deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7755
Published: 2018-03-08
Description: An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2019:2029; https://access.redhat.com/errata/RHSA-2019:2043; https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
CVE: CVE-2017-18222
Published: 2018-03-08
Description: In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a[PII_REDACTED]8308fc100f2aa87c; http://www.securityfocus.com/bid/103349; https://github.com/torvalds/linux/commit/412b65d15a7f8a[PII_REDACTED]8308fc100f2aa87c
CVE: CVE-2017-6152
Published: 2018-03-08
Description: A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/103441; https://support.f5.com/csp/article/K35195140; http://www.securityfocus.com/bid/103441
CVE: CVE-2017-7634
Published: 2018-03-08
Description: Cross-site scripting (XSS) vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-08; https://www.qnap.com/zh-tw/security-advisory/nas-201803-08
CVE: CVE-2017-7638
Published: 2018-03-08
Description: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-08; https://www.qnap.com/zh-tw/security-advisory/nas-201803-08
CVE: CVE-2017-7640
Published: 2018-03-08
Description: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-08; https://www.qnap.com/zh-tw/security-advisory/nas-201803-08
CVE: CVE-2017-7641
Published: 2018-03-08
Description: QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.qnap.com/zh-tw/security-advisory/nas-201803-08; https://www.qnap.com/zh-tw/security-advisory/nas-201803-08
CVE: CVE-2018-7757
Published: 2018-03-08
Description: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (memory consumption) via many read accesses to files in the /sys/class/sas_phy directory, as demonstrated by the /sys/class/sas_phy/phy-1:0:12/invalid_dword_count file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a491b1ab11ca0556d2fda1ff1301e862a2d44c4; http://www.securityfocus.com/bid/103348; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2017-9971
Published: 2018-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-9972
Published: 2018-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-9973
Published: 2018-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-9974
Published: 2018-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-9975
Published: 2018-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2018-1182
Published: 2018-03-08
Description: An issue was discovered in EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels (hardware appliance and software bundle deployments only); RSA Via Lifecycle and Governance version 7.0, all patch levels (hardware appliance and software bundle deployments only); RSA Identity Management & Governance (RSA IMG) versions 6.9.0, 6.9.1, all patch levels (hardware appliance and software bundle deployments only). It allows certain OS level users to execute arbitrary scripts with root level privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://seclists.org/fulldisclosure/2018/Mar/16; http://www.securityfocus.com/bid/103317; http://www.securitytracker.com/id/1040458
CVE: CVE-2018-1215
Published: 2018-03-08
Description: An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management (eManagement): Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.18, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.21, Dell EMC VASA Virtual Appliance versions prior to 8.4.0.514, and Dell EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier). A remote authenticated malicious user may potentially upload arbitrary maliciously crafted files in any location on the web server. By chaining this vulnerability with CVE-2018-1216, the attacker may use the default account to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2018/Feb/41; http://www.securityfocus.com/bid/103039; http://www.securitytracker.com/id/1040383
CVE: CVE-2018-1216
Published: 2018-03-08
Description: A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management (eManagement): Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.18, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.21, Dell EMC VASA Virtual Appliance versions prior to 8.4.0.514, and Dell EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier). They contain an undocumented default account (smc) with a hard-coded password that may be used with certain web servlets. A remote attacker with the knowledge of the hard-coded password and the message format may use vulnerable servlets to gain unauthorized access to the system. Note: This account cannot be used to log in via the web user interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2018/Feb/41; http://www.securityfocus.com/bid/103039; http://www.securitytracker.com/id/1040383
CVE: CVE-2018-1219
Published: 2018-03-08
Description: EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/fulldisclosure/2018/Mar/12; http://www.securityfocus.com/bid/103319; http://www.securitytracker.com/id/1040457
CVE: CVE-2018-1220
Published: 2018-03-08
Description: EMC RSA Archer, versions prior to 6.2.0.8, contains a redirect vulnerability in the QuickLinks feature. A remote attacker may potentially exploit this vulnerability to redirect genuine users to phishing websites with the intent of obtaining sensitive information from the users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://seclists.org/fulldisclosure/2018/Mar/12; http://www.securityfocus.com/bid/103319; http://www.securitytracker.com/id/1040457
CVE: CVE-2017-1625
Published: 2018-03-08
Description: IBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 133123.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22014284; http://www.securityfocus.com/bid/103398; https://exchange.xforce.ibmcloud.com/vulnerabilities/133123
CVE: CVE-2018-1387
Published: 2018-03-08
Description: IBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22014035; http://www.securityfocus.com/bid/103403; https://exchange.xforce.ibmcloud.com/vulnerabilities/138210
CVE: CVE-2018-1442
Published: 2018-03-08
Description: IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.4) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139598.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg22013500; http://www.securityfocus.com/bid/103368; https://exchange.xforce.ibmcloud.com/vulnerabilities/139598
CVE: CVE-2018-1443
Published: 2018-03-08
Description: An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.) This vulnerability can allow an attacker with authenticated access to trick SAML systems into authenticating as a different user without knowledge of the victim users password. IBM X-Force ID: 139754.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=swg22014160; http://www.ibm.com/support/docview.wss?uid=swg22014161; http://www.securityfocus.com/bid/103365
CVE: CVE-2018-4838
Published: 2018-03-08
