deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jenkins.io/security/advisory/2018-04-16/; https://jenkins.io/security/advisory/2018-04-16/
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured SMTP password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-04-16/; https://jenkins.io/security/advisory/2018-04-16/
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: A cross-site scripting vulnerability exists in Jenkins S3 Plugin 0.10.12 and older in src/main/resources/hudson/plugins/s3/S3ArtifactsProjectAction/jobMain.jelly that allows attackers able to control file names of uploaded files to define file names containing JavaScript that would be executed in another user's browser when that user performs some UI actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-04-16/; https://jenkins.io/security/advisory/2018-04-16/
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: A heap corruption of type CWE-120 exists in quassel version 0.12.4 in quasselcore in void DataStreamPeer::processMessage(const QByteArray &msg) datastreampeer.cpp line 62 that allows an attacker to execute code remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/quassel/quassel/blob/master/src/common/protocols/datastream/datastreampeer.cpp#L62; https://i.imgur.com/JJ4QcNq.png; https://lists.debian.org/debian-lts-announce/2018/05/msg00001.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-05-08
Description: A NULL Pointer Dereference of CWE-476 exists in quassel version 0.12.4 in the quasselcore void CoreAuthHandler::handle(const Login &msg) coreauthhandler.cpp line 235 that allows an attacker to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/quassel/quassel/blob/master/src/core/coreauthhandler.cpp#L236; https://security.gentoo.org/glsa/201806-04; https://usn.ubuntu.com/4594-1/
CVE: CVE-2017-2592
Published: 2018-05-08
Description: python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs (for example, keystone tokens).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-532, CWE-532
References: http://lists.openstack.org/pipermail/openstack-announce/2017-January/002002.html; http://rhn.redhat.com/errata/RHSA-2017-0300.html; http://rhn.redhat.com/errata/RHSA-2017-0435.html
CVE: CVE-2017-2594
Published: 2018-05-08
Description: hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-209, CWE-22
References: http://www.securityfocus.com/bid/95793; https://access.redhat.com/errata/RHSA-2017:1832; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2594
CVE: CVE-2017-2611
Published: 2018-05-08
Description: Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-358, CWE-863
References: http://www.securityfocus.com/bid/95956; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2611; https://github.com/jenkinsci/jenkins/commit/97a61a9fe55f4c16168c123f98301a5173b9fa86
CVE: CVE-2018-6510
Published: 2018-05-08
Description: A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://puppet.com/security/cve/CVE-2018-6510; https://puppet.com/security/cve/CVE-2018-6510
CVE: CVE-2018-6511
Published: 2018-05-08
Description: A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet Enterprise Console. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://puppet.com/security/cve/CVE-2018-6511; https://puppet.com/security/cve/CVE-2018-6511
CVE: CVE-2018-8897
Published: 2018-05-08
Description: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9; http://openwall.com/lists/oss-security/2018/05/08/1; http://openwall.com/lists/oss-security/2018/05/08/4
CVE: CVE-2018-10812
Published: 2018-05-08
Description: The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.biepie/shared_prefs/com.bitpie_preferences.xml (on Android) or a plist file in the app data folder (on iOS).
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-312
References: https://github.com/edwardz246003/misc/blob/master/Bitpie.md; https://github.com/edwardz246003/misc/blob/master/Bitpie%20CVE-2018-10812..md; https://github.com/edwardz246003/misc/blob/master/Bitpie.md
CVE: CVE-2018-6920
Published: 2018-05-08
Description: In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros wireless driver, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104114; https://security.FreeBSD.org/advisories/FreeBSD-EN-18:05.mem.asc; http://www.securityfocus.com/bid/104114
CVE: CVE-2018-6921
Published: 2018-05-08
Description: In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts of privileged kernel data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104118; https://security.FreeBSD.org/advisories/FreeBSD-EN-18:05.mem.asc; http://www.securityfocus.com/bid/104118
CVE: CVE-2015-1503
Published: 2018-05-08
Description: Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the file parameter to a webmail/client/skins/default/css/css.php page or .../. (dot dot dot slash dot) in the (2) script or (3) style parameter to webmail/old/calendar/minimizer/index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html; https://www.exploit-db.com/exploits/44587/; https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614
CVE: CVE-2017-2606
Published: 2018-05-08
Description: Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/95962; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2606; https://github.com/jenkinsci/jenkins/commit/09cfbc9cd5c9df7c763bc976b7f5c51266b63719
CVE: CVE-2018-10705
Published: 2018-05-09
Description: The Owned smart contract implementation for Aurora DAO (AURA), an Ethereum ERC20 token, allows attackers to acquire contract ownership because the setOwner function is declared as public. An attacker can then conduct a lockBalances() denial of service attack.
