deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-1588
Published: 2018-09-25
Description: IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143501.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/143501; https://www.ibm.com/support/docview.wss?uid=ibm10731511; https://exchange.xforce.ibmcloud.com/vulnerabilities/143501
CVE: CVE-2018-1607
Published: 2018-09-25
Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143797.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/143797; https://www.ibm.com/support/docview.wss?uid=ibm10731511; https://exchange.xforce.ibmcloud.com/vulnerabilities/143797
CVE: CVE-2018-1659
Published: 2018-09-25
Description: IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144885.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144885; https://www.ibm.com/support/docview.wss?uid=ibm10731511; https://exchange.xforce.ibmcloud.com/vulnerabilities/144885
CVE: CVE-2018-1664
Published: 2018-09-25
Description: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890.
CVSS Score: 6.2 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144890; https://www.ibm.com/support/docview.wss?uid=ibm10730509; https://exchange.xforce.ibmcloud.com/vulnerabilities/144890
CVE: CVE-2018-1669
Published: 2018-09-25
Description: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 144950.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/144950; https://www.ibm.com/support/docview.wss?uid=ibm10730489; https://exchange.xforce.ibmcloud.com/vulnerabilities/144950
CVE: CVE-2018-11763
Published: 2018-09-25
Description: In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.
CVSS Score: 5.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://www.securityfocus.com/bid/105414
CVE: CVE-2018-14634
Published: 2018-09-25
Description: An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://www.openwall.com/lists/oss-security/2021/07/20/2; http://www.securityfocus.com/bid/105407; https://access.redhat.com/errata/RHSA-2018:2748
CVE: CVE-2018-17538
Published: 2018-09-26
Description: Axon (formerly TASER International) Evidence Sync 3.15.89 is vulnerable to process injection. NOTE: the vendor's position is that this CVE is not associated with information that supports any finding of any type of vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/GitHubAssessments/CVE_Assessment_05_2018/blob/master/Evidence_Review_Report.pdf; https://github.com/GitHubAssessments/CVE_Assessment_05_2018/blob/master/Evidence_Sync_Report.pdf; https://raw.githubusercontent.com/GitHubAssessments/CVE_Assessment_05_2018/master/Evidence_Sync_Report.pdf
CVE: CVE-2018-3972
Published: 2018-09-26
Description: An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithium Luna' (v0.12.2.0-master-ffab6700) and other cryptocurrencies. A specially crafted network packet can cause a logic flaw, resulting in code execution. An attacker can send a packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.talosintelligence.com/2018/09/epee-levin-vuln.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0637; https://blog.talosintelligence.com/2018/09/epee-levin-vuln.html
CVE: CVE-2018-7907
Published: 2018-09-26
Description: Some Huawei products Agassi-L09 AGS-L09C100B257CUSTC100D001, AGS-L09C170B253CUSTC170D001, AGS-L09C199B251CUSTC199D001, AGS-L09C229B003CUSTC229D001, Agassi-W09 AGS-W09C100B257CUSTC100D001, AGS-W09C128B252CUSTC128D001, AGS-W09C170B252CUSTC170D001, AGS-W09C229B251CUSTC229D001, AGS-W09C331B003CUSTC331D001, AGS-W09C794B001CUSTC794D001, Baggio2-U01A BG2-U01C100B160CUSTC100D001, BG2-U01C170B160CUSTC170D001, BG2-U01C199B162CUSTC199D001, BG2-U01C209B160CUSTC209D001, BG2-U01C333B160CUSTC333D001, Bond-AL00C Bond-AL00CC00B201, Bond-AL10B Bond-AL10BC00B201, Bond-TL10B Bond-TL10BC01B201, Bond-TL10C Bond-TL10CC01B131, Haydn-L1JB HDN-L1JC137B068, Kobe-L09A KOB-L09C100B252CUSTC100D001, KOB-L09C209B002CUSTC209D001, KOB-L09C362B001CUSTC362D001, Kobe-L09AHN KOB-L09C233B226, Kobe-W09C KOB-W09C128B251CUSTC128D001, LelandP-L22C 8.0.0.101(C675CUSTC675D2), LelandP-L22D 8.0.0.101(C675CUSTC675D2), Rhone-AL00 Rhone-AL00C00B186, Selina-L02 Selina-L02C432B153, Stanford-L09S Stanford-L09SC432B183, Toronto-AL00 Toronto-AL00C00B223, Toronto-AL00A Toronto-AL00AC00B223, Toronto-TL10 Toronto-TL10C01B223 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the input, successful exploitation can cause sensitive information leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180919-02-smartphone-en
CVE: CVE-2018-1545
Published: 2018-09-26
Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 142649.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ibm10718013; https://exchange.xforce.ibmcloud.com/vulnerabilities/142649; http://www.ibm.com/support/docview.wss?uid=ibm10718013
CVE: CVE-2018-1550
Published: 2018-09-26
Description: IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information that would cause a denial of service to other users. IBM X-Force ID: 142696.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: http://www.ibm.com/support/docview.wss?uid=ibm10719401; https://exchange.xforce.ibmcloud.com/vulnerabilities/142696; http://www.ibm.com/support/docview.wss?uid=ibm10719401
CVE: CVE-2018-1610
Published: 2018-09-26
Description: IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143931.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10719841; https://exchange.xforce.ibmcloud.com/vulnerabilities/143931; http://www.ibm.com/support/docview.wss?uid=ibm10719841
CVE: CVE-2018-1683
Published: 2018-09-26
Description: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB communication. IBM X-Force ID: 145455.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-311
References: http://www.securitytracker.com/id/1041720; https://exchange.xforce.ibmcloud.com/vulnerabilities/145455; https://www.ibm.com/support/docview.wss?uid=ibm10716533
CVE: CVE-2018-1768
Published: 2018-09-26
Description: IBM Spectrum Protect Plus 10.1.0 and 10.1.1 could disclose sensitive information when an authorized user executes a test operation, the user id an password may be displayed in plain text within an instrumentation log file. IBM X-Force ID: 148622.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=ibm10729219; http://www.securitytracker.com/id/1041715; https://exchange.xforce.ibmcloud.com/vulnerabilities/148622
CVE: CVE-2018-1785
Published: 2018-09-26
Description: IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ibm10729873; http://www.securitytracker.com/id/1041716; https://exchange.xforce.ibmcloud.com/vulnerabilities/148870
