deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16879
Published: 2019-01-03
Description: Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-311, CWE-311
References: http://www.securityfocus.com/bid/106310; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16879; http://www.securityfocus.com/bid/106310
CVE: CVE-2017-11004
Published: 2019-01-03
Description: A non-secure user may be able to access certain registers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18141
Published: 2019-01-03
Description: When a 3rd party TEE has been loaded it is possible for the non-secure world to create a secure monitor call which will give it access to privileged functions meant to only be accessible from the TEE in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18319
Published: 2019-01-03
Description: Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-320
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18320
Published: 2019-01-03
Description: QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18321
Published: 2019-01-03
Description: Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM9655, SD 835, SDA660.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18322
Published: 2019-01-03
Description: Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18323
Published: 2019-01-03
Description: Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-320
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18324
Published: 2019-01-03
Description: Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SD 855, SDX24, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18326
Published: 2019-01-03
Description: Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18327
Published: 2019-01-03
Description: Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-310
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18328
Published: 2019-01-03
Description: Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 820, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18329
Published: 2019-01-03
Description: Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 835, SD 845 / SD 850, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2017-18330
Published: 2019-01-03
Description: Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile and snapdragon wear in versions IPQ8074, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106128; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/106128
CVE: CVE-2018-16876
Published: 2019-01-03
Description: ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00077.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00020.html
CVE: CVE-2018-16870
Published: 2019-01-03
Description: It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLS. This may lead to leakage of sensible data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-310
References: http://cat.eyalro.net/; https://github.com/wolfSSL/wolfssl/pull/1950; http://cat.eyalro.net/
CVE: CVE-2018-16882
Published: 2019-01-03
Description: A use-after-free issue was found in the way the Linux kernel's KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_get_vmcs12_pages(), in case of an error while processing posted interrupt address, it unmaps the 'pi_desc_page' without resetting 'pi_desc' descriptor address, which is later used in pi_test_and_clear_on(). A guest user/process could use this flaw to crash the host kernel resulting in DoS or potentially gain privileged access to a system. Kernel versions before 4.14.91 and before 4.19.13 are vulnerable.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/106254; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16882; https://lwn.net/Articles/775720/
CVE: CVE-2018-16885
Published: 2019-01-03
Description: A flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and similar functions with a zero offset and buffer length which causes the read beyond the buffer boundaries, in certain cases causing a memory access fault and a system halt by accessing invalid memory address. This issue only affects kernel version 3.10.x as shipped with Red Hat Enterprise Linux 7.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/106296; https://access.redhat.com/errata/RHSA-2019:2029; https://access.redhat.com/errata/RHSA-2019:2043
CVE: CVE-2019-3701
Published: 2019-01-03
Description: An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user "root" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00035.html; http://www.securityfocus.com/bid/106443; https://bugzilla.suse.com/show_bug.cgi?id=1120386
CVE: CVE-2018-17161
Published: 2019-01-03
Description: In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provided data in bootpd may make it possible for a malicious attacker to craft a bootp packet which could cause a stack buffer overflow. It is possible that the buffer overflow could lead to a Denial of Service or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106292; https://security.freebsd.org/advisories/FreeBSD-SA-18:15.bootpd.asc; http://www.securityfocus.com/bid/106292
CVE: CVE-2018-14481
Published: 2019-01-03
Description: Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150643/OSclass-3.7.4-Cross-Site-Scripting.html; https://www.netsparker.com/web-applications-advisories/ns-18-029-cross-site-scripting-in-osclass/; http://packetstormsecurity.com/files/150643/OSclass-3.7.4-Cross-Site-Scripting.html
CVE: CVE-2018-19414
Published: 2019-01-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to groups.php; (2) username parameter to login.php; or (3) date parameter to search.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150657/Plikli-4.0.0-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Dec/8; https://www.netsparker.com/web-applications-advisories/ns-18-030-cross-site-scripting-in-plikli/
CVE: CVE-2018-19415
Published: 2019-01-03
Description: Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to join_group.php or (2) comment_id parameter to story.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Dec/8; https://www.netsparker.com/web-applications-advisories/ns-18-031-blind-sql-injection-in-plikli/; http://seclists.org/fulldisclosure/2018/Dec/8
