deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-2282
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2283
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2284
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2285
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2286
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2287
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2288
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2289
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2290
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2291
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2292
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2293
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2294
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2295
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2296
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2297
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2298
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2299
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2300
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2301
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2302
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2303
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2304
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2305
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2306
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2307
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2308
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2309
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2310
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2311
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2312
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2313
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2314
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2315
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2316
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2317
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2318
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2319
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2320
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2321
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2322
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2323
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2324
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2325
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2326
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2327
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2328
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2329
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2330
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2331
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2332
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2333
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2334
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2335
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2336
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2337
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2338
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2339
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2340
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2341
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2342
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2343
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2344
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2345
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2346
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2347
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2348
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2349
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2350
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2351
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2352
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2353
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2354
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2355
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2356
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2357
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2358
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-2359
Published: 2019-01-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2018-19011
Published: 2019-01-22
Description: CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://www.securityfocus.com/bid/106654; https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01; http://www.securityfocus.com/bid/106654
CVE: CVE-2018-19013
Published: 2019-01-22
Description: An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-77, CWE-77
References: http://www.securityfocus.com/bid/106654; https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01; http://www.securityfocus.com/bid/106654
CVE: CVE-2018-19017
Published: 2019-01-22
Description: Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/106654; https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01; http://www.securityfocus.com/bid/106654
CVE: CVE-2018-19019
Published: 2019-01-22
Description: A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CVSS Score: 7.3 (HIGH)
CWE: CWE-843, CWE-704
References: http://www.securityfocus.com/bid/106654; https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01; http://www.securityfocus.com/bid/106654
CVE: CVE-2019-6260
Published: 2019-01-22
Description: The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the BMC's physical address space from the host (or from the network in unusual cases where the BMC console uart is attached to a serial concentrator). This CVE applies to the specific cases of iLPC2AHB bridge Pt I, iLPC2AHB bridge Pt II, PCIe VGA P2A bridge, DMA from/to arbitrary BMC memory via X-DMA, UART-based SoC Debug interface, LPC2AHB bridge, PCIe BMC P2A bridge, and Watchdog setup.
CVSS Score: 9.8 (CRITICAL)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-785; https://www.flamingspork.com/blog/2019/01/23/cve-2019-6260:-gaining-control-of-bmc-from-the-host-processor/
CVE: CVE-2019-6691
Published: 2019-01-23
Description: phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Veeeooo/phpwind/blob/master/README.md; https://github.com/Veeeooo/phpwind/blob/master/README.md
CVE: CVE-2018-1751
Published: 2019-01-23
Description: IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 148512.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ibm10791829; http://www.securityfocus.com/bid/106734; https://exchange.xforce.ibmcloud.com/vulnerabilities/148512
CVE: CVE-2018-2026
Published: 2019-01-23
Description: IBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to obtain a directory listing of internal product files. IBM X-Force ID: 155552.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10795536; http://www.ibm.com/support/docview.wss?uid=ibm10795544; http://www.securityfocus.com/bid/106733
CVE: CVE-2019-3584
Published: 2019-01-23
Description: Exploitation of Authentication vulnerability in MVision Endpoint in McAfee MVision Endpoint Prior to 1811 Update 1 (18.11.31.62) allows authenticated administrator users --> administrators to Remove MVision Endpoint via unspecified vectors.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/106789; https://kc.mcafee.com/corporate/index?page=content&id=SB10265; http://www.securityfocus.com/bid/106789
CVE: CVE-2019-3587
Published: 2019-01-23
Description: DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Prior to 16.0.18 allows local users to execute arbitrary code via execution from a compromised folder.
CVSS Score: 7.2 (HIGH)
CWE: CWE-426
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS102887; http://service.mcafee.com/FAQDocument.aspx?&id=TS102887
CVE: CVE-2017-15720
Published: 2019-01-23
Description: In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E; https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E
CVE: CVE-2017-17835
Published: 2019-01-23
Description: In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E; https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E
CVE: CVE-2017-17836
Published: 2019-01-23
Description: In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow, whether it be via XSS or by leaving a machine unlocked can exfiltrate all credentials from the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E; https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57%40%3Cdev.airflow.apache.org%3E