deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-18097
Published: 2018-04-06
Description: The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the title of a Trello card.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103764; https://jira.atlassian.com/browse/JRASERVER-67076; http://www.securityfocus.com/bid/103764
CVE: CVE-2017-18098
Published: 2018-04-06
Description: The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through various fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103765; https://jira.atlassian.com/browse/JRASERVER-67075; http://www.securityfocus.com/bid/103765
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-06
Description: GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html; http://rachelbythebay.com/w/2018/04/05/bangpatch/; https://access.redhat.com/errata/RHSA-2018:1199
CVE: CVE-2018-1270
Published: 2018-04-06
Description: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-358
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103696
CVE: CVE-2018-1271
Published: 2018-04-06
Description: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103699
CVE: CVE-2018-1272
Published: 2018-04-06
Description: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103697
CVE: CVE-2018-7506
Published: 2018-04-06
Description: The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103722; https://ics-cert.us-cert.gov/advisories/ICSA-18-095-02; http://www.securityfocus.com/bid/103722
CVE: CVE-2014-2359
Published: 2018-04-06
Description: OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/94788; https://ioactive.com/pdfs/IOActive_Advisory_OleumTech.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/94788
CVE: CVE-2014-3539
Published: 2018-04-06
Description: base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2015/02/07/1; https://bugzilla.redhat.com/show_bug.cgi?id=1116485; http://www.openwall.com/lists/oss-security/2015/02/07/1
CVE: CVE-2014-5034
Published: 2018-04-06
Description: Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html; https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery; https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html
CVE: CVE-2014-5072
Published: 2018-04-06
Description: Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014-5072; https://www.wpsecurityauditlog.com/plugin-change-log/; https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014-5072
CVE: CVE-2018-9315
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9314.  Reason: This candidate is a reservation duplicate of CVE-2018-9314.  Notes: All CVE users should reference CVE-2018-9314 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9316
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9312.  Reason: This candidate is a reservation duplicate of CVE-2018-9312.  Notes: All CVE users should reference CVE-2018-9312 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9317
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9313.  Reason: This candidate is a reservation duplicate of CVE-2018-9313.  Notes: All CVE users should reference CVE-2018-9313 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9319
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9318.  Reason: This candidate is a reservation duplicate of CVE-2018-9318.  Notes: All CVE users should reference CVE-2018-9318 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9321
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9320.  Reason: This candidate is a reservation duplicate of CVE-2018-9320.  Notes: All CVE users should reference CVE-2018-9320 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9323
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9322.  Reason: This candidate is a reservation duplicate of CVE-2018-9322.  Notes: All CVE users should reference CVE-2018-9322 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9324
Published: 2018-04-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9311.  Reason: This candidate is a reservation duplicate of CVE-2018-9311.  Notes: All CVE users should reference CVE-2018-9311 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-6876
Published: 2018-04-06
Description: The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier.  NOTE: this vulnerability was fixed with commit ad732f00b411b092c66a04c359da0f16ec3b387, but the version number was not changed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://hmarco.org/bugs/s3dvt_0.2.2-root-shell.html; http://packetstormsecurity.com/files/126887/s3dvt-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2014/Jun/10
CVE: CVE-2014-1226
Published: 2018-04-06
Description: The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier.  NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-6876.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://hmarco.org/bugs/CVE-2014-1226-s3dvt_0.2.2-root-shell.html; http://seclists.org/fulldisclosure/2014/Jun/12; http://www.openwall.com/lists/oss-security/2014/06/03/13
CVE: CVE-2018-9838
Published: 2018-04-06
Description: The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow which, in situations where marshalled data is accepted from an untrusted source, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted object.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://caml.inria.fr/mantis/view.php?id=7765; https://security.gentoo.org/glsa/202007-48; https://caml.inria.fr/mantis/view.php?id=7765
CVE: CVE-2018-9331
Published: 2018-04-07
Description: An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter. This can be leveraged for database access by deleting install.lock.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/cherryla/zzcms/blob/master/adv.php.md; https://github.com/cherryla/zzcms/blob/master/adv.php.md
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9092.  Reason: This candidate is a reservation duplicate of CVE-2018-9092.  Notes: All CVE users should reference CVE-2018-9092 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-9841
Published: 2018-04-07
Description: The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=35eeff30caf34df835206f1c12bcf4b7c2bd6758; https://security.gentoo.org/glsa/202003-65; http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=35eeff30caf34df835206f1c12bcf4b7c2bd6758
CVE: CVE-2018-9844
Published: 2018-04-07
Description: The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-file-upload/#developers; https://www.exploit-db.com/exploits/44444/; https://www.iptanus.com/new-version-4-3-4-of-wordpress-file-upload-plugin/
CVE: CVE-2018-9330
Published: 2018-04-07
Description: register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.youtube.com/watch?v=LRK3c_DhXn4; https://www.youtube.com/watch?v=LRK3c_DhXn4
CVE: CVE-2018-9325
Published: 2018-04-07
Description: Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://blog.etherpad.org/2018/04/07/important-release-1-6-4/; http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE: CVE-2018-9326
Published: 2018-04-07
Description: Etherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
References: http://blog.etherpad.org/2018/04/07/important-release-1-6-4/; http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE: CVE-2018-9327
Published: 2018-04-07
Description: Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to be configured to use a document database (DirtyDB, CouchDB, MongoDB, or RethinkDB).
