deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-09-06
Description: KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number] , /cgi-bin/koha/serials/subscription-add.pl that can result in Privilege escalation by taking control of higher privileged users browser sessions. This attack appear to be exploitable via Victims must be socially engineered to visit a vulnerable webpage containing malicious payload. This vulnerability appears to have been fixed in 17.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19086; https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19086
CVE: CVE-2018-16622
Published: 2018-09-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/doramart/DoraCMS/issues/136; https://github.com/doramart/DoraCMS/issues/136
CVE: CVE-2018-5005
Published: 2018-09-06
Description: Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105073; http://www.securitytracker.com/id/1041470; https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html
CVE: CVE-2018-5389
Published: 2018-09-06
Description: The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versions and modes of IKE could lead to cross-protocol authentication bypasses. It is well known, that the aggressive mode of IKEv1 PSK is vulnerable to offline dictionary or brute force attacks. For the main mode, however, only an online attack against PSK authentication was thought to be feasible. This vulnerability could allow an attacker to recover a weak Pre-Shared Key or enable the impersonation of a victim host or network.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-521
References: https://blogs.cisco.com/security/great-cipher-but-where-did-you-get-that-key; https://my.f5.com/manage/s/article/K42378447; https://web-in-security.blogspot.com/2018/08/practical-dictionary-attack-on-ipsec-ike.html
CVE: CVE-2018-5391
Published: 2018-09-06
Description: The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en; http://www.openwall.com/lists/oss-security/2019/06/28/2
CVE: CVE-2018-16640
Published: 2018-09-06
Description: ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/commit/76efa[PII_REDACTED]41ecf320b5a041685a6d24e0b; https://github.com/ImageMagick/ImageMagick/issues/1201; https://usn.ubuntu.com/3785-1/
CVE: CVE-2018-16641
Published: 2018-09-06
Description: ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/commit/256825d4eb33dc301496710d15cf5a7ae924088b; https://github.com/ImageMagick/ImageMagick/issues/1206; https://github.com/ImageMagick/ImageMagick/commit/256825d4eb33dc301496710d15cf5a7ae924088b
CVE: CVE-2018-16642
Published: 2018-09-06
Description: The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/ImageMagick/ImageMagick/commit/cc4ac341f29fa368da6ef01c207deaf8c61f6a2e; https://github.com/ImageMagick/ImageMagick/issues/1162; https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html
CVE: CVE-2018-16643
Published: 2018-09-06
Description: The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-252
References: https://github.com/ImageMagick/ImageMagick/commit/6b6bff054d569a77973f2140c0e86366e6168a6c; https://github.com/ImageMagick/ImageMagick/issues/1199; https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html
CVE: CVE-2018-16644
Published: 2018-09-06
Description: There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.html; https://github.com/ImageMagick/ImageMagick/commit/16916c8979c32765c542e216b31cee2671b7afe7; https://github.com/ImageMagick/ImageMagick/commit/afa878a689870c28b6994ecf3bb8dbfb2b76d135
CVE: CVE-2018-16645
Published: 2018-09-06
Description: There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/ImageMagick/ImageMagick/commit/ecb31dbad39ccdc65868d5d2a37f0f[PII_REDACTED]; https://github.com/ImageMagick/ImageMagick/issues/1268; https://lists.debian.org/debian-lts-announce/2018/10/msg00002.html
CVE: CVE-2018-12234
Published: 2018-09-06
Description: A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html; https://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html; https://www.securethy.com/2018/09/first-cve-2018-12234-reflected-XSS.html
CVE: CVE-2018-14366
Published: 2018-09-06
Description: download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-15726
Published: 2018-09-06
Description: The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Privilege Escalation Vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-78
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-15749
Published: 2018-09-06
Description: The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-134
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-15865
Published: 2018-09-06
Description: The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.
