deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10255
Published: 2018-05-01
Description: A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/147363/Blog-Master-Pro-1.0-CSV-Injection.html; https://www.exploit-db.com/exploits/44535/; http://packetstormsecurity.com/files/147363/Blog-Master-Pro-1.0-CSV-Injection.html
CVE: CVE-2018-10256
Published: 2018-05-01
Description: A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to directly modify the SQL query.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/147366/HRSALE-The-Ultimate-HRM-1.0.2-SQL-Injection.html; https://www.exploit-db.com/exploits/44537/; http://packetstormsecurity.com/files/147366/HRSALE-The-Ultimate-HRM-1.0.2-SQL-Injection.html
CVE: CVE-2018-10257
Published: 2018-05-01
Description: A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/147364/HRSALE-The-Ultimate-HRM-1.0.2-CSV-Injection.html; https://www.exploit-db.com/exploits/44536/; http://packetstormsecurity.com/files/147364/HRSALE-The-Ultimate-HRM-1.0.2-CSV-Injection.html
CVE: CVE-2018-10258
Published: 2018-05-01
Description: A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://packetstormsecurity.com/files/147362/Shopy-Point-Of-Sale-1.0-CSV-Injection.html; https://www.exploit-db.com/exploits/44534/; http://packetstormsecurity.com/files/147362/Shopy-Point-Of-Sale-1.0-CSV-Injection.html
CVE: CVE-2018-10259
Published: 2018-05-01
Description: An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/147383/HRSALE-The-Ultimate-HRM-1.0.2-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/44538/; http://packetstormsecurity.com/files/147383/HRSALE-The-Ultimate-HRM-1.0.2-Cross-Site-Scripting.html
CVE: CVE-2018-10260
Published: 2018-05-01
Description: A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/147382/HRSALE-The-Ultimate-HRM-1.0.2-Local-File-Inclusion.html; https://www.exploit-db.com/exploits/44539/; http://packetstormsecurity.com/files/147382/HRSALE-The-Ultimate-HRM-1.0.2-Local-File-Inclusion.html
CVE: CVE-2018-6242
Published: 2018-05-01
Description: Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery Mode (RCM). An attacker with physical access to the device's USB and the ability to force the device to reboot into RCM could exploit the vulnerability to execute unverified code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4660; http://nvidia.custhelp.com/app/answers/detail/a_id/4660
CVE: CVE-2018-10544
Published: 2018-05-02
Description: Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://garrettmiller.github.io/meross-mss110-vuln/; https://garrettmiller.github.io/meross-mss110-vuln/
CVE: CVE-2018-10642
Published: 2018-05-02
Description: Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/arbahayoub/POC/blob/master/itop_command_injection_1.txt; https://sourceforge.net/p/itop/tickets/1585/; https://github.com/arbahayoub/POC/blob/master/itop_command_injection_1.txt
CVE: CVE-2018-10645
Published: 2018-05-02
Description: Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker to configure the "AdditionalOpenVpnParameters" property and control the OpenVPN command line. Using the OpenVPN "plugin" parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using "VyprVPN Free" account credentials and the VyprVPN Desktop Client.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-025.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-025.md
CVE: CVE-2018-10646
Published: 2018-05-02
Description: CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "CG6Service" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "ConnectToVpnServer" method accepts a "connectionParams" argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-023.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-023.md
CVE: CVE-2018-10647
Published: 2018-05-02
Description: SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated attacker may modify these configuration files to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-024.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-024.md
CVE: CVE-2018-6401
Published: 2018-05-02
Description: Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://garrettmiller.github.io/meross-mss110-vuln/; https://garrettmiller.github.io/meross-mss110-vuln/
CVE: CVE-2017-1255
Published: 2018-05-02
Description: IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 124675.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=swg22014537; https://exchange.xforce.ibmcloud.com/vulnerabilities/124675; http://www.ibm.com/support/docview.wss?uid=swg22014537
CVE: CVE-2017-1601
Published: 2018-05-02
Description: IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: http://www.ibm.com/support/docview.wss?uid=swg22014230; http://www.securitytracker.com/id/1040899; https://exchange.xforce.ibmcloud.com/vulnerabilities/132624
CVE: CVE-2018-1468
Published: 2018-05-02
Description: IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details to which they are not authorized. IBM X-Force ID: 140399.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22015968; https://exchange.xforce.ibmcloud.com/vulnerabilities/140399; http://www.ibm.com/support/docview.wss?uid=swg22015968
CVE: CVE-2018-5512
Published: 2018-05-02
Description: On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/104095; http://www.securitytracker.com/id/1040801; https://support.f5.com/csp/article/K51754851
CVE: CVE-2018-5514
Published: 2018-05-02
Description: On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104097; http://www.securitytracker.com/id/1040804; https://support.f5.com/csp/article/K45320419
CVE: CVE-2018-5515
Published: 2018-05-02
Description: On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104099; http://www.securitytracker.com/id/1040802; https://support.f5.com/csp/article/K62750376
CVE: CVE-2018-5516
Published: 2018-05-02
Description: On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-732
References: http://www.securitytracker.com/id/1040799; http://www.securitytracker.com/id/1040800; https://support.f5.com/csp/article/K37442533
CVE: CVE-2018-5517
Published: 2018-05-02
Description: On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1040805; https://support.f5.com/csp/article/K25573437; http://www.securitytracker.com/id/1040805
CVE: CVE-2018-5518
Published: 2018-05-02
Description: On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core file. This issue is only exploitable on a VCMP guest which is operating in "host-only" or "bridged" mode. VCMP guests which are "isolated" are not impacted by this issue and do not provide mechanism to exploit the vulnerability. Guests which are deployed in "Appliance Mode" may be impacted however the exploit is not possible from an Appliance Mode guest. To exploit this vulnerability root access on a guest system deployed as "host-only" or "bridged" mode is required.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securitytracker.com/id/1040797; https://support.f5.com/csp/article/K03165684; http://www.securitytracker.com/id/1040797
CVE: CVE-2018-5519
Published: 2018-05-02
Description: On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended.