CVE: CVE-2018-19505
Published: 2019-01-03
Description: Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/150492/BMC-Remedy-7.1-User-Impersonation.html; http://seclists.org/fulldisclosure/2018/Nov/62; http://www.securitytracker.com/id/1042177
CVE: CVE-2018-19523
Published: 2019-01-03
Description: DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86ahttps://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86ahttps://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-19861
Published: 2019-01-03
Description: Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP HEAD request.  NOTE: this product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2018/Dec/19; https://www.exploit-db.com/exploits/45999/
CVE: CVE-2018-19862
Published: 2019-01-03
Description: Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP POST request.  NOTE: this product is discontinued.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/150689/MiniShare-1.4.1-HEAD-POST-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2018/Dec/19; https://www.exploit-db.com/exploits/45999/
CVE: CVE-2018-19992
Published: 2019-01-03
Description: A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to adherents/type.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/commit/0f06e39d23636bd1e4039ac61a743c79725c798b; https://github.com/Dolibarr/dolibarr/commit/0f06e39d23636bd1e4039ac61a743c79725c798b
CVE: CVE-2018-19993
Published: 2019-01-03
Description: A reflected cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/commit/fc3fcc5455d9a610b85723e89e8be43a41ad1378; https://github.com/Dolibarr/dolibarr/commit/fc3fcc5455d9a610b85723e89e8be43a41ad1378
CVE: CVE-2018-19994
Published: 2019-01-03
Description: An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/850b939ffd2c7a[PII_REDACTED]b923d5e0da2d6446; https://github.com/Dolibarr/dolibarr/commit/850b939ffd2c7a[PII_REDACTED]b923d5e0da2d6446
CVE: CVE-2018-19995
Published: 2019-01-03
Description: A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to user/card.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dolibarr/dolibarr/commit/4b8be6ed[PII_REDACTED]8ac1c076f81ddffa87855e; https://github.com/Dolibarr/dolibarr/commit/bacd5110fbdc81a35030fdc322775fa15ea85924; https://github.com/Dolibarr/dolibarr/commit/4b8be6ed[PII_REDACTED]8ac1c076f81ddffa87855e
CVE: CVE-2018-19998
Published: 2019-01-03
Description: SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/2b088a73c121a52e006c0d76ea4da7ffeb7b4f4a; https://github.com/Dolibarr/dolibarr/commit/bacd5110fbdc81a35030fdc322775fa15ea85924; https://github.com/Dolibarr/dolibarr/commit/2b088a73c121a52e006c0d76ea4da7ffeb7b4f4a
CVE: CVE-2018-20512
Published: 2019-01-03
Description: EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-565
References: https://www.reddit.com/r/networking/comments/abu4kq/vulnerability_in_cdata_technologies_epon_cpewifi/; https://www.reddit.com/r/networking/comments/abu4kq/vulnerability_in_cdata_technologies_epon_cpewifi/
CVE: CVE-2018-20663
Published: 2019-01-03
Description: The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cuba-platform/reports/issues/140; https://github.com/cuba-platform/reports/issues/140
CVE: CVE-2018-20664
Published: 2019-01-03
Description: Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20664/; https://www.manageengine.com/products/self-service-password/release-notes.html#5701; https://www.excellium-services.com/cert-xlm-advisory/cve-2018-20664/
CVE: CVE-2019-3575
Published: 2019-01-03
Description: Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/schettino72/sqla_yaml_fixtures/issues/20; https://github.com/schettino72/sqla_yaml_fixtures/issues/20
CVE: CVE-2019-3905
Published: 2019-01-03
Description: Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-3905; https://www.excellium-services.com/cert-xlm-advisory/cve-2019-3905/; https://www.manageengine.com/products/self-service-password/release-notes.html#5703
CVE: CVE-2018-18004
Published: 2019-01-03
Description: Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network Camera Series products with firmware before XXXXXX-VVTK-0X09a allows remote attackers to enable arbitrary system services via a URL parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf; https://blog.securityevaluators.com/vivotek-ip-camera-vulnerabilities-discovered-and-exploited-2e2531ecd244; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf
CVE: CVE-2018-18005
Published: 2019-01-03
Description: Cross-site scripting in event_script.js in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript via a URL query string parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf; https://blog.securityevaluators.com/vivotek-ip-camera-vulnerabilities-discovered-and-exploited-2e2531ecd244; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf
CVE: CVE-2018-18244
Published: 2019-01-03
Description: Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf; https://blog.securityevaluators.com/vivotek-ip-camera-vulnerabilities-discovered-and-exploited-2e2531ecd244; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-006-v1.pdf
CVE: CVE-2018-19600
Published: 2019-01-03
Description: Rhymix CMS 1.9.8.1 allows XSS via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/rhymix/rhymix/issues/1088; https://github.com/security-breachlock/CVE-2018-19600/blob/master/XSS.pdf; https://github.com/rhymix/rhymix/issues/1088
CVE: CVE-2018-19601
Published: 2019-01-03
Description: Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://github.com/rhymix/rhymix/issues/1089; https://github.com/security-breachlock/CVE-2018-19601/blob/master/SSRF.pdf; https://github.com/rhymix/rhymix/issues/1089
CVE: CVE-2018-15780
Published: 2019-01-03
Description: RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/106396; https://seclists.org/fulldisclosure/2019/Jan/3; http://www.securityfocus.com/bid/106396