deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14784
Published: 2018-08-10
Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The device is vulnerable to several cross-site scripting attacks, allowing a remote attacker to run arbitrary code on the device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/105053; https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02; http://www.securityfocus.com/bid/105053
CVE: CVE-2018-14785
Published: 2018-08-10
Description: NetComm Wireless G LTE Light Industrial M2M Router (NWL-25) with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548, CWE-200
References: http://www.securityfocus.com/bid/105053; https://ics-cert.us-cert.gov/advisories/ICSA-18-221-02; http://www.securityfocus.com/bid/105053
CVE: CVE-2018-11048
Published: 2018-08-10
Description: Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/Aug/5; http://www.securityfocus.com/bid/105130; http://www.securitytracker.com/id/1041417
CVE: CVE-2018-11063
Published: 2018-08-10
Description: Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary executables with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.dell.com/support/article/us/en/19/sln313398/dell-wyse-management-suite-multiple-unquoted-service-path-vulnerabilities?lang=en; https://www.dell.com/support/article/us/en/19/sln313398/dell-wyse-management-suite-multiple-unquoted-service-path-vulnerabilities?lang=en
CVE: CVE-2018-3779
Published: 2018-08-10
Description: active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://hackerone.com/reports/392311; https://hackerone.com/reports/392311
CVE: CVE-2018-3110
Published: 2018-08-10
Description: A vulnerability was discovered in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. While the vulnerability is in Java VM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
CVSS Score: 9.9 (CRITICAL)
References: http://www.oracle.com/technetwork/security-advisory/alert-cve-2018-3[PII_REDACTED].html; http://www.securityfocus.com/bid/105056; http://www.securitytracker.com/id/1041532
CVE: CVE-2018-3774
Published: 2018-08-12
Description: Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-425, CWE-601, CWE-918
References: https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f[PII_REDACTED]0d5a; https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de; https://hackerone.com/reports/384029
CVE: CVE-2018-3775
Published: 2018-08-12
Description: Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-287
References: https://hackerone.com/reports/248656; https://nextcloud.com/security/advisory/?id=NC-SA-2018-007; https://hackerone.com/reports/248656
CVE: CVE-2018-3776
Published: 2018-08-12
Description: Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-532
References: https://hackerone.com/reports/232347; https://nextcloud.com/security/advisory/?id=NC-SA-2018-006; https://hackerone.com/reports/232347
CVE: CVE-2018-0714
Published: 2018-08-13
Description: Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.qnap.com/zh-tw/security-advisory/nas-201808-13; https://www.qnap.com/zh-tw/security-advisory/nas-201808-13
CVE: CVE-2018-13392
Published: 2018-08-13
Description: Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue keys.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105096; https://jira.atlassian.com/browse/CRUC-8304; https://jira.atlassian.com/browse/FE-7081
CVE: CVE-2018-5924
Published: 2018-08-13
Description: A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105010; http://www.securitytracker.com/id/1041415; https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/
CVE: CVE-2018-5925
Published: 2018-08-13
Description: A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105010; http://www.securitytracker.com/id/1041415; https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/
CVE: CVE-2018-6414
Published: 2018-08-13
Description: A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-in-some-hik/; https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-in-some-hik/
CVE: CVE-2016-2922
Published: 2018-08-13
Description: IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/113353; https://www.ibm.com/support/docview.wss?uid=ibm10718377; https://exchange.xforce.ibmcloud.com/vulnerabilities/113353
CVE: CVE-2017-1286
Published: 2018-08-13
Description: Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/125147; https://www.ibm.com/support/docview.wss?uid=swg2C1000377; https://exchange.xforce.ibmcloud.com/vulnerabilities/125147
CVE: CVE-2017-1749
Published: 2018-08-13
Description: IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/135522; https://www.ibm.com/support/docview.wss?uid=swg2C1000374; https://exchange.xforce.ibmcloud.com/vulnerabilities/135522
CVE: CVE-2018-11770
Published: 2018-08-13
Description: From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for authenticating requests to submit jobs via spark-submit. However, the REST API does not use this or any other authentication mechanism, and this is not adequately documented. In this case, a user would be able to run a driver program without authenticating, but not launch executors, using the REST API. This REST API is also used by Mesos, when set up to run in cluster mode (i.e., when also running MesosClusterDispatcher), for job submission. Future versions of Spark will improve documentation on these points, and prohibit setting 'spark.authenticate.secret' when running the REST APIs, to make this clear. Future versions will also disable the REST API by default in the standalone master by changing the default value of 'spark.master.rest.enabled' to 'false'.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105097; https://lists.apache.org/thread.html/bd8e[PII_REDACTED]1a2acd720e9223fc1c15a263ccacb396a75b1fc485%40%3Cdev.spark.apache.org%3E; https://spark.apache.org/security.html#CVE-2018-11770
CVE: CVE-2017-15138
Published: 2018-08-13
Description: The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://access.redhat.com/errata/RHBA-2018:0489; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15138; https://access.redhat.com/errata/RHBA-2018:0489
CVE: CVE-2017-7500
Published: 2018-08-13
Description: It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-59
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7500; https://github.com/rpm-software-management/rpm/commit/c815822c8bdb138066ff58c624ae83e3a12ebfa9; https://github.com/rpm-software-management/rpm/commit/f2d3be2a8741234faaa96f5fd05fdfdc75779a79
CVE: CVE-2018-10569
Published: 2018-08-13
Description: An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://youtu.be/6d4BPbvddkE; https://youtu.be/m2to4PWmHkI; https://youtu.be/6d4BPbvddkE
CVE: CVE-2018-10842
Published: 2018-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10912. Reason: This candidate is a duplicate of CVE-2018-10912. Notes: All CVE users should reference CVE-2018-10912 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10864
Published: 2018-08-13