CVSS Score: 4.9 (MEDIUM)
References: http://www.securitytracker.com/id/1040803; https://support.f5.com/csp/article/K46121888; http://www.securitytracker.com/id/1040803
CVE: CVE-2018-5520
Published: 2018-05-02
Description: On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow an administrative user to use the dig utility to gain unauthorized access to file system resources.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-863
References: http://www.securitytracker.com/id/1040798; https://support.f5.com/csp/article/K02043709; http://www.securitytracker.com/id/1040798
CVE: CVE-2017-4952
Published: 2018-05-02
Description: VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.5.4_8, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: http://seclists.org/oss-sec/2018/q1/153; http://www.securityfocus.com/bid/103093; https://github.com/vmware/xenon/commit/055ae13603f0cc3cd7cf59f20ce314bf8db583e1
CVE: CVE-2013-6272
Published: 2018-05-02
Description: The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html; http://seclists.org/fulldisclosure/2014/Jul/13; http://www.securityfocus.com/bid/68415
CVE: CVE-2018-9302
Published: 2018-05-02
Description: SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14611, which was about version 0.13.0, which (surprisingly) is an earlier version than 0.4.4.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: http://seclists.org/fulldisclosure/2018/May/10; https://www.exploit-db.com/exploits/44567/; http://seclists.org/fulldisclosure/2018/May/10
CVE: CVE-2018-10657
Published: 2018-05-02
Description: Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb; https://matrix.org/blog/2018/05/01/security-update-synapse-0-28-1/; https://github.com/matrix-org/synapse/commit/33f469ba19586bbafa0cf2c7d7c35463bdab87eb
CVE: CVE-2018-10665
Published: 2018-05-02
Description: ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ILIAS-eLearning/ILIAS/commit/3fe6aa778ca06080cf1b7303cbc458aa0c42392a; https://github.com/ILIAS-eLearning/ILIAS/commit/c9c9211bd689f2dda02006159e69a856eae8944d; https://www.openbugbounty.org/reports/608858/
CVE: CVE-2018-10675
Published: 2018-05-02
Description: The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=73223e4e2e3867ebf033a5a8eb2e5df0158ccc99; http://www.securityfocus.com/bid/104093; https://access.redhat.com/errata/RHSA-2018:2164
CVE: CVE-2018-10676
Published: 2018-05-02
Description: CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file and obtain sensitive credential information via a direct request for the download.rsp URI.
CVSS Score: 9.8 (CRITICAL)
References: http://misteralfa-hack.blogspot.cl/2018/05/0day-dvr-multivendor.html; http://misteralfa-hack.blogspot.cl/2018/05/0day-dvr-multivendor.html
CVE: CVE-2018-1101
Published: 2018-05-02
Description: Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-266, CWE-521
References: https://access.redhat.com/errata/RHSA-2018:1328; https://access.redhat.com/errata/RHSA-2018:1972; https://access.redhat.com/security/cve/cve-2018-1101
CVE: CVE-2018-10677
Published: 2018-05-02
Description: The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/miniupnp/ngiflib/commit/b588a2249c7abbfc52173e32ee11d6facef82f89; https://github.com/miniupnp/ngiflib/issues/1; https://github.com/miniupnp/ngiflib/commit/b588a2249c7abbfc52173e32ee11d6facef82f89
CVE: CVE-2018-10680
Published: 2018-05-02
Description: Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web site settings --> Basic setting --> Website title" and enters an XSS payload via the zb_system/cmd.php ZC_BLOG_NAME parameter. NOTE: the vendor disputes the security relevance, noting it is "just a functional bug.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zblogcn/zblogphp/issues/185; https://github.com/zblogcn/zblogphp/issues/205; https://github.com/zblogcn/zblogphp/issues/185
CVE: CVE-2018-1104
Published: 2018-05-02
Description: Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-94
References: https://access.redhat.com/errata/RHSA-2018:1328; https://access.redhat.com/errata/RHSA-2018:1972; https://access.redhat.com/security/cve/cve-2018-1104
CVE: CVE-2018-8115
Published: 2018-05-02
Description: A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to properly validate input while importing a container image, aka "Windows Host Compute Service Shim Remote Code Execution Vulnerability." This affects Windows Host Compute.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104061; http://www.securitytracker.com/id/1040842; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8115
CVE: CVE-2018-10115
Published: 2018-05-02
Description: Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665, CWE-908
References: http://www.securityfocus.com/bid/104132; http://www.securitytracker.com/id/1040832; https://landave.io/2018/05/7-zip-from-uninitialized-memory-to-remote-code-execution/
CVE: CVE-2018-10294
Published: 2018-05-02
Description: Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/3; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10563
Published: 2018-05-02
Description: An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/4; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10564
Published: 2018-05-02
Description: XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/5; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10565
Published: 2018-05-02
Description: XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/6; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10566
Published: 2018-05-02
Description: XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/7; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10567
Published: 2018-05-02
Description: XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/8; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10568
Published: 2018-05-02
Description: XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions; http://seclists.org/fulldisclosure/2018/May/9; http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions
CVE: CVE-2018-10577
Published: 2018-05-02
Description: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files to be executed as root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2018/May/12; https://www.exploit-db.com/exploits/45409/; http://seclists.org/fulldisclosure/2018/May/12
CVE: CVE-2018-10578
Published: 2018-05-02
Description: An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2018/May/12; http://seclists.org/fulldisclosure/2018/May/12