deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14585
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_Stz2Atom class.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/axiomatic-systems/Bento4/issues/299; https://github.com/axiomatic-systems/Bento4/issues/299
CVE: CVE-2018-14586
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/300; https://github.com/axiomatic-systems/Bento4/issues/300
CVE: CVE-2018-14587
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/axiomatic-systems/Bento4/issues/301; https://github.com/axiomatic-systems/Bento4/issues/301
CVE: CVE-2018-14588
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/axiomatic-systems/Bento4/issues/302; https://github.com/axiomatic-systems/Bento4/issues/302
CVE: CVE-2018-14589
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/axiomatic-systems/Bento4/issues/303; https://github.com/axiomatic-systems/Bento4/issues/303
CVE: CVE-2018-14590
Published: 2018-07-24
Description: An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/axiomatic-systems/Bento4/issues/305; https://github.com/axiomatic-systems/Bento4/issues/305
CVE: CVE-2018-10627
Published: 2018-07-24
Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This vulnerability does not affect the i.LON 600 product.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE: CVE-2018-10632
Published: 2018-07-24
Description: In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/104863; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-04; http://www.securityfocus.com/bid/104863
CVE: CVE-2018-8851
Published: 2018-07-24
Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store passwords in plaintext, which may allow an attacker with access to the configuration file to log into the SmartServer web user interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-256, CWE-522
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE: CVE-2018-8855
Published: 2018-07-24
Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319, CWE-319
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE: CVE-2018-8859
Published: 2018-07-24
Description: Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can bypass the required authentication specified in the security configuration file by including extra characters in the directory name when specifying the directory to be accessed. This vulnerability does not affect the i.LON 600 product.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-03
CVE: CVE-2018-10628
Published: 2018-07-24
Description: AVEVA InTouch 2014 R2 SP1 and prior, InTouch 2017, InTouch 2017 Update 1, and InTouch 2017 Update 2 allow an unauthenticated user to send a specially crafted packet that could overflow the buffer on a locale not using a dot floating point separator. Exploitation could allow remote code execution under the privileges of the InTouch View process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/104864; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-02; https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec127%28003%29.pdf
CVE: CVE-2018-11044
Published: 2018-07-24
Description: Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all user-provided content when sending invitation emails. A malicious authenticated user can inject content into an invite to another user, exploiting the trust implied by the source of the email.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://pivotal.io/security/cve-2018-11044; https://pivotal.io/security/cve-2018-11044
CVE: CVE-2018-11047
Published: 2018-07-24
Description: Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests to admin endpoints by accepting a valid refresh token in lieu of an access token. Refresh tokens by design have a longer expiration time than access tokens, allowing the possessor of a refresh token to authenticate longer than expected. This affects the administrative endpoints of the UAA. i.e. /Users, /Groups, etc. However, if the user has been deleted or had groups removed, or the client was deleted, the refresh token will no longer be valid.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://www.cloudfoundry.org/blog/cve-2018-11047/; https://www.cloudfoundry.org/blog/cve-2018-11047/
CVE: CVE-2018-11059
Published: 2018-07-24
Description: RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Jul/69; http://www.securityfocus.com/bid/104892; http://www.securitytracker.com/id/1041359
CVE: CVE-2018-11060
Published: 2018-07-24
Description: RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
CVSS Score: 8.8 (HIGH)
References: http://seclists.org/fulldisclosure/2018/Jul/69; http://www.securityfocus.com/bid/104892; http://www.securitytracker.com/id/1041359
CVE: CVE-2018-10906
Published: 2018-07-24
Description: In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-269
References: https://access.redhat.com/errata/RHSA-2018:3324; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10906; https://lists.debian.org/debian-lts-announce/2018/08/msg00015.html
CVE: CVE-2018-14596
Published: 2018-07-25
Description: wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) URI in which the values of font_size, width, and height are large numbers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/HUILYUH/wancms/blob/master/README.md; https://github.com/HUILYUH/wancms/blob/master/README.md
CVE: CVE-2018-10880
Published: 2018-07-25
Description: Linux kernel is vulnerable to a stack-out-of-bounds write in the ext4 filesystem code when mounting and writing to a crafted ext4 image in ext4_update_inline_data(). An attacker could use this to cause a system crash and a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://patchwork.ozlabs.org/patch/930639/; http://www.securityfocus.com/bid/104907; http://www.securityfocus.com/bid/106503
CVE: CVE-2018-11491
Published: 2018-07-25
Description: ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://mars-cheng.github.io/blog/2018/CVE-2018-11491/; https://www.asus.com/tw/News/qnEosWKPVDpmOeqL; https://mars-cheng.github.io/blog/2018/CVE-2018-11491/
CVE: CVE-2018-6971
Published: 2018-07-25
Description: VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation (including silent installations). Successful exploitation of this issue may allow low privileged users access to the credentials specified during the Horizon View Agent installation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532
References: http://www.securityfocus.com/bid/104883; http://www.securitytracker.com/id/1041357; http://www.securitytracker.com/id/1041358
CVE: CVE-2018-6972
Published: 2018-07-25
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-BG, 6.5 before ESXi[PII_REDACTED]01-BG, 6.0 before ESXi[PII_REDACTED]01-BG and 5.5 before ESXi[PII_REDACTED]01-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104884; http://www.securitytracker.com/id/1041356; http://www.securitytracker.com/id/1041357
CVE: CVE-2018-5530
Published: 2018-07-25
Description: F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/104908; https://support.f5.com/csp/article/K45611803; http://www.securityfocus.com/bid/104908
CVE: CVE-2018-5531
Published: 2018-07-25
Description: Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP guest and host systems. Attack must be sourced from adjacent network (layer 2).
