deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19075
Published: 2018-11-07
Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The firewall feature makes it easier for remote attackers to ascertain credentials and firewall rules because invalid credentials lead to error -2, whereas rule-based blocking leads to error -8.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19076
Published: 2018-11-07
Description: An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The FTP and RTSP services make it easier for attackers to conduct brute-force authentication attacks, because failed-authentication limits apply only to HTTP (not FTP or RTSP).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19077
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19078
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The response to an ONVIF media GetStreamUri request contains the administrator username and password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19079
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SystemReboot method allows unauthenticated reboot.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-862
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19080
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19081
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to execute arbitrary OS commands via the IPv4Address field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19082
Published: 2018-11-07
Description: An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetDNS method allows remote attackers to conduct stack-based buffer overflow attacks via the IPv4Address field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt; https://sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txt
CVE: CVE-2018-19083
Published: 2018-11-07
Description: WeCenter 3.2.0 through 3.2.2 has XSS in the views/default/question/index.tpl.html htmlspecialchars_decode function via the /?/publish/ajax/publish_question/ question_content parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.iwantacve.cn/index.php/archives/76/; http://www.iwantacve.cn/index.php/archives/76/
CVE: CVE-2018-19089
Published: 2018-11-07
Description: tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xujeff/tianti/issues/27; https://github.com/xujeff/tianti/issues/27
CVE: CVE-2018-19090
Published: 2018-11-07
Description: tianti 2.3 has stored XSS in the article management module via an article title.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xujeff/tianti/issues/27; https://github.com/xujeff/tianti/issues/27
CVE: CVE-2018-19091
Published: 2018-11-07
Description: tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/xujeff/tianti/issues/27; https://github.com/xujeff/tianti/issues/27
CVE: CVE-2018-19092
Published: 2018-11-07
Description: An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/[PII_REDACTED]/page/1.html URI. NOTE: this does not obtain a user's cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/yzmcms/yzmcms/issues/7; https://github.com/yzmcms/yzmcms/issues/7
CVE: CVE-2018-19093
Published: 2018-11-07
Description: An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/client_control.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the client_example_control program
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-controlobjectclient_setcommandterminationhandler; https://github.com/mz-automation/libiec61850/issues/84; https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-controlobjectclient_setcommandterminationhandler
CVE: CVE-2018-16149
Published: 2018-11-07
Description: In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in the ASN.1 structure. Consequently, when small public exponents are being used, a remote attacker can generate purposefully crafted signatures (and put them on X.509 certificates) to induce illegal memory access and crash the verifier.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c; https://sourceforge.net/p/axtls/mailman/message/36459928/; https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c
CVE: CVE-2018-16150
Published: 2018-11-07
Description: In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the hash value. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is a variant of CVE-2006-4340.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c; https://sourceforge.net/p/axtls/mailman/message/36459928/; https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c
CVE: CVE-2018-16253
Published: 2018-11-07
Description: In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is an even more permissive variant of CVE-2006-4790 and CVE-2014-1568.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c; https://sourceforge.net/p/axtls/mailman/message/36459928/; https://github.com/igrr/axtls-8266/commit/5efe2947ab45e81d84b5f707c51d1c64be52f36c
CVE: CVE-2018-19104
Published: 2018-11-08
Description: In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/bagesoft/bagecms/issues/3; https://github.com/bagesoft/bagecms/issues/3
CVE: CVE-2018-19105
Published: 2018-11-08
Description: LibreCAD 2.1.3 allows remote attackers to cause a denial of service (0x89C04589 write access violation and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://code610.blogspot.com/2018/11/crashing-librecad-213.html; https://lists.debian.org/debian-lts-announce/2019/05/msg00005.html; https://code610.blogspot.com/2018/11/crashing-librecad-213.html
CVE: CVE-2018-19107
Published: 2018-11-08
Description: In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-190
References: https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/427; https://github.com/Exiv2/exiv2/pull/518
CVE: CVE-2018-19108
Published: 2018-11-08
Description: In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/426
CVE: CVE-2018-19109
Published: 2018-11-08
Description: tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column.
