deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-8470
Published: 2018-09-13
Description: A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105267; http://www.securitytracker.com/id/1041632; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8470
CVE: CVE-2018-8474
Published: 2018-09-13
Description: A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105268; http://www.securitytracker.com/id/1041633; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474
CVE: CVE-2018-8475
Published: 2018-09-13
Description: A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/105277; http://www.securitytracker.com/id/1041626; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8475
CVE: CVE-2018-8479
Published: 2018-09-13
Description: A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/105323; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8479; http://www.securityfocus.com/bid/105323
CVE: CVE-2018-16982
Published: 2018-09-13
Description: Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/BYVoid/OpenCC/issues/303; https://github.com/BYVoid/OpenCC/issues/303
CVE: CVE-2018-16983
Published: 2018-09-13
Description: NoScript Classic before 5.1.8.7, as used in Tor Browser 7.x and other products, allows attackers to bypass script blocking via the text/html;/json Content-Type value.
CVSS Score: 9.8 (CRITICAL)
References: https://noscript.net/getit#classic; https://twitter.com/Zerodium/status/[PII_REDACTED]02641409; https://www.zdnet.com/article/exploit-vendor-drops-tor-browser-zero-day-on-twitter/
CVE: CVE-2018-15310
Published: 2018-09-13
Description: A vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3 discloses the BIG-IP software version in rewritten pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://support.f5.com/csp/article/K40625021; https://support.f5.com/csp/article/K40625021
CVE: CVE-2018-16985
Published: 2018-09-13
Description: In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall and MEM_read32. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/inikep/lizard/issues/18; https://github.com/inikep/lizard/issues/18
CVE: CVE-2018-5545
Published: 2018-09-13
Description: On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105344; https://support.f5.com/csp/article/K20226900; http://www.securityfocus.com/bid/105344
CVE: CVE-2018-5548
Published: 2018-09-13
Description: On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://sbudella.altervista.org/blog/20180911-cve-2018-5548.html; http://www.securityfocus.com/bid/105353; https://support.f5.com/csp/article/K66171422
CVE: CVE-2018-5549
Published: 2018-09-13
Description: On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing certain elements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105345; https://support.f5.com/csp/article/K05018525; http://www.securityfocus.com/bid/105345
CVE: CVE-2018-1698
Published: 2018-09-13
Description: IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information from error messages. IBM X-Force ID: 145967.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105343; https://exchange.xforce.ibmcloud.com/vulnerabilities/145967; https://www.ibm.com/support/docview.wss?uid=ibm10728857
CVE: CVE-2018-16987
Published: 2018-09-13
Description: Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: https://ci.squashtest.org/mantis/view.php?id=7553; https://www.openwall.com/lists/oss-security/2018/09/13/1; https://ci.squashtest.org/mantis/view.php?id=7553
CVE: CVE-2018-16741
Published: 2018-09-13
Description: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or > characters within a file created by the "faxq-helper activate <jobid>" command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://lists.debian.org/debian-lts-announce/2018/09/msg00012.html; https://www.debian.org/security/2018/dsa-4291; https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE: CVE-2018-16742
Published: 2018-09-13
Description: An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty; https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE: CVE-2018-16743
Published: 2018-09-13
Description: An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty; https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE: CVE-2018-16744
Published: 2018-09-13
Description: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty; https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE: CVE-2018-16745
Published: 2018-09-13
Description: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty; https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty
CVE: CVE-2018-16796
Published: 2018-09-13
Description: HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://seclists.org/bugtraq/2018/Sep/27; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-015.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/149824
CVE: CVE-2018-16999
Published: 2018-09-13
Description: Netwide Assembler (NASM) 2.14rc15 has an invalid memory write (segmentation fault) in expand_smacro in preproc.c, which allows attackers to cause a denial of service via a crafted input file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392508
CVE: CVE-2018-17000
Published: 2018-09-13
Description: A NULL pointer dereference in the function _TIFFmemcmp at tif_unix.c (called from TIFFWriteDirectoryTagTransferfunction) in LibTIFF 4.0.9 allows an attacker to cause a denial-of-service through a crafted tiff file. This vulnerability can be triggered by the executable tiffcp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://bugzilla.maptools.org/show_bug.cgi?id=2811; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html; http://www.securityfocus.com/bid/105342
CVE: CVE-2018-17004
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wlan_access name.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_00/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_00/README.md
CVE: CVE-2018-17005
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall dmz enable.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_01/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_01/README.md
CVE: CVE-2018-17006
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for firewall lan_manage mac2.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_02/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_02/README.md
CVE: CVE-2018-17007
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_wds_2g ssid.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_03/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_03/README.md
CVE: CVE-2018-17008
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g power.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_04/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_04/README.md
CVE: CVE-2018-17009
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g isolate.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_05/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_05/README.md
CVE: CVE-2018-17010
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for wireless wlan_host_2g bandwidth.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_06/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_06/README.md
CVE: CVE-2018-17011
