deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18608
Published: 2018-10-23
Description: DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATH_INFO to /member/index.php, /member/pm.php, /member/content_list.php, or /plus/feedback.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ky-j/dedecms/files/2504649/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7.SP2.docx; https://github.com/ky-j/dedecms/issues/8; https://github.com/ky-j/dedecms/files/2504649/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7.SP2.docx
CVE: CVE-2018-18622
Published: 2018-10-23
Description: An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/caokang/waimai/issues/8; https://github.com/caokang/waimai/issues/8
CVE: CVE-2018-18626
Published: 2018-10-23
Description: An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.
CVSS Score: 7.5 (HIGH)
References: http://str3am.me/2018/10/23/CVE_01/#more; http://str3am.me/2018/10/23/CVE_01/#more
CVE: CVE-2017-18349
Published: 2018-10-23
Description: parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://fortiguard.com/encyclopedia/ips/44059; https://github.com/alibaba/fastjson/wiki/security_update_20170315; https://github.com/pippo-java/pippo/issues/466
CVE: CVE-2018-14806
Published: 2018-10-23
Description: Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/105728; http://www.securitytracker.com/id/1041939; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
CVE: CVE-2018-14816
Published: 2018-10-23
Description: Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified, which may allow an attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/105728; http://www.securitytracker.com/id/1041939; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
CVE: CVE-2018-14820
Published: 2018-10-23
Description: Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-73, CWE-20
References: http://www.securityfocus.com/bid/105728; http://www.securitytracker.com/id/1041939; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
CVE: CVE-2018-14828
Published: 2018-10-23
Description: Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker to access those files and perform actions at a system administrator level.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: http://www.securityfocus.com/bid/105728; http://www.securitytracker.com/id/1041939; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-01%2C
CVE: CVE-2018-18628
Published: 2018-10-23
Description: An issue was discovered in Pippo 1.11.0. The function SerializationSessionDataTranscoder.decode() calls ObjectInputStream.readObject() to deserialize a SessionData object without checking the object types. An attacker can create a malicious object, base64 encode it, and place it in the PIPPO_SESSION field of a cookie. Sending this cookie may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/pippo-java/pippo/issues/458; https://github.com/pippo-java/pippo/issues/458
CVE: CVE-2018-12901
Published: 2018-10-23
Description: A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation for the signin.php page. A successful exploit could allow an attacker to execute arbitrary scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0007; https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0007
CVE: CVE-2018-15497
Published: 2018-10-23
Description: The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality. An attacker can exploit this issue remotely, by sending a particular pattern of SIP/SDP packets, to cause a denial of service state in the affected devices and probably remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009; https://www.nccgroup.trust/uk/our-research/technical-advisory-mitel-mivoice-5330e-memory-corruption-flaw/; https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0009
CVE: CVE-2018-16226
Published: 2018-10-23
Description: A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the start.asp page. A successful exploit could allow the attacker to execute arbitrary scripts to access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0008; https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0008
CVE: CVE-2018-16235
Published: 2018-10-23
Description: Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://community.telligent.com/community/10/w/user-documentation/61996/release-notes; https://community.telligent.com/community/9/w/user-documentation/52752/release-notes; https://www.horizonsecurity.it/lang_EN/advisories/?a=10