Description: An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be opened and never closed, possibly producing a Denial of Service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://access.redhat.com/errata/RHSA-2018:2373; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10864; https://access.redhat.com/errata/RHSA-2018:2373
CVE: CVE-2018-12587
Published: 2018-08-13
Description: A cross-site scripting (XSS) vulnerability was found in valeuraddons German Spelling Dictionary v1.3 (an Opera Browser add-on). Instead of providing text for a spelling check, remote attackers may inject arbitrary web script or HTML via the ajax query parameter in the URL Address Bar.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txt; https://www.openbugbounty.org/reports/610381/; https://metamorfosec.com/Files/Advisories/METS-2018-003-A_XSS_Vulnerability_in_German_Spelling_Dictionary_1.3.txt
CVE: CVE-2018-13415
Published: 2018-08-13
Description: In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running Plex, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack to cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/Aug/1; https://www.exploit-db.com/exploits/45146/; http://seclists.org/fulldisclosure/2018/Aug/1
CVE: CVE-2018-13417
Published: 2018-08-13
Description: In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running Vuze, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack to cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2018/Aug/2; https://www.exploit-db.com/exploits/45145/; http://seclists.org/fulldisclosure/2018/Aug/2
CVE: CVE-2018-14849
Published: 2018-08-13
Description: Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2018/08/02/1; http://www.openwall.com/lists/oss-security/2018/08/02/2; https://sourceforge.net/p/tikiwiki/code/66809
CVE: CVE-2018-14850
Published: 2018-08-13
Description: Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2018/08/02/1; http://www.openwall.com/lists/oss-security/2018/08/02/2; https://sourceforge.net/p/tikiwiki/code/66990
CVE: CVE-2018-14878
Published: 2018-08-13
Description: JetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific file, because of Deserialization of Untrusted Data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://blog.jetbrains.com/dotnet/2018/08/02/resharper-ultimate-2018-1-4-rider-2018-1-4-released/; https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/august/aspnet-resource-files-resx-and-deserialisation-issues/; https://blog.jetbrains.com/dotnet/2018/08/02/resharper-ultimate-2018-1-4-rider-2018-1-4-released/
CVE: CVE-2018-15139
Published: 2018-08-13
Description: Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/163110/OpenEMR-5.0.1.3-Shell-Upload.html; http://packetstormsecurity.com/files/163482/OpenEMR-5.0.1.3-Shell-Upload.html; https://github.com/Hacker5preme/Exploits/tree/main/CVE-2018-15139-Exploit
CVE: CVE-2018-15140
Published: 2018-08-13
Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/openemr/openemr/pull/1765/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://www.exploit-db.com/exploits/45202/
CVE: CVE-2018-15141
Published: 2018-08-13
Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete arbitrary files via the "docid" parameter when the mode is set to delete.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/openemr/openemr/pull/1765/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://www.exploit-db.com/exploits/45202/
CVE: CVE-2018-15142
Published: 2018-08-13
Description: Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute arbitrary PHP code by writing a file with a PHP extension via the "docid" and "content" parameters and accessing it in the traversed directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/openemr/openemr/pull/1765/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://www.exploit-db.com/exploits/45202/
CVE: CVE-2018-15143
Published: 2018-08-13
Description: Multiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) catid or (2) providerid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1758/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://github.com/openemr/openemr/pull/1758/files
CVE: CVE-2018-15144
Published: 2018-08-13
Description: SQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary SQL commands via the search_term parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1757/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://github.com/openemr/openemr/pull/1757/files
CVE: CVE-2018-15145
Published: 2018-08-13
Description: Multiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR before 5.0.1.4 allow a remote attacker to execute arbitrary SQL commands via the (1) eid, (2) userid, or (3) pid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/openemr/openemr/pull/1758/files; https://www.databreaches.net/openemr-patches-serious-vulnerabilities-uncovered-by-project-insecurity/; https://github.com/openemr/openemr/pull/1758/files
CVE: CVE-2018-3780
Published: 2018-08-13
Description: A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/383117; https://nextcloud.com/security/advisory/?id=NC-SA-2018-008; https://hackerone.com/reports/383117
CVE: CVE-2018-3781
Published: 2018-08-13
Description: A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/383117; https://nextcloud.com/security/advisory/?id=NC-SA-2018-009; https://hackerone.com/reports/383117
CVE: CVE-2018-3782
Published: 2018-08-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED].  Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED].  Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10598
Published: 2018-08-13
Description: CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/105032; https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01; http://www.securityfocus.com/bid/105032
CVE: CVE-2018-10634
Published: 2018-08-13
Description: Communications between Medtronic MiniMed MMT pumps and wireless accessories are transmitted in cleartext. A sufficiently skilled attacker could capture these transmissions and extract sensitive information, such as device serial numbers.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-319, CWE-319
References: http://www.securityfocus.com/bid/105044; https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html; https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02
CVE: CVE-2018-10636
Published: 2018-08-13
Description: CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/105032; https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01; http://www.securityfocus.com/bid/105032
CVE: CVE-2018-14781
Published: 2018-08-13
Description: Medtronic MiniMed MMT 

devices when paired with a remote controller and having the “easy bolus” and “remote bolus” options enabled (non-default), are vulnerable to a capture-replay attack. An attacker can capture the wireless transmissions between the remote controller and the pump and replay them to cause an insulin (bolus) delivery.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-294, CWE-287
References: http://www.securityfocus.com/bid/105044; https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed.html; https://ics-cert.us-cert.gov/advisories/ICSMA-18-219-02