deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-12410
Published: 2018-10-10
Description: The web server component of TIBCO Software Inc's Spotfire Statistics Services contains multiple vulnerabilities that may allow the remote execution of code. Without needing to authenticate, an attacker may be able to remotely execute code with the permissions of the system account used to run the web server component. Affected releases are TIBCO Software Inc. TIBCO Spotfire Statistics Services versions up to and including 7.11.0.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105558; https://www.tibco.com/support/advisories/2018/10/tibco-security-advisory-october-10-2018-tibco-spotfire-statistics; http://www.securityfocus.com/bid/105558
CVE: CVE-2018-12541
Published: 2018-10-10
Description: In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-789, CWE-119
References: https://access.redhat.com/errata/RHSA-2018:2946; https://bugs.eclipse.org/bugs/show_bug.cgi?id=539170; https://github.com/eclipse-vertx/vert.x/issues/2648
CVE: CVE-2018-12542
Published: 2018-10-10
Description: In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location that is outside of that directory when running on Windows Operating Systems.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=539171; https://github.com/vert-x3/vertx-web/issues/1025; https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2018-12544
Published: 2018-10-10
Description: In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the developer uses the Eclipse Vert.x OpenAPI XML type validator to validate a provided schema.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://access.redhat.com/errata/RHSA-2018:2946; https://bugs.eclipse.org/bugs/show_bug.cgi?id=539568; https://github.com/vert-x3/vertx-web/issues/1021
CVE: CVE-2018-12455
Published: 2018-10-10
Description: Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2018/Oct/18; http://seclists.org/fulldisclosure/2018/Oct/18
CVE: CVE-2018-12456
Published: 2018-10-10
Description: Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2018/Oct/18; http://seclists.org/fulldisclosure/2018/Oct/18
CVE: CVE-2018-12596
Published: 2018-10-10
Description: Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden (normally available exclusively for local admins).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://seclists.org/fulldisclosure/2018/Oct/15; https://github.com/alt3kx/CVE-2018-12596; https://medium.com/%40alt3kx/ektron-content-management-system-cms-9-20-sp2-remote-re-enabling-users-cve-2018-12596-bdf1e3a05158
CVE: CVE-2018-13789
Published: 2018-10-10
Description: An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-294, CWE-522
References: https://www.quantumleap.it/infocad-facility-management-cve-2018-13789-unauthenticated-webservice-allows-retrieval-arbitrary-files/; https://www.quantumleap.it/infocad-facility-management-cve-2018-13789-unauthenticated-webservice-allows-retrieval-arbitrary-files/
CVE: CVE-2018-16737
Published: 2018-10-10
Description: tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: http://tinc-vpn.org/security/; http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2018-16738
Published: 2018-10-10
Description: tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.
CVSS Score: 3.7 (LOW)
CWE: CWE-287
References: http://tinc-vpn.org/security/; http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=d3297fbd3b8c8c8a4661f5bbf89aca5cacba8b5a; https://www.debian.org/security/2018/dsa-4312
CVE: CVE-2018-16758
Published: 2018-10-10
Description: Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-306
References: http://tinc-vpn.org/security/; http://www.tinc-vpn.org/git/browse?p=tinc%3Ba=commit%3Bh=e97943b7cc9c851ae36f5a41e2b6102faa74193f; https://www.debian.org/security/2018/dsa-4312
CVE: CVE-2018-17337
Published: 2018-10-10
Description: Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Oct/18; http://seclists.org/fulldisclosure/2018/Oct/18
CVE: CVE-2018-17784
Published: 2018-10-10
Description: Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://twitter.com/purplemet/status/[PII_REDACTED]86369537; https://www.exploit-db.com/exploits/45594/; https://www.purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilities
CVE: CVE-2018-18061
Published: 2018-10-10
Description: An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://seclists.org/bugtraq/2018/Oct/25; https://seclists.org/bugtraq/2018/Oct/25
CVE: CVE-2018-18062
Published: 2018-10-10
Description: An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/bugtraq/2018/Oct/26; https://seclists.org/bugtraq/2018/Oct/26
CVE: CVE-2018-18240
Published: 2018-10-11
Description: Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/pippo-java/pippo/issues/454; https://github.com/pippo-java/pippo/issues/454
CVE: CVE-2018-1706
Published: 2018-10-11
Description: IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10719669; https://exchange.xforce.ibmcloud.com/vulnerabilities/146341; http://www.ibm.com/support/docview.wss?uid=ibm10719669