CVE: CVE-2018-17444
Published: 2018-10-23
Description: A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/105711; https://support.citrix.com/article/CTX236992; http://www.securityfocus.com/bid/105711
CVE: CVE-2018-17445
Published: 2018-10-23
Description: A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/105711; https://support.citrix.com/article/CTX236992; http://www.securityfocus.com/bid/105711
CVE: CVE-2018-17446
Published: 2018-10-23
Description: A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/105711; https://support.citrix.com/article/CTX236992; http://www.securityfocus.com/bid/105711
CVE: CVE-2018-17447
Published: 2018-10-23
Description: An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: http://www.securityfocus.com/bid/105711; https://support.citrix.com/article/CTX236992; http://www.securityfocus.com/bid/105711
CVE: CVE-2018-17448
Published: 2018-10-23
Description: An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105711; https://support.citrix.com/article/CTX236992; http://www.securityfocus.com/bid/105711
CVE: CVE-2018-17873
Published: 2018-10-23
Description: An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/149867/WiFiRanger-7.0.8rc3-Incorrect-Access-Control-Privilege-Escalation.html; http://packetstormsecurity.com/files/149867/WiFiRanger-7.0.8rc3-Incorrect-Access-Control-Privilege-Escalation.html
CVE: CVE-2018-17877
Published: 2018-10-23
Description: A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize() function to prevent a malicious contract from being called, but the attacker can bypass it by writing the core code in the constructor of their exploit code. Therefore, it allows attackers to always win and get rewards.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17877; https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17877
CVE: CVE-2018-17968
Published: 2018-10-23
Description: A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17968; https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17968
CVE: CVE-2018-18437
Published: 2018-10-23
Description: In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.binaryworld.it/guidepoc.asp; https://www.exploit-db.com/exploits/45668/; http://www.binaryworld.it/guidepoc.asp
CVE: CVE-2018-18467
Published: 2018-10-23
Description: An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing opened conversation by sending an intent.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/siacs/Conversations/commit/7177c523a1b31988666b9337249a4f1d0c36f479; https://github.com/siacs/Conversations/commit/7177c523a1b31988666b9337249a4f1d0c36f479
CVE: CVE-2018-18475
Published: 2018-10-23
Description: Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html; http://seclists.org/fulldisclosure/2018/Oct/42; http://packetstormsecurity.com/files/149878/Zoho-ManageEngine-OpManager-12.3-Arbitrary-File-Upload.html
CVE: CVE-2018-7427
Published: 2018-10-23
Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.splunk.com/view/SP-CAAAP5T; https://www.splunk.com/view/SP-CAAAP5T
CVE: CVE-2018-7429
Published: 2018-10-23
Description: Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote attackers to cause a denial of service via a malformed HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.splunk.com/view/SP-CAAAP5T; https://www.splunk.com/view/SP-CAAAP5T
CVE: CVE-2018-7431
Published: 2018-10-23
Description: Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.splunk.com/view/SP-CAAAP5T; https://www.splunk.com/view/SP-CAAAP5T
CVE: CVE-2018-7432
Published: 2018-10-23
Description: Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of service via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.splunk.com/view/SP-CAAAP5T; https://www.splunk.com/view/SP-CAAAP5T
CVE: CVE-2018-1541
Published: 2018-10-24
Description: IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142596.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105744; https://exchange.xforce.ibmcloud.com/vulnerabilities/142596; https://www.ibm.com/support/docview.wss?uid=ibm10731225
CVE: CVE-2018-17935
Published: 2018-10-24
Description: All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and re-transmission. This can lead to unauthorized replay of a command, spoofing of an arbitrary message, or keeping the controlled load in a permanent "stop" state.