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://blog.etherpad.org/2018/04/07/important-release-1-6-4/; http://blog.etherpad.org/2018/04/07/important-release-1-6-4/
CVE: CVE-2018-9846
Published: 2018-04-07
Description: In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the unsanitized, user-controlled "_uid" parameter (in an archive.php _task=mail&_mbox=INBOX&_action=plugin.move2archive request) to perform an MX (IMAP) injection attack by placing an IMAP command after a %0d%0a sequence. NOTE: this is less easily exploitable in 1.3.4 and later because of a Same Origin Policy protection mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/roundcube/roundcubemail/issues/6229; https://github.com/roundcube/roundcubemail/issues/6238; https://medium.com/%40ndrbasi/cve-2018-9846-roundcube-303097048b0a
CVE: CVE-2018-9847
Published: 2018-04-07
Description: In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-update-template-getshell/index.html; http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-update-template-getshell/index.html
CVE: CVE-2018-9848
Published: 2018-04-07
Description: In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to execute arbitrary PHP code by first using an Admin-Admin-Configsave request to change the config[upload_class] value from jpg,gif,png,jpeg to jpg,gif,png,jpeg,php and then making an Admin-Upload-Upload request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-upload-getshell/index.html; http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-upload-getshell/index.html
CVE: CVE-2018-9850
Published: 2018-04-08
Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an Admin-Data-del request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-filedelete/index.html; http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-filedelete/index.html
CVE: CVE-2018-9851
Published: 2018-04-08
Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-DirectoryTraversal/index.html; http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-DirectoryTraversal/index.html
CVE: CVE-2018-9852
Published: 2018-04-08
Description: In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query string within a Home-Hits request, as demonstrated hy sid=user,password%20from%20mysql.user%23.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-sqli/index.html; http://www.atksec.com/cve/GxlcmsQY-v1.0.0713-sqli/index.html
CVE: CVE-2017-18258
Published: 2018-04-08
Description: The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://git.gnome.org/browse/libxml2/commit/?id=e2a9122b8dde53d320750451e9907a7dcb2ca8bb; https://kc.mcafee.com/corporate/index?page=content&id=SB10284; https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html
CVE: CVE-2018-6905
Published: 2018-04-08
Description: The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040755; https://forge.typo3.org/issues/84191; https://github.com/pradeepjairamani/TYPO3-XSS-POC
CVE: CVE-2018-9856
Published: 2018-04-09
Description: Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Kotti/Kotti/issues/551; https://github.com/Kotti/Kotti/issues/551
CVE: CVE-2018-9857
Published: 2018-04-09
Description: PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/Y9uEC4nu; https://www.exploit-db.com/exploits/44486/; https://pastebin.com/Y9uEC4nu
CVE: CVE-2018-0545
Published: 2018-04-09
Description: LXR version 1.0.0 to 2.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://jvn.jp/en/jp/JVN72589538/index.html; http://lxr.sourceforge.net/en/bugsandlimits.php; http://jvn.jp/en/jp/JVN72589538/index.html
CVE: CVE-2018-0553
Published: 2018-04-09
Description: The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN43382653/index.html; https://play.google.com/store/apps/details?id=jp.co.glamo.iremoconwifi; http://jvn.jp/en/jp/JVN43382653/index.html
CVE: CVE-2018-0554
Published: 2018-04-09
Description: Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: http://buffalo.jp/support_s/s20180328.html; http://jvn.jp/en/jp/JVN93397125/index.html; http://buffalo.jp/support_s/s20180328.html
CVE: CVE-2018-0555
Published: 2018-04-09
Description: Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://buffalo.jp/support_s/s20180328.html; http://jvn.jp/en/jp/JVN93397125/index.html; http://buffalo.jp/support_s/s20180328.html
CVE: CVE-2018-0556
Published: 2018-04-09
Description: Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://buffalo.jp/support_s/s20180328.html; http://jvn.jp/en/jp/JVN93397125/index.html; http://buffalo.jp/support_s/s20180328.html
CVE: CVE-2018-1308
Published: 2018-04-09
Description: This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://issues.apache.org/jira/browse/SOLR-11971; https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E; https://lists.debian.org/debian-lts-announce/2018/04/msg00025.html
CVE: CVE-2018-9862
Published: 2018-04-09
Description: util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue to CVE-2016-3697.
CVSS Score: 7.8 (HIGH)
CWE: CWE-838
References: http://www.securityfocus.com/bid/103738; https://github.com/hyperhq/hyperstart/pull/348; http://www.securityfocus.com/bid/103738
CVE: CVE-2018-9864
Published: 2018-04-09
Description: The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-live-chat-support/#developers; https://www.gubello.me/blog/wp-live-chat-support-8-0-05-stored-xss/; https://www.youtube.com/watch?v=eHG1pWaez9w
CVE: CVE-2017-2826
Published: 2018-04-09
Description: An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0327; https://lists.debian.org/debian-lts-announce/2019/03/msg00010.html
CVE: CVE-2018-1217
Published: 2018-04-09
Description: Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could potentially allow a remote unauthenticated attacker to read or change the Local Download Service (LDLS) credentials. The LDLS credentials are used to connect to Dell EMC Online Support. If the LDLS configuration was changed to an invalid configuration, then Avamar Installation Manager may not be able to connect to Dell EMC Online Support web site successfully. The remote unauthenticated attacker can also read and use the credentials to login to Dell EMC Online Support, impersonating the AVI service actions using those credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: http://seclists.org/fulldisclosure/2018/Apr/14; http://www.securitytracker.com/id/1040641; https://www.exploit-db.com/exploits/44441/