deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11299
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the vdev id correctly in stats events then WLAN host driver tries to access interface array without proper bound check which can lead to invalid memory access and as a side effect kernel panic or page fault.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=409d269c3464a84d9274bc0831031b2216b1060; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11300
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, callback executed from the other thread has freed memory which is also used in wlan function and may result in to a "Use after free" scenario.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=1f111832dc93bc639538dc173397b30af329b130; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11301
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to an integer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://source.android.com/security/bulletin/pixel/2018-09-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=31ad3a5a7458e60f5e0ba4f492cebe1f1bda0964; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11302
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to potential array overflow in WLAN.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4178ed2227bbc48d4313bc4e7d604d2813c0d9f4; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4178ed2227bbc48d4313bc4e7d604d2813c0d9f4
CVE: CVE-2018-11818
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from userspace via ioctl. Simultaneous update from userspace while kernel drivers are updating LUT registers can lead to race condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=7d1e40be0f7da526f[PII_REDACTED]aa55f5646fc13; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=999bfde119d881a09218eb045d41fb83e67f0d10; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11826
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating memory can lead to Buffer overflow in WLAN ext scan handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=650afe0c0ec2f566c9546b3b8e400b36fcf44aed; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11827
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4c74687be66c19be0b9bd83d78d033dff5d1a9ae; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11832
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=492fdce2626efc01004bea4aed4ea89b7c5cb5b3; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=492fdce2626efc01004bea4aed4ea89b7c5cb5b3
CVE: CVE-2018-11836
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-09-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9d703c0815b2b260592bc8b91d907aeef7962eb7; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11840
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the WLAN driver command ioctl a temporary buffer used to construct the reply message may be freed twice.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=a3d53bb977b907a5d11d22cad3f8ebf3f1d2b1ed; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11842
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, during wlan association, driver allocates memory. In case the mem allocation fails driver does a mem free though the memory was not allocated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-09-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=5eea70b9d5852e468467c1565927dbe0c76d8674; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11843
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack fo check on return value in WMA response handler can lead to potential use after free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=ddc0e519f59fda7a8e17355ad6c3b00b8808542e; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=ddc0e519f59fda7a8e17355ad6c3b00b8808542e
CVE: CVE-2018-11851
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=0f6839316f43d[PII_REDACTED]7b979aec11558abc0; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11852
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper check In the WMA API for the inputs received from the firmware and then fills the same to the host structure will lead to OOB write.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=92fbe31eb6b356a1f673515cb1e63b6eaf245143; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=92fbe31eb6b356a1f673515cb1e63b6eaf245143
CVE: CVE-2018-11860
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message length.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=7a8639875bb01bca2dcac7bda9e5d986fbf8683f; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11863
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from firmware to calculate the length of WMA roam synch buffer can lead to buffer overwrite during memcpy.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=33abba90b5c570a8334110ff7e1f696908465fd3; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=33abba90b5c570a8334110ff7e1f696908465fd3
CVE: CVE-2018-11868
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in nan response event handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8a0be9d79cfaa4c4df2695023ba518c540381e80; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11869
Published: 2018-09-18
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e359db47f1e334886eaaf1d71a4754dd312be01c; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-17176
Published: 2018-09-18
Description: A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be replayed to /bin/webserver on port 8081. There are no nonces, and timestamps are not checked at all.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294
References: https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners; https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE: CVE-2018-17177
Published: 2018-09-18
Description: An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static encryption is used for the copying of so-called "black box" logs (event logs and core dumps) to a USB stick. These logs are RC4-encrypted with a 9-character password of *^JEd4W!I that is obfuscated by hiding it within a custom /bin/rc4_crypt binary.
CVSS Score: 2.4 (LOW)
CWE: CWE-326
References: https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners; https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE: CVE-2018-17178
Published: 2018-09-18
Description: An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands (sent to /bin/webserver on port 8081) if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though the web socket replies with { "message" : "invalid authorization header" }. Without an active session, commands are still interpreted, but (except for eco-on and eco-off) have no effect, since without active driving, a driving direction does not change anything.