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K64721111; https://support.f5.com/csp/article/K64721111
CVE: CVE-2018-5536
Published: 2018-07-25
Description: A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/104922; https://support.f5.com/csp/article/K27391542; http://www.securityfocus.com/bid/104922
CVE: CVE-2018-5537
Published: 2018-07-25
Description: A remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K94105051; https://support.f5.com/csp/article/K94105051
CVE: CVE-2018-5538
Published: 2018-07-25
Description: On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0".
CVSS Score: 3.7 (LOW)
References: https://support.f5.com/csp/article/K45435121; https://support.f5.com/csp/article/K45435121
CVE: CVE-2018-5539
Published: 2018-07-25
Description: Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/104921; https://support.f5.com/csp/article/K75432956; http://www.securityfocus.com/bid/104921
CVE: CVE-2018-5541
Published: 2018-07-25
Description: When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/104906; https://support.f5.com/csp/article/K12403422; http://www.securityfocus.com/bid/104906
CVE: CVE-2018-5542
Published: 2018-07-25
Description: F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K05112543; https://support.f5.com/csp/article/K05112543
CVE: CVE-2017-10934
Published: 2018-07-25
Description: All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the Apache Commons Collections (ACC) library that may result in Java deserialization vulnerabilities. An unauthenticated remote attacker can exploit the vulnerabilities by sending a crafted RMI request to execute arbitrary code on the target host.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008682; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008682
CVE: CVE-2017-10935
Published: 2018-07-25
Description: All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the original password authentication protection to change other user's password.
CVSS Score: 7.2 (HIGH)
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008723; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008723
CVE: CVE-2017-10936
Published: 2018-07-25
Description: SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to execute arbitrary SQL commands via the aoData parameter, resulting in the disclosure of database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008722; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008722
CVE: CVE-2017-10937
Published: 2018-07-25
Description: SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers to execute arbitrary SQL commands via the opertype parameter, resulting in the disclosure of database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008782; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1008782
CVE: CVE-2018-5240
Published: 2018-07-25
Description: The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
CVSS Score: 8.0 (HIGH)
References: http://www.securityfocus.com/bid/104753; http://www.securitytracker.com/id/1041654; https://support.symantec.com/en_US/article.SYMSA1456.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/errata/RHSA-2018:1836; https://access.redhat.com/errata/RHSA-2018:1837; https://github.com/codehaus-plexus/plexus-archiver/commit/f8f[PII_REDACTED]b70df33759ae9dc6154d69c2ea8
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/snyk/zip-slip-vulnerability; https://github.com/zeroturnaround/zt-zip/blob/zt-zip-1.13/Changelog.txt; https://github.com/zeroturnaround/zt-zip/commit/759b72f33bc8f4d69f84f09fcb7f010ad45d6fff
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/snyk/zip-slip-vulnerability; https://snyk.io/research/zip-slip-vulnerability; https://snyk.io/vuln/SNYK-JAVA-NETLINGALAZIP4J-31679
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cd; https://github.com/ZJONSSON/node-unzipper/pull/59; https://github.com/snyk/zip-slip-vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/107001; https://github.com/cthackers/adm-zip/commit/62f64004fefb894c523a7143e8a88ebe6c84df25; https://github.com/cthackers/adm-zip/pull/212
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/haf/DotNetZip.Semverd/commit/55d2c13c0cc64654e18fcdd0038fdb3d7458e366; https://github.com/haf/DotNetZip.Semverd/pull/121; https://github.com/snyk/zip-slip-vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/adamhathcock/sharpcompress/commit/42b1205fb435de523e6ef8ac5b7bafbe712997f6; https://github.com/adamhathcock/sharpcompress/pull/374; https://github.com/snyk/zip-slip-vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/mholt/archiver/commit/e4ef56d48eb029648b0e895bb0b6a393ef0829c3; https://github.com/mholt/archiver/pull/65; https://github.com/snyk/zip-slip-vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/icsharpcode/SharpZipLib/issues/232; https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0; https://github.com/snyk/zip-slip-vulnerability
CVE: CVE-2[PII_REDACTED]
Published: 2018-07-25
Description: QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/snyk/zip-slip-vulnerability; https://github.com/stachenov/quazip/blob/0.7.6/NEWS.txt; https://github.com/stachenov/quazip/commit/5d2fc16a1976e5bf78d2927b012f67a2ae047a98
CVE: CVE-2018-13988
Published: 2018-07-25
Description: Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3140
CVE: CVE-2018-14083
Published: 2018-07-25
Description: LICA miniCMTS E8K(u/i/...) devices allow remote attackers to obtain sensitive information via a direct POST request for the inc/user.ini file, leading to discovery of a password hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/pudding2/CVE-2018-14083; https://github.com/pudding2/CVE-2018-14083