References: https://support.lenovo.com/us/en/solutions/LEN-24374; https://support.lenovo.com/us/en/solutions/LEN-24374
CVE: CVE-2018-13376
Published: 2018-11-27
Description: An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially causing sensitive data to be displayed in the HTTP response.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106036; https://fortiguard.com/advisory/FG-IR-18-325; https://herolab.usd.de/wp-content/uploads/sites/4/2018/12/usd20180031.txt
CVE: CVE-2017-11078
Published: 2018-11-27
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bounds read can occur in boot.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c975b4c716511c9086f6eb885f9a3524c428a19b; https://www.codeaurora.org/security-bulletin/2018/11/05/november-2018-code-aurora-forum-security-bulletin; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=c975b4c716511c9086f6eb885f9a3524c428a19b