CVSS Score: 7.5 (HIGH)
References: https://peckshield.com/2018/05/03/ownerAnyone/; https://peckshield.com/2018/05/03/ownerAnyone/
CVE: CVE-2018-10817
Published: 2018-05-09
Description: Severalnines ClusterControl before 1.6.0-4699 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.severalnines.com/hc/en-us/articles/212425943-ChangeLog; https://support.severalnines.com/hc/en-us/articles/212425943-ChangeLog
CVE: CVE-2018-10827
Published: 2018-05-09
Description: LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded into memory for each request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/litecart/litecart/issues/119; https://github.com/litecart/litecart/issues/119
CVE: CVE-2018-10831
Published: 2018-05-09
Description: Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass this verifier for any blockheader. This originally affected (for example) the Bitcoin Gold and Zcash cryptocurrencies, and continued to be exploited in the wild in May 2018 against smaller cryptocurrencies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://blog.zencash.com/update-for-the-equihash-mining-application-z-nomp/; https://github.com/edwardz246003/misc/blob/master/Attackers%20Fake%20Computational%20Power%20to%20Steal%20Cryptocurrencies%20from%20Mining%20Pools.md; https://blog.zencash.com/update-for-the-equihash-mining-application-z-nomp/
CVE: CVE-2018-10184
Published: 2018-05-09
Description: An issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against the max_frame_size setting instead of being checked against the bufsize. The max_frame_size only applies to outgoing traffic and not to incoming, so if a large enough frame size is advertised in the SETTINGS frame, a wrapped frame will be defragmented into a temporary allocated buffer where the second fragment may overflow the heap by up to 16 kB. It is very unlikely that this can be exploited for code execution given that buffers are very short lived and their addresses not realistically predictable in production, but the likelihood of an immediate crash is absolutely certain.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.haproxy.org/?p=haproxy-1.8.git%3Ba=commit%3Bh=cd117685f0cff4f2f5577ef6a21eaae96ebd9f28; http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=3f0e1ec70173593f4c2b3681b26c04a4ed5fc588; https://access.redhat.com/errata/RHSA-2018:1372
CVE: CVE-2018-10830
Published: 2018-05-09
Description: In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x002220e0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x002220e0; https://www.exploit-db.com/exploits/44615/; https://github.com/anhkgg/poc/tree/master/2345%20security%20guard/2345BdPcSafe.sys-x64-0x002220e0
CVE: CVE-2018-1119
Published: 2018-05-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-10184.  Reason: This candidate is a reservation duplicate of CVE-2018-10184.  Notes: All CVE users should reference CVE-2018-10184 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-10682
Published: 2018-05-09
Description: An issue was discovered in WildFly 10.1.2.Final. It is possible for an attacker to access the administration panel on TCP port 9990 without any authentication using "anonymous" access that is automatically created. Once logged in, a misconfiguration present by default (auto-deployment) permits an anonymous user to deploy a malicious .war file, leading to remote code execution. NOTE: the vendor indicates that anonymous access is not available in the default installation; however, it remains optional because there are several use cases for it, including development environments and network architectures that have a proxy server for access control to the WildFly server
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt; https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
CVE: CVE-2018-10683
Published: 2018-05-09
Description: An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admin Guide indicates that "without a security realm reference" implies "effectively unsecured." The vendor explicitly supports these unsecured configurations because they have valid use cases during development
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt; https://github.com/kmkz/exploit/blob/master/CVE-2018-10682-CVE-2018-10683.txt
CVE: CVE-2016-9335
Published: 2018-05-09
