deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11876
Published: 2018-10-29
Description: Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11877
Published: 2018-10-29
Description: When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11879
Published: 2018-10-29
Description: When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11880
Published: 2018-10-29
Description: Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11882
Published: 2018-10-29
Description: Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-11884
Published: 2018-10-29
Description: Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107681; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/107681
CVE: CVE-2018-17908
Published: 2018-10-29
Description: WebAccess Versions 8.3.2 and prior. During installation, the application installer disables user access control and does not re-enable it after the installation is complete. This could allow an attacker to run elevated arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-284
References: http://www.securityfocus.com/bid/105736; http://www.securitytracker.com/id/1041957; https://ics-cert.us-cert.gov/advisories/ICSA-18-298-02
CVE: CVE-2018-17910
Published: 2018-10-29
Description: WebAccess Versions 8.3.2 and prior. The application fails to properly validate the length of user-supplied data, causing a buffer overflow condition that allows for arbitrary remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/105736; http://www.securitytracker.com/id/1041957; https://ics-cert.us-cert.gov/advisories/ICSA-18-298-02
CVE: CVE-2018-18387
Published: 2018-10-29
Description: playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.
CVSS Score: 8.8 (HIGH)
CWE: CWE-829
References: https://github.com/TheeBlind/CVE-2018-18387; https://github.com/TheeBlind/CVE-2018-18387
CVE: CVE-2018-17615
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Mouse Exit events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6333.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1096; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17616
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onBlur events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6334.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1097; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17617
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of onFocus events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6335.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1098; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17618
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Selection Change events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6336.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1099; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17619
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Validate events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6352.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1100; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17620
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6353.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1101; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17621
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Format events. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6355.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1102; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17622
Published: 2018-10-29
Description: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Calculate events. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6354.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1103; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17623
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Link objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6434.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1104; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17624
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of OCG objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-6435.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1105; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-17706
Published: 2018-10-29
Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within fxhtml2pdf. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-6230.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-119
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://zerodayinitiative.com/advisories/ZDI-18-1095; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-18817
Published: 2018-10-30
Description: The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API.
CVSS Score: 7.5 (HIGH)
References: https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-update; https://leostream.kayako.com/Knowledgebase/Article/View/85/52/leostream-agent-security-update
CVE: CVE-2018-18822
Published: 2018-10-30
Description: Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/45704/; https://www.exploit-db.com/exploits/45704/
CVE: CVE-2018-18825
Published: 2018-10-30
Description: Pagoda Linux panel V6.0 has XSS via the verification code associated with an invalid account login. A crafted code is mishandled during rendering of the login log.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/misterrou/rourou/blob/master/bt.docx; https://github.com/misterrou/rourou/blob/master/bt.docx
CVE: CVE-2018-18826
Published: 2018-10-30
Description: There exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.libav.org/show_bug.cgi?id=1135; https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE: CVE-2018-18827
Published: 2018-10-30
Description: There exists a heap-based buffer over-read in ff_vc1_pred_dc in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.libav.org/show_bug.cgi?id=1135; https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE: CVE-2018-18828
