deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11271
Published: 2019-06-19
Description: Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.
CVSS Score: 7.8 (HIGH)
CWE: CWE-532, CWE-522
References: https://www.cloudfoundry.org/blog/cve-2019-11271; https://www.cloudfoundry.org/blog/cve-2019-11271
CVE: CVE-2019-11477
Published: 2019-06-19
Description: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt
CVE: CVE-2019-11478
Published: 2019-06-19
Description: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac[PII_REDACTED]6b683fb0baf55f8191a2e.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770, CWE-400
References: http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html; http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE: CVE-2019-11479
Published: 2019-06-19
Description: Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c[PII_REDACTED]ee72f5cb4654b9fc363.
CVSS Score: 7.5 (HIGH)
CWE: CWE-405, CWE-770
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt; http://www.openwall.com/lists/oss-security/2019/06/28/2; http://www.openwall.com/lists/oss-security/2019/07/06/3
CVE: CVE-2019-3896
Published: 2019-06-19
Description: A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-415
References: http://www.securityfocus.com/bid/108814; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3896; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-3954
Published: 2019-06-19
Description: Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.tenable.com/security/research/tra-2019-28; https://www.tenable.com/security/research/tra-2019-28
CVE: CVE-2019-12435
Published: 2019-06-19
Description: Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00023.html; http://www.securityfocus.com/bid/108825; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QSG3TLPZP35RH5DWAIDC7MHXRK5DFKOE/
CVE: CVE-2019-12436
Published: 2019-06-19
Description: Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/108823; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ3LCJNJ3ONHIRKDSKOTT6QGXALLCHVG/; https://usn.ubuntu.com/4018-1/
CVE: CVE-2017-1107
Published: 2019-06-19
Description: IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system. IBM X-Force ID: 120906.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/108918; https://exchange.xforce.ibmcloud.com/vulnerabilities/120906; https://www.ibm.com/support/docview.wss?uid=ibm10887815
CVE: CVE-2019-10257
Published: 2019-06-19
Description: Zucchetti HR Portal through 2019-03-15 allows Directory Traversal. Unauthenticated users can escape outside of the restricted location (dot-dot-slash notation) to access files or directories that are elsewhere on the system. Through this vulnerability it is possible to read the application's java sources from /WEB-INF/classes/*.class
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.sk-it.com/en/cve.html; http://www.sk-it.com/en/cve.html
CVE: CVE-2019-12814
Published: 2019-06-19
Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://access.redhat.com/errata/RHSA-2019:2858; https://access.redhat.com/errata/RHSA-2019:2935; https://access.redhat.com/errata/RHSA-2019:2936
CVE: CVE-2019-4303
Published: 2019-06-19
Description: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160949.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108912; https://exchange.xforce.ibmcloud.com/vulnerabilities/160949; https://www.ibm.com/support/docview.wss?uid=ibm10887563
CVE: CVE-2019-4364
Published: 2019-06-19
Description: IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: http://www.securityfocus.com/bid/108910; https://exchange.xforce.ibmcloud.com/vulnerabilities/161680; https://www.ibm.com/support/docview.wss?uid=ibm10887557
CVE: CVE-2019-4384
Published: 2019-06-19
Description: IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/108896; https://exchange.xforce.ibmcloud.com/vulnerabilities/162172; https://www.ibm.com/support/docview.wss?uid=ibm10887817
CVE: CVE-2019-4385
Published: 2019-06-19
Description: IBM Spectrum Protect Plus 10.1.2 may display the vSnap CIFS password in the IBM Spectrum Protect Plus Joblog. This can result in an attacker gaining access to sensitive information as well as vSnap. IBM X-Force ID: 162173.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.ibm.com/support/docview.wss?uid=ibm10886099; http://www.securityfocus.com/bid/108899; https://exchange.xforce.ibmcloud.com/vulnerabilities/162173
CVE: CVE-2019-6971
Published: 2019-06-19
Description: An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf; https://twitter.com/MalFuzzer/status/[PII_REDACTED]85652480?s=19; https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
CVE: CVE-2019-6972
Published: 2019-06-19
Description: An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the username is cleartext, and the password is hashed with the MD5 algorithm (after decoding of the URL encoded string with base64).
