deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16323
Published: 2018-09-01
Description: ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/ImageMagick/ImageMagick/commit/216d117f05bff87b9dc4db55a1b1fadb38bcb786; https://usn.ubuntu.com/3785-1/; https://usn.ubuntu.com/4034-1/
CVE: CVE-2018-16324
Published: 2018-09-01
Description: In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/148887/IceWarp-WebMail-12.0.3.1-Cross-Site-Scripting.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-16325
Published: 2018-09-01
Description: There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1284; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1284
CVE: CVE-2018-16327
Published: 2018-09-01
Description: There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/intelliants/subrion/issues/771; https://github.com/intelliants/subrion/issues/771
CVE: CVE-2018-16328
Published: 2018-09-01
Description: In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/1224; https://github.com/ImageMagick/ImageMagick/issues/1224
CVE: CVE-2018-16329
Published: 2018-09-01
Description: In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/1225; https://github.com/ImageMagick/ImageMagick/issues/1225
CVE: CVE-2018-16330
Published: 2018-09-02
Description: Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pandao/editor.md/issues/612; https://github.com/pandao/editor.md/issues/612
CVE: CVE-2018-16331
Published: 2018-09-02
Description: admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Vict00r/poc/issues/1; https://github.com/Vict00r/poc/issues/1
CVE: CVE-2018-16332
Published: 2018-09-02
Description: An issue was discovered in iCMS 7.0.9. There is an admincp.php?app=article&do=update CSRF vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/idreamsoft/iCMS/issues/31; https://github.com/idreamsoft/iCMS/issues/31
CVE: CVE-2018-16333
Published: 2018-09-02
Description: An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is directly used in a sprintf call to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/ZIllR0/Routers/blob/master/Tenda/oob1.md; https://github.com/ZIllR0/Routers/blob/master/Tenda/oob1.md
CVE: CVE-2018-16334
Published: 2018-09-02
Description: An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-04/tenda.md; https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-04/tenda.md
CVE: CVE-2018-16335
Published: 2018-09-02
Description: newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a different vulnerability than CVE-2018-15209.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2809; https://www.debian.org/security/2018/dsa-4349; http://bugzilla.maptools.org/show_bug.cgi?id=2809
CVE: CVE-2018-16336
Published: 2018-09-02
Description: Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Exiv2/exiv2/issues/400; https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html; https://usn.ubuntu.com/3852-1/
CVE: CVE-2018-16337
Published: 2018-09-02
Description: An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/chshcms/cscms/issues/2; https://github.com/chshcms/cscms/issues/2
CVE: CVE-2018-16338
Published: 2018-09-02
Description: An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/auracms/AuraCMS/issues/3; https://github.com/auracms/AuraCMS/issues/3
CVE: CVE-2018-16339
Published: 2018-09-02
Description: An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/sbmzhcn/EmpireCMS/issues/1; https://github.com/sbmzhcn/EmpireCMS/issues/1
CVE: CVE-2018-16342
Published: 2018-09-02
Description: ShowDoc v1.8.0 has XSS via a new page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/star7th/showdoc/issues/325; https://github.com/star7th/showdoc/issues/325
CVE: CVE-2018-16343
Published: 2018-09-02
Description: SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: http://zhinianyuxin.postach.io/post/seacms-v6-61-latest-version-backend-rce; https://github.com/cumtxujiabin/CmsPoc/blob/master/Seacms_v6.61_backend_RCE.md; http://zhinianyuxin.postach.io/post/seacms-v6-61-latest-version-backend-rce
CVE: CVE-2018-16344
Published: 2018-09-02
Description: An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be leveraged for database access by deleting install.lock.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/cumtxujiabin/CmsPoc/blob/master/zzcms_8.3_file_del.md; https://github.com/cumtxujiabin/CmsPoc/blob/master/zzcms_8.3_file_del.md
CVE: CVE-2018-16345
Published: 2018-09-02
Description: An issue was discovered in EasyCMS 1.5. There is a CSRF vulnerability that can update the admin password via index.php?s=/admin/rbacuser/update/navTabId/listusers/callbackType/closeCurrent.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/teameasy/EasyCMS/issues/5; https://github.com/teameasy/EasyCMS/issues/5
CVE: CVE-2018-16346
Published: 2018-09-02
Description: ChemCMS 1.0.6 has XSS via the "setting -> website information" field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/chemcms/ChemCMS/issues/2; https://github.com/chemcms/ChemCMS/issues/2