CVSS Score: 8.8 (HIGH)
CWE: CWE-425
References: https://github.com/xujeff/tianti/issues/29; https://github.com/xujeff/tianti/issues/29
CVE: CVE-2018-19110
Published: 2018-11-08
Description: The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/xujeff/tianti/issues/29; https://github.com/xujeff/tianti/issues/29
CVE: CVE-2018-19111
Published: 2018-11-08
Description: The Google Cardboard application 1.8 for Android and 1.2 for iOS sends potentially private cleartext information to the Unity 3D Stats web site, as demonstrated by device make, model, and OS.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://www.info-sec.ca/advisories/Google-Cardboard.html; https://www.info-sec.ca/advisories/Google-Cardboard.html
CVE: CVE-2018-11777
Published: 2018-11-08
Description: In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/105886; https://lists.apache.org/thread.html/963c8e2516405c9b532b4add16c03b2c5db621e0c83e80f45049cbbb%40%3Cdev.hive.apache.org%3E; http://www.securityfocus.com/bid/105886
CVE: CVE-2018-1314
Published: 2018-11-08
Description: In Apache Hive 2.3.3, 3.1.0 and earlier, Hive "EXPLAIN" operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do "EXPLAIN" on arbitrary table or view and expose table metadata and statistics.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/105884; https://lists.apache.org/thread.html/3da47dbcbf09697387f29d2f1aed970523b6b334d93afd3cced23727%40%3Cdev.hive.apache.org%3E; http://www.securityfocus.com/bid/105884
CVE: CVE-2018-6433
Published: 2018-11-08
Description: A vulnerability in the secryptocfg export command of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to bypass the export file access restrictions and initiate a file copy from the source to a remote system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-728; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-728
CVE: CVE-2018-6434
Published: 2018-11-08
Description: A vulnerability in the web management interface of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow attackers to intercept or manipulate a user's session ID.
CVSS Score: 7.5 (HIGH)
CWE: CWE-384
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-736; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-736
CVE: CVE-2018-6435
Published: 2018-11-08
Description: A Vulnerability in the secryptocfg command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, and gain root access.
CVSS Score: 7.8 (HIGH)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-729; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-729
CVE: CVE-2018-6441
Published: 2018-11-08
Description: A vulnerability in Secure Shell implementation of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to provide arbitrary environment variables, and bypass the restricted configuration shell.
CVSS Score: 7.8 (HIGH)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-734; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-734
CVE: CVE-2018-6442
Published: 2018-11-08
Description: A vulnerability in the Brocade Webtools firmware update section of Brocade Fabric OS before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote authenticated attackers to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-735; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-735
CVE: CVE-2018-0284
Published: 2018-11-08
Description: A vulnerability in the local status page functionality of the Cisco Meraki MR, MS, MX, Z1, and Z3 product lines could allow an authenticated, remote attacker to modify device configuration files. The vulnerability occurs when handling requests to the local status page. An exploit could allow the attacker to establish an interactive session to the device with elevated privileges. The attacker could then use the elevated privileges to further compromise the device or obtain additional configuration data from the device that is being exploited.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/105878; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-meraki; http://www.securityfocus.com/bid/105878
CVE: CVE-2018-15381
Published: 2018-11-08
Description: A Java deserialization vulnerability in Cisco Unity Express (CUE) could allow an unauthenticated, remote attacker to execute arbitrary shell commands with the privileges of the root user. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a malicious serialized Java object to the listening Java Remote Method Invocation (RMI) service. A successful exploit could allow the attacker to execute arbitrary commands on the device with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://www.securityfocus.com/bid/105876; http://www.securitytracker.com/id/1042130; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-cue
CVE: CVE-2018-15393
Published: 2018-11-08
Description: A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/105858; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-sma-xss; http://www.securityfocus.com/bid/105858
CVE: CVE-2018-15394
Published: 2018-11-08
Description: A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system configuration. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. An exploit could allow the attacker to gain unauthenticated access, resulting in elevated privileges in the SMC.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/105853; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-smc-auth-bypass; http://www.securityfocus.com/bid/105853
CVE: CVE-2018-15437
Published: 2018-11-08
Description: A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow executable files to be launched on the system without being analyzed for threats. The vulnerability is due to improper process resource handling. An attacker could exploit this vulnerability by gaining local access to a system running Microsoft Windows and protected by Cisco Immunet or Cisco AMP for Endpoints and executing a malicious file. A successful exploit could allow the attacker to prevent the scanning services from functioning properly and ultimately prevent the system from being protected from further intrusion.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/105867; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-imm-dos; https://www.exploit-db.com/exploits/45829/
CVE: CVE-2018-15439
Published: 2018-11-08
Description: A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/105873; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-sbsw-privacc; http://www.securityfocus.com/bid/105873
CVE: CVE-2018-15443
Published: 2018-11-08
Description: A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to incorrect TCP retransmission handling. An attacker could exploit this vulnerability by sending a crafted TCP connection request through an affected device. A successful exploit could allow the attacker to bypass configured IPS rules and allow uninspected traffic onto the network.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/105870; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-fde-tcp-bypass; http://www.securityfocus.com/bid/105870
CVE: CVE-2018-15444
Published: 2018-11-08
Description: A vulnerability in the web-based user interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by convincing a user of an affected system to import a crafted XML file with malicious entries, which could allow the attacker to read and write files within the affected application.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/105860; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-ems-xml-xxe; https://www.tenable.com/security/research/tra-2018-36
CVE: CVE-2018-15445
Published: 2018-11-08
Description: A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on a targeted device via a web browser and with the privileges of the user.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/105859; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-ems-csrf; https://www.tenable.com/security/research/tra-2018-36