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf; https://twitter.com/MalFuzzer/status/[PII_REDACTED]85652480?s=19; https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf
CVE: CVE-2018-18406
Published: 2019-06-19
Description: An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vulnerability when a new Best Practices Report is saved using a special payload inside the xml input field. The XXE vulnerability is blind since the response doesn't directly display a requested file, but rather returns it inside the name data field when the report is saved. An attacker is able to view restricted operating system files. This issue affects all types of users: administrators or normal users.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-611
References: https://forum.tufin.com/support/kc/latest/; https://www.exploit-db.com/exploits/45808; https://www.tufin.com/
CVE: CVE-2018-18425
Published: 2019-06-19
Description: The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. (Increasing the total supply by using 'doAirdrop' ignores the hard cap written in the contract and devalues the token.)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-330
References: https://etherscan.io/address/0x21a8a03b34e053f9b1d4545213d9d1d411a9d449#code; https://www.jianshu.com/p/09f238e9e568; https://etherscan.io/address/0x21a8a03b34e053f9b1d4545213d9d1d411a9d449#code
CVE: CVE-2018-18471
Published: 2019-06-19
Description: /api/2.0/rest/aggregator/xml in Axentra firmware, used by NETGEAR Stora, Seagate GoFlex Home, and MEDION LifeCloud, has an XXE vulnerability that can be chained with an SSRF bug to gain remote command execution as root. It can be triggered by anyone who knows the IP address of the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.axentra.com/en/; https://www.wizcase.com/blog/hack-2018/; http://www.axentra.com/en/
CVE: CVE-2018-18472
Published: 2019-06-19
Description: Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/language_configuration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the wild in June 2021 for factory reset commands,
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://community.wd.com/t/action-required-on-my-book-live-and-my-book-live-duo/268147; https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo; https://www.wizcase.com/blog/hack-2018/
CVE: CVE-2018-18757
Published: 2019-06-19
Description: Open Faculty Evaluation System 5.6 for PHP 5.6 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18758.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45703; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-18758
Published: 2019-06-19
Description: Open Faculty Evaluation System 7 for PHP 7 allows submit_feedback.php SQL Injection, a different vulnerability than CVE-2018-18757.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45707; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-18863
Published: 2019-06-19
Description: NGA ResourceLink 20.0.2.1 allows local file inclusion.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.dionach.com/blog/cve-2018-18863-resourcelink-local-file-inclusion; https://www.dionach.com/blog/cve-2018-18863-resourcelink-local-file-inclusion
CVE: CVE-2018-19878
Published: 2019-06-19
Description: An issue was discovered on Teltonika RTU950 R_31.04.89 devices. The application allows a user to login without limitation. For every successful login request, the application saves a session. A user can re-login without logging out, causing the application to store the session in memory. Exploitation of this vulnerability will increase memory use and consume free space.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://www.triadsec.com/; https://www.triadsec.com/CVE-2018-19878.pdf; https://www.triadsec.com/
CVE: CVE-2019-12491
Published: 2019-06-19
Description: OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on servers managed by OnApp for XEN/KVM hypervisors. To exploit the vulnerability an attacker has to have control of a single server on a given cloud (e.g. by renting one). From the source server, the attacker can craft any command and trigger the OnApp platform to execute that command with root privileges on a target server.