CVE: CVE-2018-7355
Published: 2018-09-26
Description: All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scripting vulnerability. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to conduct reflected XSS or HTML injection attacks on the devices.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009483; https://www.exploit-db.com/exploits/46102/; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009483
CVE: CVE-2018-15606
Published: 2018-09-26
Description: An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.suitecrm.com/admin/releases/#anchor-7.10.8; https://docs.suitecrm.com/admin/releases/#anchor-7.10.8
CVE: CVE-2018-16672
Published: 2018-09-26
Description: An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life; https://www.exploit-db.com/exploits/45384/; https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
CVE: CVE-2018-10602
Published: 2018-09-26
Description: WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/104935; https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03; http://www.securityfocus.com/bid/104935
CVE: CVE-2018-10606
Published: 2018-09-26
Description: WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple heap-based buffer overflow vulnerabilities that can be exploited when the application processes specially crafted project files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/104935; https://ics-cert.us-cert.gov/advisories/ICSA-18-212-03; http://www.securityfocus.com/bid/104935
CVE: CVE-2018-14803
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to obtain extraneous product information, such as OS and software components, via the HTTP response header that is normally not available to the attacker, but might be useful information in an attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8842
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The Philips e-Alert communication channel is not encrypted which could therefore lead to disclosure of personal contact information and application login credentials from within the same subnet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-319, CWE-319
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8844
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8846
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is then served to other users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8848
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to an unintended actor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276, CWE-732
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8850
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a form that is not expected by the rest of the application. This would lead to parts of the unit receiving unintended input, which may result in altered control flow, arbitrary control of a resource, or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8852
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions without invalidating any existing session identifier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8854
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-8856
Published: 2018-09-26
Description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/105194; https://ics-cert.us-cert.gov/advisories/ICSA-18-242-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE: CVE-2018-14809
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01
CVE: CVE-2018-14811
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-822, CWE-476
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-14813
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-14815
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, Several out-of-bounds write vulnerabilities have been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-14817
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-191
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-14819
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-14823
Published: 2018-09-26
Description: Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/105341; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01; http://www.securityfocus.com/bid/105341
CVE: CVE-2018-17555
Published: 2018-09-26
Description: The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://misteralfa-hack.blogspot.com/2018/09/arris-tg2492lg-na-cable-modem-gateway.html; http://misteralfa-hack.blogspot.com/2018/09/arris-tg2492lg-na-cable-modem-gateway.html
CVE: CVE-2018-17556
Published: 2018-09-26
Description: MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/modxcms/revolution/issues/14094; https://github.com/modxcms/revolution/issues/14094
CVE: CVE-2017-15608
Published: 2018-09-26
Description: Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://inedo.com/blog/proget-50-beta5-released; https://inedo.myjetbrains.com/youtrack/issue/PG-1118; https://inedo.com/blog/proget-50-beta5-released
CVE: CVE-2018-15836
Published: 2018-09-26
Description: In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/xelerance/Openswan/commit/0b460be9e287fd335c8ce58129c67bf06065ef51; https://github.com/xelerance/Openswan/commit/9eaa6c2a823c1d2b58913506a15f9474bf857a3d; https://lists.openswan.org/pipermail/users/2018-August/023761.html
CVE: CVE-2018-16151
Published: 2018-09-26
Description: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data after the encoded algorithm OID during PKCS#1 v1.5 signature verification. Similar to the flaw in the same version of strongSwan regarding digestAlgorithm.parameters, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
CVE: CVE-2018-16152
Published: 2018-09-26
Description: In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the gmp plugin in strongSwan 4.x and 5.x before 5.7.0, the RSA implementation based on GMP does not reject excess data in the digestAlgorithm.parameters field during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation when only an RSA signature is used for IKEv2 authentication. This is a variant of CVE-2006-4790 and CVE-2014-1568.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00077.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00047.html
CVE: CVE-2018-16364
Published: 2018-09-26
Description: A serialization vulnerability in Zoho ManageEngine Applications Manager before build 13740 allows for remote code execution on Windows via a payload on an SMB share.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://blog.jamesotten.com/post/applications-manager-rce/; https://blog.jamesotten.com/post/applications-manager-rce/