CVSS Score: 5.3 (MEDIUM)
References: https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners; https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners
CVE: CVE-2018-11042
Published: 2018-09-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-1222
Published: 2018-09-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6913
Published: 2018-09-18
Description: Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gquere/CVE-2017-6913; https://software.open-xchange.com/products/appsuite/doc/Release_Notes_for_Patch_Release_4133_7.6.3_2017-05-15.pdf; https://github.com/gquere/CVE-2017-6913
CVE: CVE-2018-16668
Published: 2018-09-18
Description: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life; https://www.exploit-db.com/exploits/45384/; https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
CVE: CVE-2018-16669
Published: 2018-09-18
Description: An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for the admin credentials of the ocpp and circarlife panels.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life; https://www.exploit-db.com/exploits/45384/; https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
CVE: CVE-2018-16670
Published: 2018-09-18
Description: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life; https://www.exploit-db.com/exploits/45384/; https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
CVE: CVE-2018-16671
Published: 2018-09-18
Description: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life; https://www.exploit-db.com/exploits/45384/; https://github.com/SadFud/Exploits/tree/master/Real%20World/Suites/cir-pwn-life
CVE: CVE-2018-11071
Published: 2018-09-18
Description: Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://seclists.org/fulldisclosure/2018/Sep/19; https://seclists.org/fulldisclosure/2018/Sep/19
CVE: CVE-2018-11084
Published: 2018-09-18
Description: Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.
CVSS Score: 6.8 (MEDIUM)
References: https://www.cloudfoundry.org/blog/cve-2018-11084/; https://www.cloudfoundry.org/blog/cve-2018-11084/
CVE: CVE-2018-13982
Published: 2018-09-18
Description: Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This allows attackers controlling the executed template code to bypass the trusted directory security restriction and read arbitrary files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180420-01_Smarty_Path_Traversal; https://github.com/smarty-php/smarty/commit/2e081a51b1effddb23f[PII_REDACTED]9ac62654d50; https://github.com/smarty-php/smarty/commit/8d21f38dc35c4cd6b31c2f23fc9b8e5adbc56dfe
CVE: CVE-2018-15546
Published: 2018-09-18
Description: Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://help.accusoft.com/PrizmDoc/v13.4/ReleaseNotes/index.htm; https://medium.com/%40mrnikhilsri/stored-cross-site-scripting-in-prizmdoc-13-3-and-before-cve-2018-15[PII_REDACTED]845c5; http://help.accusoft.com/PrizmDoc/v13.4/ReleaseNotes/index.htm
CVE: CVE-2018-16225
Published: 2018-09-18
Description: The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and disable the camera.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/; https://seclists.org/fulldisclosure/2018/Sep/21; https://blog.francescoservida.ch/2018/09/16/cve-2018-16225-public-disclosure-qbee-camera-vulnerability/
CVE: CVE-2018-16515
Published: 2018-09-18
Description: Matrix Synapse before 0.33.3.1 allows remote attackers to spoof events and possibly have unspecified other impacts by leveraging improper transaction and event signature validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-347
References: https://github.com/matrix-org/synapse/issues/3796#event[PII_REDACTED]; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRW7YR2H3ASUSYX4AO4KMY3FNVDNYW3P/; https://matrix.org/blog/2018/09/06/critical-security-update-synapse-0-33-3-1/
CVE: CVE-2018-16794
Published: 2018-09-18
Description: Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://packetstormsecurity.com/files/149376/Microsoft-ADFS-4.0-Windows-Server-2016-Server-Side-Request-Forgery.html; http://seclists.org/fulldisclosure/2018/Sep/13; http://www.securityfocus.com/bid/105378
CVE: CVE-2018-16819
Published: 2018-09-18
Description: admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://blog.51cto.com/13770310/2173956; https://github.com/monstra-cms/monstra/issues/456; http://blog.51cto.com/13770310/2173956
CVE: CVE-2018-16820
Published: 2018-09-18
Description: admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://blog.51cto.com/13770310/2173957; https://github.com/monstra-cms/monstra/issues/457; http://blog.51cto.com/13770310/2173957
CVE: CVE-2018-17071
Published: 2018-09-18
Description: The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a ticket at a low price by directly calling the fallback function with small msg.value, because the developer set the currency unit incorrectly. Therefore, it allows attackers to always win and get rewards.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17071; https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17071
CVE: CVE-2018-17111
Published: 2018-09-18
Description: The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17111; https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17111
CVE: CVE-2018-6693
Published: 2018-09-18
Description: An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-274, CWE-363, CWE-367
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10248; https://kc.mcafee.com/corporate/index?page=content&id=SB10248
CVE: CVE-2017-3912
Published: 2018-09-18
Description: Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-274, CWE-287
References: http://www.securityfocus.com/bid/102988; https://kc.mcafee.com/corporate/index?page=content&id=SB10224; http://www.securityfocus.com/bid/102988
CVE: CVE-2018-6690
Published: 2018-09-18
Description: Accessing, modifying, or executing executable files vulnerability in Microsoft Windows client in McAfee Application and Change Control (MACC) 8.0.0 Hotfix 4 and earlier allows authenticated users to execute arbitrary code via file transfer from external system.
CVSS Score: 7.1 (HIGH)
CWE: CWE-346
References: https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf; https://kc.mcafee.com/corporate/index?page=content&id=SB10250; https://cert-portal.siemens.com/productcert/pdf/ssa-674165.pdf