Description: A vulnerability has been identified in EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module DNP3 variant (All versions < V1.04), EN100 Ethernet module PROFINET IO variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions < V1.22). The web interface (TCP/80) of affected devices allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions with known vulnerabilities.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-845879.pdf; https://www.securityfocus.com/bid/103379; https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01
CVE: CVE-2018-4839
Published: 2018-03-08
Description: A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions), Other SIPROTEC 4 relays (All versions), Other SIPROTEC Compact relays (All versions), SIPROTEC 4 7SD80 (All versions < V4.70), SIPROTEC 4 7SJ61 (All versions < V4.96), SIPROTEC 4 7SJ62 (All versions < V4.96), SIPROTEC 4 7SJ64 (All versions < V4.96), SIPROTEC 4 7SJ66 (All versions < V4.30), SIPROTEC Compact 7SJ80 (All versions < V4.77), SIPROTEC Compact 7SK80 (All versions < V4.77). An attacker with local access to the engineering system or in a privileged network position and able to obtain certain network traffic could possibly reconstruct access authorization passwords.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-326
References: https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01; https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf
CVE: CVE-2018-4840
Published: 2018-03-08
Description: A vulnerability has been identified in DIGSI 4 (All versions < V4.92), EN100 Ethernet module DNP3 variant (All versions < V1.05.00), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.30), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The device engineering mechanism allows an unauthenticated remote user to upload a modified device configuration overwriting access authorization passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-067-01; https://cert-portal.siemens.com/productcert/pdf/ssa-203306.pdf
CVE: CVE-2018-7866
Published: 2018-03-08
Description: A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/118; https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html
CVE: CVE-2018-7867
Published: 2018-03-08
Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/116; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7868
Published: 2018-03-08
Description: There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/113; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7869
Published: 2018-03-08
Description: There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/119; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
CVE: CVE-2018-7870
Published: 2018-03-08
Description: An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/117; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7871
Published: 2018-03-08
Description: There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/120; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7872
Published: 2018-03-08
Description: An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/114; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7873
Published: 2018-03-08
Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/111; https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html
CVE: CVE-2018-7874
Published: 2018-03-08
Description: An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/115; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
CVE: CVE-2018-7875
Published: 2018-03-08
Description: There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/112; https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html
CVE: CVE-2018-7876
Published: 2018-03-08
Description: In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/109; https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html
CVE: CVE-2018-7877
Published: 2018-03-08
Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260; https://github.com/libming/libming/issues/110; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260
CVE: CVE-2014-7271
Published: 2018-03-08
Description: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html; http://www.openwall.com/lists/oss-security/2014/10/06/4
CVE: CVE-2014-7272
Published: 2018-03-08
Description: Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to gain root privileges because code running as root performs write operations within a user home directory, and this user may have created links in advance (exploitation requires the user to win a race condition in the ~/.Xauthority chown case, but not other cases).
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141494.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141550.html; http://www.openwall.com/lists/oss-security/2014/10/06/4
CVE: CVE-2018-5313
Published: 2018-03-08
Description: A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions. The specific flaw exists within the access control that is set and modified during the installation of the product. The product sets weak access control restrictions. An attacker can leverage this vulnerability to execute arbitrary code under the context of Administrator, the IUSR account, or SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/146668/Rapid-Scada-5.5.0-Insecure-Permissions.html; http://seclists.org/fulldisclosure/2018/Mar/11; http://packetstormsecurity.com/files/146668/Rapid-Scada-5.5.0-Insecure-Permissions.html
CVE: CVE-2018-7183
Published: 2018-03-08
Description: Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted array.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://support.ntp.org/bin/view/Main/NtpBug3414; http://support.ntp.org/bin/view/Main/SecurityNotice#February_2018_ntp_4_2_8p11_NTP_S; http://www.securityfocus.com/bid/103351
CVE: CVE-2018-7889
Published: 2018-03-08
Description: gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://bugs.launchpad.net/calibre/+bug/1753870; https://github.com/kovidgoyal/calibre/commit/aeb5b036a0bf[PII_REDACTED]88b3c72bd68b6e4a7d; https://bugs.launchpad.net/calibre/+bug/1753870
CVE: CVE-2018-7890
Published: 2018-03-08
Description: A remote code execution issue was discovered in Zoho ManageEngine Applications Manager before 13.6 (build 13640). The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specified system. This endpoint calls several internal classes, and then executes a PowerShell script. If the specified system is OfficeSharePointServer, then the username and password parameters to this script are not validated, leading to Command Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/103358; https://github.com/rapid7/metasploit-framework/pull/9684; https://pentest.blog/advisory-manageengine-applications-manager-remote-code-execution-sqli-and/
CVE: CVE-2018-1069
Published: 2018-03-09
Description: Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284, CWE-732
References: http://www.securityfocus.com/bid/103364; https://bugzilla.redhat.com/show_bug.cgi?id=1552987; http://www.securityfocus.com/bid/103364