Description: A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmware Version 5.0.196 and Stride-Managed Ethernet Switches running firmware Version 5.0.190. Vulnerable versions of Stride-Managed Ethernet switches and Sixnet-Managed Industrial switches use hard-coded HTTP SSL/SSH keys for secure communication. Because these keys cannot be regenerated by users, all products use the same key. The attacker could disrupt communication or compromise the system. CVSS v3 base score: 10, CVSS vector string: (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). Red Lion Controls recommends updating to SLX firmware Version 5.3.174.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-321, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-054-02; https://ics-cert.us-cert.gov/advisories/ICSA-17-054-02
CVE: CVE-2018-8911
Published: 2018-05-09
Description: Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/zh-tw/support/security/Synology_SA_18_03; https://www.synology.com/zh-tw/support/security/Synology_SA_18_03
CVE: CVE-2018-8912
Published: 2018-05-09
Description: Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via the commit_msg parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/zh-tw/support/security/Synology_SA_18_03; https://www.synology.com/zh-tw/support/security/Synology_SA_18_03
CVE: CVE-2018-1228
Published: 2018-05-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-1089
Published: 2018-05-09
Description: 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/104137; https://access.redhat.com/errata/RHSA-2018:1364; https://access.redhat.com/errata/RHSA-2018:1380
CVE: CVE-2017-18265
Published: 2018-05-09
Description: Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatibility with certain versions of the LuaSocket library, such as the lua-socket package from Debian stretch. The attacker needs to trigger a stream error. A crash can be observed in, for example, the c2s module.
CVSS Score: 7.5 (HIGH)
References: https://bugs.debian.org/875829; https://hg.prosody.im/0.9/rev/176b7f4e4ac9; https://hg.prosody.im/0.9/rev/adfffc5b4e2a
CVE: CVE-2018-10940
Published: 2018-05-09
Description: The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707; http://www.securityfocus.com/bid/104154; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2018-10770
Published: 2018-05-09
Description: download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a login) to discover the password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/D0neMkj/EXP_IOT/blob/master/CAMERA/XVR_camera/readme; https://github.com/D0neMkj/EXP_IOT/tree/master/CAMERA/XVR_camera; https://github.com/D0neMkj/EXP_IOT/blob/master/CAMERA/XVR_camera/readme
CVE: CVE-2018-10828
Published: 2018-05-09
Description: An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://support.lenovo.com/us/en/solutions/LEN-25654; https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.c; https://www.exploit-db.com/exploits/44610/
CVE: CVE-2017-5175
Published: 2018-05-09
Description: Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a malicious DLL file within the search path resulting in execution of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/96210; https://ics-cert.us-cert.gov/advisories/ICSA-17-045-01; http://www.securityfocus.com/bid/96210
CVE: CVE-2018-0765
Published: 2018-05-09
Description: A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, .NET Core 2.0, Microsoft .NET Framework 4.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/104060; http://www.securitytracker.com/id/1040851; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0765
CVE: CVE-2018-0824
Published: 2018-05-09
Description: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: http://www.securityfocus.com/bid/104030; http://www.securitytracker.com/id/1040848; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824
CVE: CVE-2018-0854
Published: 2018-05-09
Description: A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958, CVE-2018-8129, CVE-2018-8132.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/104029; http://www.securitytracker.com/id/1040849; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0854
CVE: CVE-2018-0943
Published: 2018-05-09
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8130, CVE-2018-8133, CVE-2018-8145, CVE-2018-8177.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103980; http://www.securitytracker.com/id/1040844; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0943
CVE: CVE-2018-0945
Published: 2018-05-09
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/103987; http://www.securitytracker.com/id/1040844; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0945