Published: 2018-10-30
Description: There exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.libav.org/show_bug.cgi?id=1135; https://bugzilla.libav.org/show_bug.cgi?id=1135
CVE: CVE-2018-18829
Published: 2018-10-30
Description: There exists a NULL pointer dereference in ff_vc1_parse_frame_header_adv in vc1.c in Libav 12.3, which allows attackers to cause a denial-of-service through a crafted aac file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.libav.org/show_bug.cgi?id=1136; https://bugzilla.libav.org/show_bug.cgi?id=1136
CVE: CVE-2018-18830
Published: 2018-10-30
Description: An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://gitee.com/mingSoft/MCMS/issues/IO0IQ; https://gitee.com/mingSoft/MCMS/issues/IO0IQ
CVE: CVE-2018-18831
Published: 2018-10-30
Description: An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gitee.com/mingSoft/MCMS/issues/IO0K0; https://gitee.com/mingSoft/MCMS/issues/IO0K0
CVE: CVE-2018-18832
Published: 2018-10-30
Description: admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.whiterabbitxyj.com/cve/DKCMS_9.4_sql_injection.doc; https://github.com/WhiteRabbitc/WhiteRabbitc.github.io/blob/master/cve/DKCMS_9.4_sql_injection.doc; https://blog.whiterabbitxyj.com/cve/DKCMS_9.4_sql_injection.doc
CVE: CVE-2018-18834
Published: 2018-10-30
Description: An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/fouzhe/security/tree/master/libiec61850; https://github.com/mz-automation/libiec61850/issues/81; https://github.com/fouzhe/security/tree/master/libiec61850
CVE: CVE-2018-18835
Published: 2018-10-30
Description: upload_template() in system/changeskin.php in DocCms 2016.5.12 allows remote attackers to execute arbitrary PHP code via a template file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.iwantacve.cn/index.php/archives/65/; http://www.iwantacve.cn/index.php/archives/65/
CVE: CVE-2018-18840
Published: 2018-10-30
Description: XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/m3lon/XSS-Expoit/blob/master/SEMCMS%20Stored%20XSS%20Vulnerability.md; https://github.com/m3lon/XSS-Expoit/blob/master/SEMCMS%20Stored%20XSS%20Vulnerability.md
CVE: CVE-2018-18841
Published: 2018-10-30
Description: XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/m3lon/XSS-Expoit/blob/master/SEMCMS%20Stored%20XSS_2.md; https://github.com/m3lon/XSS-Expoit/blob/master/SEMCMS%20Stored%20XSS_2.md
CVE: CVE-2018-18842
Published: 2018-10-30
Description: CSRF exists in zb_users/plugin/AppCentre/theme.js.php in Z-BlogPHP 1.5.2.1935 (Zero), which allows remote attackers to execute arbitrary PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/zblogcn/zblogphp/files/2524853/CSRF.Vulnerability.exists.in.the.file.of.Z-BLOG.1.5.2.1935.docx; https://github.com/zblogcn/zblogphp/issues/201; https://github.com/zblogcn/zblogphp/files/2524853/CSRF.Vulnerability.exists.in.the.file.of.Z-BLOG.1.5.2.1935.docx
CVE: CVE-2018-0734
Published: 2018-10-30
Description: The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html; http://www.securityfocus.com/bid/105758
CVE: CVE-2015-7266
Published: 2018-10-30
Description: The Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://media.pixalate.com/white-papers/xindi.pdf; http://media.pixalate.com/white-papers/xindi.pdf
CVE: CVE-2015-5159
Published: 2018-10-30
Description: python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1245200; https://github.com/latchset/kdcproxy/commit/f274aa6787cb8b3ec1cc12c440a56665b7231882; https://bugzilla.redhat.com/show_bug.cgi?id=1245200
CVE: CVE-2018-10532
Published: 2018-10-30
Description: An issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices. Hardcoded root SSH credentials were discovered to be stored within the "core_app" binary utilised by the EE router for networking services. An attacker with knowledge of the default password (oelinux123) could login to the router via SSH as the root user, which could allow for the loss of confidentiality, integrity, and availability of the system. This would also allow for the bypass of the "AP Isolation" mode that is supported by the router, as well as the settings for multiple Wireless networks, which a user may use for guest clients.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://blog.jameshemmings.co.uk/2018/10/24/4gee-hh70-router-vulnerability-disclosure/; https://www.theregister.co.uk/2018/10/26/ee_4gee_hh70_ssh_backdoor/; https://blog.jameshemmings.co.uk/2018/10/24/4gee-hh70-router-vulnerability-disclosure/
CVE: CVE-2018-10709
Published: 2018-10-30
Description: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write CR register values. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.exploit-db.com/exploits/45716/; https://www.secureauth.com/labs/advisories/asrock-drivers-elevation-privilege-vulnerabilities; https://www.exploit-db.com/exploits/45716/
CVE: CVE-2018-10710
Published: 2018-10-30
Description: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: https://www.exploit-db.com/exploits/45716/; https://www.secureauth.com/labs/advisories/asrock-drivers-elevation-privilege-vulnerabilities; https://www.exploit-db.com/exploits/45716/
CVE: CVE-2018-10711
Published: 2018-10-30
Description: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0 code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.exploit-db.com/exploits/45716/; https://www.secureauth.com/labs/advisories/asrock-drivers-elevation-privilege-vulnerabilities; https://www.exploit-db.com/exploits/45716/
CVE: CVE-2018-10712
Published: 2018-10-30
Description: The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.exploit-db.com/exploits/45716/; https://www.secureauth.com/labs/advisories/asrock-drivers-elevation-privilege-vulnerabilities; https://www.exploit-db.com/exploits/45716/