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for hosts_info para sun.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_07/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_07/README.md
CVE: CVE-2018-17012
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for hosts_info set_block_flag up_limit.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_08/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_08/README.md
CVE: CVE-2018-17013
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for protocol wan wan_rate.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_09/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_09/README.md
CVE: CVE-2018-17014
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for ip_mac_bind name.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_10/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_10/README.md
CVE: CVE-2018-17015
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for ddns phddns username.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_11/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_11/README.md
CVE: CVE-2018-17016
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for reboot_timer name.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_12/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_12/README.md
CVE: CVE-2018-17017
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for dhcpd udhcpd enable.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_13/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_13/README.md
CVE: CVE-2018-17018
Published: 2018-09-13
Description: An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services (e.g., inetd, HTTP, DNS, and UPnP) via long JSON data for time_switch name.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_14/README.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/TP-Link/WR886N/inetd_task_dos_14/README.md
CVE: CVE-2018-10637
Published: 2018-09-13
Description: A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-119
References: http://www.securityfocus.com/bid/105328; https://ics-cert.us-cert.gov/advisories/ICSA-18-254-02; http://www.securityfocus.com/bid/105328
CVE: CVE-2018-1330
Published: 2018-09-13
Description: When parsing a malformed JSON payload, libprocess in Apache Mesos versions 1.4.0 to 1.5.0 might crash due to an uncaught exception. Parsing chunked HTTP requests with trailers can lead to a libprocess crash too because of the mistakenly planted assertion. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster inoperable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde%40%3Cdev.mesos.apache.org%3E; https://lists.apache.org/thread.html/395cb6bcf367702acd1e580a1f39b56cdd7a5953d0368b4c1adb1dde%40%3Cdev.mesos.apache.org%3E
CVE: CVE-2018-17019
Published: 2018-09-13
Description: In Bro through 2.5.5, there is a DoS in IRC protocol names command parsing in analyzer/protocol/irc/IRC.cc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/bro/bro/commit/c2b18849f8bb833253538f5dfedb4ed1dc176a30; https://github.com/bro/bro/commit/c2b18849f8bb833253538f5dfedb4ed1dc176a30
CVE: CVE-2018-17020
Published: 2018-09-13
Description: ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line.
CVSS Score: 7.5 (HIGH)
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ASUS%20GT-AC5300%20DOS1.MD; https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ASUS%20GT-AC5300%20DOS1.MD
CVE: CVE-2018-17021
Published: 2018-09-13
Description: Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ac5300_xss/ASUS%20GT-AC5300%20XSS.MD; https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ac5300_xss/ASUS%20GT-AC5300%20XSS.MD
CVE: CVE-2018-17022
Published: 2018-09-13
Description: Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact by setting a long sh_path0 value and then sending an appGet.cgi?hook=select_list("Storage_x_SharedPath") request, because ej_select_list in router/httpd/web.c uses strcpy.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/buffer_overflow/ASUS%20GT-AC5300%20stack%20overflow.MD; https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/buffer_overflow/ASUS%20GT-AC5300%20stack%20overflow.MD
CVE: CVE-2018-17023
Published: 2018-09-13
Description: Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/csrf_bypass_referer/ASUS%20GT-AC5300%20csrf%20bypass%20referer.MD; https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/csrf_bypass_referer/ASUS%20GT-AC5300%20csrf%20bypass%20referer.MD
CVE: CVE-2018-17024
Published: 2018-09-13
Description: admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an add_page action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/452; https://github.com/monstra-cms/monstra/issues/458; https://github.com/monstra-cms/monstra/issues/452
CVE: CVE-2018-17025
Published: 2018-09-13
Description: admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page action for a page with no special role.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/458; https://github.com/monstra-cms/monstra/issues/458
CVE: CVE-2018-17026
Published: 2018-09-13
Description: admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page&name=error404 action, a different vulnerability than CVE-2018-10121.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/25; https://github.com/bg5sbk/MiniCMS/issues/25
CVE: CVE-2018-17030
Published: 2018-09-14
Description: BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to execute arbitrary code via /core/admin/auto-modules/forms/process.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/bigtreecms/BigTree-CMS/issues/342; https://github.com/bigtreecms/BigTree-CMS/issues/342
CVE: CVE-2018-17031
Published: 2018-09-14
Description: In Gogs 0.11.53, an attacker can use a crafted .eml file to trigger MIME type sniffing, which leads to XSS, as demonstrated by Internet Explorer, because an "X-Content-Type-Options: nosniff" header is not sent.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gogs/gogs/issues/5397; https://github.com/gogs/gogs/issues/5397
CVE: CVE-2018-17034
Published: 2018-09-14
Description: UCMS 1.4.6 has XSS via the install/index.php mysql_dbname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/blackstar24/UCMS/blob/master/xss.md; https://github.com/blackstar24/UCMS/blob/master/xss.md
CVE: CVE-2018-17035
Published: 2018-09-14
Description: UCMS 1.4.6 has SQL injection during installation via the install/index.php mysql_dbname parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blackstar24/UCMS/blob/master/README.md; https://github.com/blackstar24/UCMS/blob/master/README.md
CVE: CVE-2018-17036
Published: 2018-09-14
Description: An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/blackstar24/UCMS/blob/master/phpinfo.md; https://github.com/blackstar24/UCMS/blob/master/phpinfo.md
CVE: CVE-2018-17037
Published: 2018-09-14
Description: user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://github.com/blackstar24/UCMS/blob/master/level.md; https://github.com/blackstar24/UCMS/blob/master/level.md
CVE: CVE-2018-17039
Published: 2018-09-14
Description: MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/24; https://github.com/bg5sbk/MiniCMS/issues/24