CVSS Score: 7.8 (HIGH)
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-16261
Published: 2018-09-06
Description: In Pulse Secure Pulse Desktop Client 5.3RX before 5.3R5 and 9.0R1, there is a Privilege Escalation Vulnerability with Dynamic Certificate Trust.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-16285
Published: 2018-09-06
Description: The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://risataim.blogspot.com/2018/09/xss-en-plugin-userpro-de-wordpress.html; https://wpvulndb.com/vulnerabilities/9124; https://risataim.blogspot.com/2018/09/xss-en-plugin-userpro-de-wordpress.html
CVE: CVE-2018-16310
Published: 2018-09-06
Description: Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-15907. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://buddieshub27.blogspot.com/2018/09/cve-2018-16310-technicolor-tg588v-v2.html; http://buddieshub27.blogspot.com/2018/09/cve-2018-16310-technicolor-tg588v-v2.html
CVE: CVE-2018-16517
Published: 2018-09-06
Description: asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; http://packetstormsecurity.com/files/152566/Netwide-Assembler-NASM-2.14rc15-Null-Pointer-Dereference.html
CVE: CVE-2018-16590
Published: 2018-09-06
Description: FURUNO FELCOM 250 and 500 devices use only client-side JavaScript in login.js for authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://cyberskr.com/blog/furuno-felcom.html; https://gist.github.com/CyberSKR/34a8d6be7646a4bfd4df455f9f52500f; https://cyberskr.com/blog/furuno-felcom.html
CVE: CVE-2018-16646
Published: 2018-09-06
Description: In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://access.redhat.com/errata/RHSA-2019:2022; https://bugzilla.redhat.com/show_bug.cgi?id=1622951; https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html
CVE: CVE-2018-16647
Published: 2018-09-06
Description: In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugs.ghostscript.com/show_bug.cgi?id=699686; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=351c99d8ce23bbf7099dbd52771a095f67e45a2c; https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html
CVE: CVE-2018-16648
Published: 2018-09-06
Description: In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-device.c pdf_dev_alpha array-index underflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-129
References: https://bugs.ghostscript.com/show_bug.cgi?id=699685; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=38f883fe129a5e89306252a4676eaaf4bc968824; https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html
CVE: CVE-2018-6320
Published: 2018-09-06
Description: A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an http(s) Host header received from the browser is trusted without validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43877
CVE: CVE-2018-16650
Published: 2018-09-07
Description: phpMyFAQ before 2.9.11 allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.phpmyfaq.de/security/advisory-2018-09-02; https://www.phpmyfaq.de/security/advisory-2018-09-02
CVE: CVE-2018-16651
Published: 2018-09-07
Description: The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1236
References: https://www.phpmyfaq.de/security/advisory-2018-09-02; https://www.phpmyfaq.de/security/advisory-2018-09-02
CVE: CVE-2018-16653
Published: 2018-09-07
Description: rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZBWACD/CodeAudit/blob/master/rejucms_v2.1%20%20xss1; https://github.com/ZBWACD/CodeAudit/blob/master/rejucms_v2.1%20%20xss1
CVE: CVE-2018-16654
Published: 2018-09-07
Description: Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/zurmo/zurmo/issues/441; https://bitbucket.org/zurmo/zurmo/issues/441
CVE: CVE-2018-16655
Published: 2018-09-07
Description: Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lengjibo/lengjibo.github.io/blob/master/gxlcms/index.html; https://lengjibo.github.io/gxlcms/; https://github.com/lengjibo/lengjibo.github.io/blob/master/gxlcms/index.html
CVE: CVE-2016-9040
Published: 2018-09-07
Description: An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When repeatedly exploit this will result in memory exhaustion, resulting in a full system denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0258; https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0258
CVE: CVE-2018-0623
Published: 2018-09-07
Description: Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver. 20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of msjet49.dll loaded by the vulnerable products.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN06813756/index.html; http://jvn.jp/en/jp/JVN06813756/index.html
CVE: CVE-2018-0624
Published: 2018-09-07
