deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15767
Published: 2018-11-30
Description: The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/105912; https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities; https://www.exploit-db.com/exploits/45852/
CVE: CVE-2018-15768
Published: 2018-11-30
Description: Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/105914; https://www.dell.com/support/article/us/en/04/sln314610/dell-openmanage-network-manager-security-vulnerabilities; https://www.exploit-db.com/exploits/45852/
CVE: CVE-2018-3948
Published: 2018-11-30
Description: An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP server. A specially crafted URL can cause the server to stop responding to requests, resulting in downtime for the management portal. An attacker can send either an unauthenticated or authenticated web request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0617; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0617
CVE: CVE-2018-15835
Published: 2018-11-30
Description: Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/150284/Android-5.0-Battery-Information-Broadcast-Information-Disclosure.html; http://seclists.org/fulldisclosure/2018/Nov/35; https://wwws.nightwatchcybersecurity.com/2018/11/11/cve-2018-15835/
CVE: CVE-2018-18860
Published: 2018-11-30
Description: A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/150323/SwitchVPN-For-MacOS-2.1012.03-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Nov/38; https://www.exploit-db.com/exploits/45854/
CVE: CVE-2018-18983
Published: 2018-11-30
Description: VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) into another heap-based buffer, which may cause the program to crash or allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106071; https://ics-cert.us-cert.gov/advisories/ICSA-18-333-01; http://www.securityfocus.com/bid/106071
CVE: CVE-2018-18987
Published: 2018-11-30
Description: VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/106071; https://ics-cert.us-cert.gov/advisories/ICSA-18-333-01; http://www.securityfocus.com/bid/106071
CVE: CVE-2018-19290
Published: 2018-11-30
Description: In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a command injection attack against the PHP daemon with a crafted command, resulting in a denial of service or possibly unspecified other impact, as demonstrated by the "!calc 5 x 5" command. In versions before 3.0, modules/HELPBOT_MODULE/calc.php has the vulnerable code; in 3.0 and above, modules/HELPBOT_MODULE/HelpbotController.class.php has the vulnerable code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/150391/Budabot-4.0-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2018/Nov/44; http://packetstormsecurity.com/files/150391/Budabot-4.0-Denial-Of-Service.html
CVE: CVE-2018-16476
Published: 2018-11-30
Description: A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-502
References: https://access.redhat.com/errata/RHSA-2019:0600; https://groups.google.com/d/msg/rubyonrails-security/FL4dSdzr2zw/zjKVhF4qBAAJ; https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/
CVE: CVE-2018-16477
Published: 2018-11-30
Description: A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-disposition` and `content-type` parameters which can be used in with HTML files and have them executed inline. Additionally, if combined with other techniques such as cookie bombing and specially crafted AppCache manifests, an attacker can gain access to private signed URLs within a specific storage path. This vulnerability has been fixed in version 5.2.1.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://groups.google.com/d/msg/rubyonrails-security/3KQRnXDIuLg/mByx5KkqBAAJ; https://weblog.rubyonrails.org/2018/11/27/Rails-4-2-5-0-5-1-5-2-have-been-released/; https://groups.google.com/d/msg/rubyonrails-security/3KQRnXDIuLg/mByx5KkqBAAJ
CVE: CVE-2018-7806
Published: 2018-11-30
Description: Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes; https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
CVE: CVE-2018-7807
Published: 2018-11-30
Description: Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zip onto the server file system outside of the intended directory. This is leveraging the more commonly known ZipSlip vulnerability within Java code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0; https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
CVE: CVE-2018-7809
Published: 2018-11-30
Description: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.tenable.com/security/research/tra-2018-38; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-7810
Published: 2018-11-30
Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to craft a URL containing JavaScript that will be executed within the user's browser, potentially impacting the machine the browser is running on.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.tenable.com/security/research/tra-2018-38; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-7811
Published: 2018-11-30
Description: An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the change password function of the web server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://security.cse.iitk.ac.in/responsible-disclosure; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.tenable.com/security/research/tra-2018-38
CVE: CVE-2018-7830
Published: 2018-11-30
Description: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where a denial of service can occur for ~1 minute by sending a specially crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-113
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.tenable.com/security/research/tra-2018-38; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-7831
Published: 2018-11-30
Description: An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 allowing an attacker to send a specially crafted URL to a currently authenticated web server user to execute a password change on the web server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/; https://www.tenable.com/security/research/tra-2018-38; https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE: CVE-2018-15715
Published: 2018-11-30
Description: Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4[PII_REDACTED] and below) are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom server in order to invoke functionality in the target client. This allows the attacker to remove attendees from meetings, spoof messages from users, or hijack shared screens.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290, CWE-20
References: https://www.tenable.com/security/research/tra-2018-40; https://www.tenable.com/security/research/tra-2018-40
CVE: CVE-2018-15716
Published: 2018-11-30
Description: NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/106059; https://github.com/tenable/poc/tree/master/nuuo/nvrmini2/cve_2018_15716; https://www.exploit-db.com/exploits/45948/
CVE: CVE-2018-19784
Published: 2018-12-01