CVSS Score: 8.1 (HIGH)
CWE: CWE-294, CWE-294
References: http://www.securityfocus.com/bid/105732; https://ics-cert.us-cert.gov/advisories/ICSA-18-296-03; http://www.securityfocus.com/bid/105732
CVE: CVE-2018-11804
Published: 2018-10-24
Description: Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections from external hosts by default. A specially-crafted request to the zinc server could cause it to reveal information in files readable to the developer account running the build. Note that this issue does not affect end users of Spark, only developers building Spark from source code.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105756; https://lists.apache.org/thread.html/2b11aa4201e36f2ec8f728e722fe33758410f07784379cbefd0bda9d%40%3Cdev.spark.apache.org%3E; https://spark.apache.org/security.html#CVE-2018-11804
CVE: CVE-2018-15442
Published: 2018-10-24
Description: A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/105734; http://www.securitytracker.com/id/1041942; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181024-webex-injection
CVE: CVE-2018-11785
Published: 2018-10-24
Description: Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/105742; https://lists.apache.org/thread.html/cba8f18df15af862aa07c584d8dc85c44a199fb8f460edd498059247%40%3Cdev.impala.apache.org%3E; http://www.securityfocus.com/bid/105742
CVE: CVE-2018-11792
Published: 2018-10-24
Description: In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential security risk, such as having ALTER on a table and ALL on a particular database allows a user to move the table to a database with ALL, which will automatically grant that user with ALL privilege on that table due to the privilege inherited from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: http://www.securityfocus.com/bid/105739; https://lists.apache.org/thread.html/cba8f18df15af862aa07c584d8dc85c44a199fb8f460edd498059247%40%3Cdev.impala.apache.org%3E; http://www.securityfocus.com/bid/105739
CVE: CVE-2016-10729
Published: 2018-10-24
Description: An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command injection as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.exploit-db.com/exploits/39217/; https://www.exploit-db.com/exploits/39217/
CVE: CVE-2016-10730
Published: 2018-10-24
Description: An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses star to backup and restore data. It runs binaries with root permissions when parsing the command line argument --star-path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://www.exploit-db.com/exploits/39244/; https://www.exploit-db.com/exploits/39244/
CVE: CVE-2018-12650
Published: 2018-10-24
Description: Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeSearch page via 'prntDDLCntrlName' and 'prntFrmName'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/155232/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html; https://www.knowcybersec.com/2018/10/CVE-2018-12650-reflected-XSS.html; https://www.securethy.com/2018/10/CVE-2018-12650-reflected-XSS.html
CVE: CVE-2018-14812
Published: 2018-10-24
Description: An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/105543; https://ics-cert.us-cert.gov/advisories/ICSA-18-282-07; http://www.securityfocus.com/bid/105543
CVE: CVE-2018-18013
Published: 2018-10-24
Description: * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability.  NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://advisories.dxw.com/advisories/xen-mobile-vulnerable-to-code-execution-via-object-serialisation/; https://advisories.dxw.com/advisories/xen-mobile-vulnerable-to-code-execution-via-object-serialisation/
CVE: CVE-2018-18014
Published: 2018-10-24
Description: * Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands as root by making requests to private services listening on ports 8000, 30000 and 30001.  NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-287
References: https://advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root/; https://advisories.dxw.com/advisories/xen-mobile-backing-service-allows-unauthenticated-local-users-to-execute-system-commands-as-root/
CVE: CVE-2018-18476
Published: 2018-10-24
Description: mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/viraptor/881276ea61e8d56bac6e28454c79f1e6; https://github.com/nedap/mysql-binuuid-rails/pull/18; https://gist.github.com/viraptor/881276ea61e8d56bac6e28454c79f1e6
CVE: CVE-2018-18517
Published: 2018-10-24
Description: Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105725; http://www.securitytracker.com/id/1042023; https://support.citrix.com/article/CTX239002
CVE: CVE-2018-18547
Published: 2018-10-24
Description: Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period parameter, the list/directory/ dir_a parameter, or the filename to the list/directory/ URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149897/VestaCP-0.9.8-22-Cross-Site-Scripting.html; https://numanozdemir.com/vesta-vulns.txt; http://packetstormsecurity.com/files/149897/VestaCP-0.9.8-22-Cross-Site-Scripting.html
CVE: CVE-2018-18548
Published: 2018-10-24
Description: ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149898/AjentiCP-1.2.23.13-Cross-Site-Scripting.html; https://numanozdemir.com/ajenti-xss.txt; https://www.exploit-db.com/exploits/45691/
CVE: CVE-2018-18635
Published: 2018-10-24
Description: www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.08 and 2018.09 allows XSS via the admin/login/user/message/ PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MailCleaner/MailCleaner/commit/5f90a52785672fc688c1f85e472e84b8a0d008d8; https://github.com/MailCleaner/MailCleaner/issues/53; https://github.com/MailCleaner/MailCleaner/commit/5f90a52785672fc688c1f85e472e84b8a0d008d8
CVE: CVE-2018-18636
Published: 2018-10-24
Description: XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/149785/D-Link-DSL-2640T-Cross-Site-Scripting.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]