Description: Untrusted search path vulnerability in Multiple Yayoi 17 Series products (Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver.20.0.2 and earlier, and Yayoi Kokyaku Kanri 17 Ver.11.0.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This flaw exists within the handling of ykkapi.dll loaded by the vulnerable products.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN06813756/index.html; http://jvn.jp/en/jp/JVN06813756/index.html
CVE: CVE-2018-0642
Published: 2018-09-07
Description: Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN70246549/index.html; https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers; http://jvn.jp/en/jp/JVN70246549/index.html
CVE: CVE-2018-0643
Published: 2018-09-07
Description: Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-server) 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN37376131/index.html; https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.html; http://jvn.jp/en/jp/JVN37376131/index.html
CVE: CVE-2018-0644
Published: 2018-09-07
Description: Buffer overflow in Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 4.8.0 (panda-client2) 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA (Online Receipt Computer Advantage) 5.0.0 (panda-client2) 1:2.0.0+p48-u5jma1 and earlier allows authenticated attackers to cause denial-of-service (DoS) condition via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN37376131/index.html; https://www.orca.med.or.jp/news/vulnerability_2018-07-18-1.html; http://jvn.jp/en/jp/JVN37376131/index.html
CVE: CVE-2018-0645
Published: 2018-09-07
Description: MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://jvn.jp/en/jp/JVN62423700/index.html; http://www.tinybeans.net/blog/2015/06/26-230919.html; https://bit-part.net/news/2018/07/mtappjquery-20180717.html
CVE: CVE-2018-0647
Published: 2018-09-07
Description: Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN71329812/index.html; https://www.asus.com/us/Networking/WL330NUL/HelpDesk_BIOS/; http://jvn.jp/en/jp/JVN71329812/index.html
CVE: CVE-2018-0648
Published: 2018-09-07
Description: Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN39171169/index.html; https://go.chatwork.com/download/; http://jvn.jp/en/jp/JVN39171169/index.html
CVE: CVE-2018-0649
Published: 2018-09-07
Description: Untrusted search path vulnerability in the installers of multiple Canon IT Solutions Inc. software programs (ESET Smart Security Premium, ESET Internet Security, ESET Smart Security, ESET NOD32 Antivirus, DESlock+ Pro, and CompuSec (all programs except packaged ones)) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN41452671/index.html; https://eset-support.canon-its.jp/faq/show/10720?site_domain=default; http://jvn.jp/en/jp/JVN41452671/index.html
CVE: CVE-2018-0650
Published: 2018-09-07
Description: The LINE MUSIC for Android version 3.1.0 to versions prior to 3.6.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN16933564/index.html; https://linecorp.com/en/security/article/182; https://play.google.com/store/apps/details?id=jp.linecorp.linemusic.android&hl=en
CVE: CVE-2018-0652
Published: 2018-09-07
Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18716340/index.html; https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/; http://jvn.jp/en/jp/JVN18716340/index.html
CVE: CVE-2018-0653
Published: 2018-09-07
Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18716340/index.html; https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/; http://jvn.jp/en/jp/JVN18716340/index.html
CVE: CVE-2018-0654
Published: 2018-09-07
Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the modal for creating Wiki page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18716340/index.html; https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/; http://jvn.jp/en/jp/JVN18716340/index.html
CVE: CVE-2018-0655
Published: 2018-09-07
Description: Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the app settings section of admin page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN18716340/index.html; https://weseek.co.jp/security/2018/07/31/growi-prevent-xss/; http://jvn.jp/en/jp/JVN18716340/index.html
CVE: CVE-2018-0657
Published: 2018-09-07
Description: Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE (EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, and GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier) allow an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN06372244/index.html; http://jvn.jp/en/jp/JVN06372244/index.html
CVE: CVE-2018-0658
Published: 2018-09-07
Description: Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN06372244/index.html; http://jvn.jp/en/jp/JVN06372244/index.html
CVE: CVE-2018-0659
Published: 2018-09-07
Description: Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN62121133/index.html; https://hibara.org/software/attachecase/?lang=en; http://jvn.jp/en/jp/JVN62121133/index.html