CVE: CVE-2018-1708
Published: 2018-10-11
Description: IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/146343; https://www.ibm.com/support/docview.wss?uid=ibm10719667; https://exchange.xforce.ibmcloud.com/vulnerabilities/146343
CVE: CVE-2018-1724
Published: 2018-10-11
Description: IBM Spectrum LSF 9.1.1 9.1.2, 9.1.3, and 10.1 could allow a local user to change their job user at job submission time due to improper file permission settings. IBM X-Force ID: 147439.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/106642; https://exchange.xforce.ibmcloud.com/vulnerabilities/147439; https://www-01.ibm.com/support/docview.wss?uid=ibm10734767
CVE: CVE-2018-1738
Published: 2018-10-11
Description: IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. IBM X-Force ID: 147907.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=ibm10733309; https://exchange.xforce.ibmcloud.com/vulnerabilities/147907; http://www.ibm.com/support/docview.wss?uid=ibm10733309
CVE: CVE-2018-1745
Published: 2018-10-11
Description: IBM Security Key Lifecycle Manager 2.7 and 3.0 could allow an unauthenticated user to restart the SKLM server due to missing authentication. IBM X-Force ID: 148424.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/105554; https://exchange.xforce.ibmcloud.com/vulnerabilities/148424; https://www.ibm.com/support/docview.wss?uid=ibm10733355
CVE: CVE-2018-12449
Published: 2018-10-11
Description: The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://cve.naver.com/detail/cve-2018-12449; https://cve.naver.com/detail/cve-2018-12449
CVE: CVE-2018-18242
Published: 2018-10-11
Description: youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yanchongchong/swallow/issues/4; https://github.com/yanchongchong/swallow/issues/4
CVE: CVE-2018-18215
Published: 2018-10-11
Description: In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/yanchongchong/swallow/issues/3; https://github.com/yanchongchong/swallow/issues/3
CVE: CVE-2018-9206
Published: 2018-10-11
Description: Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.securityfocus.com/bid/105679; http://www.securityfocus.com/bid/106629; http://www.vapidlabs.com/advisory.php?v=204
CVE: CVE-2018-15766
Published: 2018-10-11
Description: On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-security-policy-overwrite-vulnerability?lang=en; https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-security-policy-overwrite-vulnerability?lang=en
CVE: CVE-2018-18257
Published: 2018-10-11
Description: An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/batch&command=deleteFile&fileName= or index.php?r=admini/template/batch&command=deleteFolder&folderName=../ directory traversal URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_2.pdf; https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_2.pdf
CVE: CVE-2018-18258
Published: 2018-10-11
Description: An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_1.pdf; https://kc.mcafee.com/corporate/index?page=content&id=SB10284; https://github.com/rakjong/vuln/blob/master/Bagecms_vuln_1.pdf
CVE: CVE-2018-12441
Published: 2018-10-11
Description: The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows "Everyone" group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/TheRealJoeDoran/CVE/blob/master/CVE-2018-12441/CVE-2018-12441.txt; https://github.com/TheRealJoeDoran/CVE/blob/master/CVE-2018-12441/CVE-2018-12441.txt
CVE: CVE-2018-17927
Published: 2018-10-11
Description: In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files lacking user input validation, which may cause the system to write outside the intended buffer area and may allow remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/105682; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03; http://www.securityfocus.com/bid/105682
CVE: CVE-2018-17929
Published: 2018-10-11
Description: In Delta Industrial Automation TPEditor, TPEditor Versions 1.90 and prior, multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files lacking user input validation before copying data from project files onto the stack and may allow an attacker to remotely execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/105682; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-03; http://www.securityfocus.com/bid/105682
CVE: CVE-2017-1231
Published: 2018-10-12
Description: IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/123910; https://www-01.ibm.com/support/docview.wss?uid=ibm10724511; https://exchange.xforce.ibmcloud.com/vulnerabilities/123910
CVE: CVE-2018-1673
Published: 2018-10-12
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145108.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041845; https://exchange.xforce.ibmcloud.com/vulnerabilities/145108; https://www.ibm.com/support/docview.wss?uid=ibm10731155
CVE: CVE-2018-1838
Published: 2018-10-12
