deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11156
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11157
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11158
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11159
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11160
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11161
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11162
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11163
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11164
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11165
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11166
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11167
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11168
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11169
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11170
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11171
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11172
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11173
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11174
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11175
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11176
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11177
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11178
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11179
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11180
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11181
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11182
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11183
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11184
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46).
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11185
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11186
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11187
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11188
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11189
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11190
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11191
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11192
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11193
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11194
Published: 2018-06-02
Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html; http://seclists.org/fulldisclosure/2018/May/71; https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE: CVE-2018-11564
Published: 2018-06-02
Description: Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to "/storage/poc.svg" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://ruffsecurity.blogspot.com/2018/05/my-first-cve-found.html; https://packetstormsecurity.com/files/148001/PageKit-CMS-1.0.13-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/44837/
CVE: CVE-2018-11679
Published: 2018-06-02
Description: An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability that can add an article via /index.php?case=table&act=add&table=archive&admin_dir=admin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.8sec.cc/archives/619; http://www.8sec.cc/cmseasy_addarticle.txt; http://www.8sec.cc/archives/619
CVE: CVE-2018-11680
Published: 2018-06-02
Description: An issue was discovered in CmsEasy 6.1_20180508. There is a CSRF vulnerability in the rich text editor that can add an IFRAME element. This might be used in a DoS attack if a referenced remote URL is refreshed at a rapid rate.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.8sec.cc/archives/619; http://www.8sec.cc/archives/619
CVE: CVE-2018-11629
Published: 2018-06-02
Description: Default and unremovable support credentials (user:lutron [CREDENTIAL_REDACTED]) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://sadfud.me/explotos/CVE-2018-11629; http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf; https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/
CVE: CVE-2018-11681
Published: 2018-06-02
Description: Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://sadfud.me/explotos/CVE-2018-11629; http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf; https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/
CVE: CVE-2018-11682
Published: 2018-06-02
Description: Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can be done through the ports revolve around controlling lighting, not code execution. A certain set of commands are listed, which bear some similarity to code, but they are not arbitrary and do not allow admin-level control of a machine
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://sadfud.me/explotos/CVE-2018-11629; http://www.lutron.com/TechnicalDocumentLibrary/040249.pdf; https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/
CVE: CVE-2017-18284
Published: 2018-06-04
Description: The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: https://bugs.gentoo.org/628770; https://security.gentoo.org/glsa/201806-03; https://bugs.gentoo.org/628770
CVE: CVE-2017-18285
Published: 2018-06-04
Description: The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveraging access to a certain account for a burp-server.conf change.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: https://bugs.gentoo.org/641842; https://security.gentoo.org/glsa/201806-03; https://security.gentoo.org/glsa/201904-05
CVE: CVE-2018-10761
Published: 2018-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-10762
Published: 2018-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-11683
Published: 2018-06-04
Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html; https://github.com/liblouis/liblouis/issues/591; https://usn.ubuntu.com/3672-1/
CVE: CVE-2018-11684
Published: 2018-06-04
Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html; https://github.com/liblouis/liblouis/issues/592; https://usn.ubuntu.com/3672-1/