Description: The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/Athlon1600/php-proxy-app/issues/139; https://github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.md; https://github.com/Athlon1600/php-proxy-app/issues/139
CVE: CVE-2018-19785
Published: 2018-12-01
Description: PHP-Proxy through 5.1.0 has Cross-Site Scripting (XSS) via the URL field in index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Athlon1600/php-proxy-app/issues/140; https://github.com/eddietcc/CVEnotes/blob/master/PHP-Proxy/RADME.md; https://github.com/Athlon1600/php-proxy-app/issues/140
CVE: CVE-2018-3949
Published: 2018-12-01
Description: An exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted URL can cause a directory traversal, resulting in the disclosure of sensitive system files. An attacker can send either an unauthenticated or an authenticated web request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0618; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0618
CVE: CVE-2018-3950
Published: 2018-12-01
Description: An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN HWv3 FRNv1.3.0 and HWv2 FRNv1.2.3 http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0619
CVE: CVE-2018-3951
Published: 2018-12-01
Description: An exploitable remote code execution vulnerability exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. A specially crafted HTTP request can cause a buffer overflow, resulting in remote code execution on the device. An attacker can send an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0620; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0620
CVE: CVE-2018-4038
Published: 2018-12-01
Description: An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This constructor will miscalculate a length and then use it to calculate the position to write a null byte. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0711; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0711
CVE: CVE-2018-4039
Published: 2018-12-01
Description: An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0712; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0712
CVE: CVE-2018-4040
Published: 2018-12-01
Description: An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specially crafted document can cause certain RTF tokens to dereference a pointer that has been uninitialized and then write to it. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0713; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0713
CVE: CVE-2018-19787
Published: 2018-12-02
Description: An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/lxml/lxml/commit/6be1d081b49c97cfd7b3fbd934a193b668629109; https://lists.debian.org/debian-lts-announce/2018/12/msg00001.html; https://lists.debian.org/debian-lts-announce/2020/11/msg00044.html
CVE: CVE-2018-19788
Published: 2018-12-03
Description: A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2019:2046; https://access.redhat.com/errata/RHSA-2019:3232; https://bugs.debian.org/915332
CVE: CVE-2018-19791
Published: 2018-12-03
Description: The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 does not correctly handle requests for byte sequences, allowing an attacker to amplify the response size by requesting the entire response body repeatedly, as demonstrated by an HTTP Range header value beginning with the "bytes=0-,0-" substring.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/litespeedtech/openlitespeed/issues/117; https://github.com/litespeedtech/openlitespeed/issues/117
CVE: CVE-2018-19792
Published: 2018-12-03
Description: The server in LiteSpeed OpenLiteSpeed before 1.5.0 RC6 allows local users to cause a denial of service (buffer overflow) or possibly have unspecified other impact by creating a symlink through which the openlitespeed program can be invoked with a long command name (involving ../ characters), which is mishandled in the LshttpdMain::getServerRootFromExecutablePath function.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://github.com/litespeedtech/openlitespeed/issues/117; https://github.com/litespeedtech/openlitespeed/issues/117
CVE: CVE-2018-19793
Published: 2018-12-03
Description: jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.
CVSS Score: 7.2 (HIGH)
References: https://github.com/iwannay/jiacrontab/issues/28; https://github.com/iwannay/jiacrontab/issues/28
CVE: CVE-2018-19794
Published: 2018-12-03
Description: Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.internet2.edu/jira/browse/GRP-1838; https://lists.internet2.edu/sympa/arc/grouper-dev/2018-07/msg00005.html; https://spaces.at.internet2.edu/display/Grouper/v2.4+issues
CVE: CVE-2018-19795
Published: 2018-12-03
Description: ChipsBank UMPTool saves the password to the NAND with a simple substitution cipher, which allows attackers to get full access when having physical access to the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-522
References: https://www.thalpius.com/files/ChipsBank%20UMPTool%20Password%20Retrieval%20v0.1.pdf; https://www.thalpius.com/files/ChipsBank%20UMPTool%20Password%20Retrieval%20v0.1.pdf
CVE: CVE-2018-19796
Published: 2018-12-03
Description: An open redirect in the Ninja Forms plugin before 3.3.19.1 for WordPress allows Remote Attackers to redirect a user via the lib/StepProcessing/step-processing.php (aka submissions download page) redirect parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://plugins.trac.wordpress.org/changeset/1982808/ninja-forms/trunk/lib/StepProcessing/step-processing.php; https://wordpress.org/plugins/ninja-forms/#developers; https://wpvulndb.com/vulnerabilities/9154
CVE: CVE-2018-19797
Published: 2018-12-03
Description: In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-16855
Published: 2018-12-03
Description: An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855; https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855
CVE: CVE-2018-16868
Published: 2018-12-03
Description: A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-203, CWE-203
References: http://cat.eyalro.net/; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00068.html
CVE: CVE-2018-16869
Published: 2018-12-03
Description: A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-203, CWE-203
References: http://cat.eyalro.net/; http://www.securityfocus.com/bid/106092; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16869
CVE: CVE-2018-6332
Published: 2018-12-03
Description: A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-19
References: https://hhvm.com/blog/2018/03/15/hhvm-3.25.html; https://hhvm.com/blog/2018/03/15/hhvm-3.25.html
CVE: CVE-2018-1840
Published: 2018-12-03
Description: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other than global federated repository and then migrated to a newer release of WebSphere Application Server. IBM X-Force ID: 150813.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-668
References: http://www.securityfocus.com/bid/106141; https://exchange.xforce.ibmcloud.com/vulnerabilities/150813; https://www.ibm.com/support/docview.wss?uid=ibm10735767