CVSS Score: 6.6 (MEDIUM)
References: https://docs.onapp.com/rn/general-security-advisory; https://skylightcyber.com/2019/06/07/all-your-cloud-are-belong-to-us-cve-2019-12491/; https://docs.onapp.com/rn/general-security-advisory
CVE: CVE-2019-6114
Published: 2019-06-19
Description: An issue was discovered in Corel PaintShop Pro 2019 21.0.0.119. An integer overflow in the jp2 parsing library allows an attacker to overwrite memory and to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/ereisr00/bagofbugz/tree/master/CorelPaintShop2019; https://github.com/ereisr00/bagofbugz/tree/master/CorelPaintShop2019
CVE: CVE-2019-9701
Published: 2019-06-19
Description: DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153512/Symantec-DLP-15.5-MP1-Cross-Site-Scripting.html; https://support.symantec.com/us/en/article.SYMSA1484.html; http://packetstormsecurity.com/files/153512/Symantec-DLP-15.5-MP1-Cross-Site-Scripting.html
CVE: CVE-2018-15506
Published: 2019-06-19
Description: In BubbleUPnP 0.9 update 30, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vulnerability to: (1) Access arbitrary files from the filesystem with the same permission as the user account running BubbleUPnP, (2) Initiate SMB connections to capture a NetNTLM challenge/response and crack the cleartext password, or (3) Initiate SMB connections to relay a NetNTLM challenge/response and achieve Remote Command Execution in Windows domains.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://www.bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html; https://www.bubblesoftapps.com/bubbleupnpserver2/docs/changelog.html
CVE: CVE-2018-17389
Published: 2019-06-19
Description: CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/46140; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17393
Published: 2019-06-19
Description: SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/46148; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17398
Published: 2019-06-19
Description: SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45451; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17399
Published: 2019-06-19
Description: SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45524; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17423
Published: 2019-06-19
Description: An issue was discovered in e107 v2.1.9. There is a XSS attack on e107_admin/comment.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Kiss-sh0t/e107_v2.1.9_XSS_poc; https://github.com/e107inc/e107/issues/3414; https://github.com/Kiss-sh0t/e107_v2.1.9_XSS_poc
CVE: CVE-2018-17840
Published: 2019-06-19
Description: SQL injection exists in Scriptzee Education Website 1.0 via the college_list.html subject, city, or country parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45510; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17841
Published: 2019-06-19
Description: SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/41674; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2018-17842
Published: 2019-06-19
Description: SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels h_room_type parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45509; https://www.exploit-db.com/author/?a=8844
CVE: CVE-2019-11232
Published: 2019-06-19
Description: EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD element.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f; https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f
CVE: CVE-2019-11233
Published: 2019-06-19
Description: EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN_ID element to the auth/main/asp/check_user_login_info.aspx URI, and then reading the response, as demonstrated by the KW_EMAIL or KW_TEL field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f; https://gist.github.com/keniver/dd27ba44d0aef4318551e647d927242f
CVE: CVE-2019-11649
Published: 2019-06-19
Description: Cross-Site Scripting vulnerability in Micro Focus Fortify Software Security Center Server, versions 17.2, 18.1, 18.2, has been identified in Micro Focus Software Security Center. The vulnerability could be exploited to execute JavaScript code in user’s browser. The vulnerability could be exploited to execute JavaScript code in user’s browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03461174; https://softwaresupport.softwaregrp.com/doc/KM03461174
CVE: CVE-2018-16613
Published: 2019-06-19
Description: An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/9emin1/advisories; https://github.com/9emin1/advisories/blob/master/wpForo-1-5-1.md; https://wordpress.org/plugins/wpforo/#developers
CVE: CVE-2018-16618
Published: 2019-06-19
Description: VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters followed by the name of an Android activity to start. Activities are started by inserting their name into a string that is executed in a shell command. By inserting metacharacters this can be exploited to run arbitrary commands as root. The requests also match those of the HTTP protocol and can be triggered on any web page rendered on the device by requesting resources stored at an http://127.0.0.1:1668/ URI, as demonstrated by the http://127.0.0.1:1668/dacdb[PII_REDACTED]3fab2d92896596eef?';{ping,example.org}' URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.surecloud.com/sc-blog/vtech; https://www.vtech.com/en/our-businesses/product-support/; https://www.surecloud.com/sc-blog/vtech
CVE: CVE-2018-17079
Published: 2019-06-19
Description: An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/94fzb/zrlog/issues/38; https://www.owasp.org/index.php/Cross-site_Scripting_%28XSS%29; https://github.com/94fzb/zrlog/issues/38
CVE: CVE-2018-17146
Published: 2019-06-19
Description: A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2018-17148
Published: 2019-06-19
Description: An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2018-17374
Published: 2019-06-19
Description: SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/author/?a=8844; https://www.exploit-db.com/exploits/45456; https://www.exploit-db.com/author/?a=8844