Description: IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper handling of passwords. IBM X-Force ID: 150811.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/150811; https://www.ibm.com/support/docview.wss?uid=ibm10734167; https://exchange.xforce.ibmcloud.com/vulnerabilities/150811
CVE: CVE-2018-18225
Published: 2018-10-12
Description: In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/105583; http://www.securitytracker.com/id/1041909
CVE: CVE-2018-18226
Published: 2018-10-12
Description: In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed in epan/dissectors/packet-steam-ihs-discovery.c by changing the memory-management approach.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/105583; http://www.securitytracker.com/id/1041909
CVE: CVE-2018-18227
Published: 2018-10-12
Description: In Wireshark 2.6.0 to 2.6.3 and 2.4.0 to 2.4.9, the MS-WSP protocol dissector could crash. This was addressed in epan/dissectors/packet-mswsp.c by properly handling NULL return values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/105583; http://www.securitytracker.com/id/1041909
CVE: CVE-2018-1533
Published: 2018-10-12
Description: IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142431.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10734697; https://exchange.xforce.ibmcloud.com/vulnerabilities/142431; http://www.ibm.com/support/docview.wss?uid=ibm10734697
CVE: CVE-2018-1534
Published: 2018-10-12
Description: IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142432.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10734697; https://exchange.xforce.ibmcloud.com/vulnerabilities/142432; http://www.ibm.com/support/docview.wss?uid=ibm10734697
CVE: CVE-2018-1770
Published: 2018-10-12
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148686.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securitytracker.com/id/1041874; https://exchange.xforce.ibmcloud.com/vulnerabilities/148686; https://www.ibm.com/support/docview.wss?uid=ibm10729521
CVE: CVE-2018-1844
Published: 2018-10-12
Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150904.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/150904; https://www.ibm.com/support/docview.wss?uid=ibm10732755; https://exchange.xforce.ibmcloud.com/vulnerabilities/150904
CVE: CVE-2018-12469
Published: 2018-10-12
Description: Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 Update 2 and earlier, 3.0 before Patch Update 12, and 4.0 before Patch Update 2 causes a null pointer dereference (CWE-476) and subsequent denial of service due to process termination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29624/enterprise-server-security-fix-october-2018; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29624/enterprise-server-security-fix-october-2018
CVE: CVE-2018-8890
Published: 2018-10-12
Description: An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000052161&language=en_US; http://support.blackberry.com/kb/articleDetail?articleNumber=000052161&language=en_US
CVE: CVE-2018-17888
Published: 2018-10-12
Description: NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330, CWE-330
References: http://www.securityfocus.com/bid/105717; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; http://www.securityfocus.com/bid/105717
CVE: CVE-2018-17890
Published: 2018-10-12
Description: NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-477
References: http://www.securityfocus.com/bid/105717; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; http://www.securityfocus.com/bid/105717
CVE: CVE-2018-17892
Published: 2018-10-12
Description: NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended, which could allow user account compromise and may allow for remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/105717; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; http://www.securityfocus.com/bid/105717
CVE: CVE-2018-17894
Published: 2018-10-12
Description: NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/105717; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; http://www.securityfocus.com/bid/105717
CVE: CVE-2018-17896
Published: 2018-10-12
Description: Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The affected controllers utilize hard-coded credentials which may allow an attacker gain unauthorized access to the maintenance functions and obtain or modify information. This attack can be executed only during maintenance work.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03; https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03
CVE: CVE-2018-17898
Published: 2018-10-12
Description: Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The controller application fails to prevent memory exhaustion by unauthorized requests. This could allow an attacker to cause the controller to become unstable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03; https://web-material3.yokogawa.com/YSAR-18-0007-E.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-18-151-03