CVE: CVE-2018-16347
Published: 2018-09-02
Description: An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gleez/cms/issues/798; https://github.com/gleez/cms/issues/798
CVE: CVE-2018-16348
Published: 2018-09-02
Description: SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site name.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Jas0nwhy/vulnerability/blob/master/Seacmsxss.md; https://github.com/Jas0nwhy/vulnerability/blob/master/Seacmsxss.md
CVE: CVE-2018-16349
Published: 2018-09-02
Description: WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/147; https://github.com/wuzhicms/wuzhicms/issues/147
CVE: CVE-2018-16350
Published: 2018-09-02
Description: WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wuzhicms/wuzhicms/issues/148; https://github.com/wuzhicms/wuzhicms/issues/148
CVE: CVE-2018-16352
Published: 2018-09-02
Description: There is a PHP code upload vulnerability in WeaselCMS 0.3.6 via index.php because code can be embedded at the end of a .png file when the image/png content type is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/alterebro/WeaselCMS/issues/8; https://github.com/alterebro/WeaselCMS/issues/8
CVE: CVE-2018-16353
Published: 2018-09-02
Description: An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/focalhot/FHCRM/issues/3; https://github.com/focalhot/FHCRM/issues/3
CVE: CVE-2018-16354
Published: 2018-09-02
Description: An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/focalhot/FHCRM/issues/4; https://github.com/focalhot/FHCRM/issues/4
CVE: CVE-2018-16358
Published: 2018-09-02
Description: A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://hg.dotclear.org/dotclear/rev/d4841d6d65d6; https://hg.dotclear.org/dotclear/rev/d4841d6d65d6
CVE: CVE-2018-16359
Published: 2018-09-02
Description: Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS.
CVSS Score: 6.8 (MEDIUM)
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1632; https://github.com/google/gvisor/commit/001a4c2493b13a43d62c7511fb509a959ae4abc2; https://bugs.chromium.org/p/project-zero/issues/detail?id=1632
CVE: CVE-2018-16362
Published: 2018-09-02
Description: An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repo_manage_page.php or list.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mantisbt-plugins/source-integration/issues/286; https://github.com/mantisbt-plugins/source-integration/releases/tag/v1.5.9; https://github.com/mantisbt-plugins/source-integration/releases/tag/v2.1.5
CVE: CVE-2018-16365
Published: 2018-09-02
Description: An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=group&do=save allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/idreamsoft/iCMS/issues/32; https://github.com/idreamsoft/iCMS/issues/32
CVE: CVE-2018-16366
Published: 2018-09-02
Description: An issue was discovered in idreamsoft iCMS V7.0.10. admincp.php?app=user&do=save allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/idreamsoft/iCMS/issues/32; https://github.com/idreamsoft/iCMS/issues/32
CVE: CVE-2018-16367
Published: 2018-09-02
Description: In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22
References: https://github.com/QingdaoU/OnlineJudge/issues/165; https://github.com/QingdaoU/OnlineJudge/issues/165
CVE: CVE-2018-16368
Published: 2018-09-03
Description: SplashXPath::strokeAdjust in splash/SplashXPath.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/xpdf; https://github.com/TeamSeri0us/pocs/tree/master/xpdf
CVE: CVE-2018-16369
Published: 2018-09-03
Description: XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/TeamSeri0us/pocs/tree/master/xpdf; https://github.com/TeamSeri0us/pocs/tree/master/xpdf
CVE: CVE-2018-16370
Published: 2018-09-03
Description: In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/lazyphp/PESCMS-TEAM/issues/2; https://github.com/lazyphp/PESCMS-TEAM/issues/2
CVE: CVE-2018-16371
Published: 2018-09-03
Description: PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lazyphp/PESCMS-TEAM/issues/3; https://github.com/lazyphp/PESCMS-TEAM/issues/3
CVE: CVE-2018-16372
Published: 2018-09-03
Description: The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/iechoo/ideacms/issues/1; https://github.com/iechoo/ideacms/issues/1
CVE: CVE-2018-16373
Published: 2018-09-03
Description: Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: https://github.com/philippe/FrogCMS/issues/13; https://github.com/philippe/FrogCMS/issues/13
CVE: CVE-2018-16374
Published: 2018-09-03
Description: Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/philippe/FrogCMS/issues/14; https://github.com/philippe/FrogCMS/issues/14
CVE: CVE-2018-16375
Published: 2018-09-03
Description: An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105266; https://github.com/uclouvain/openjpeg/issues/1126; http://www.securityfocus.com/bid/105266
CVE: CVE-2018-16376
Published: 2018-09-03
Description: An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105262; https://github.com/uclouvain/openjpeg/issues/1127; http://www.securityfocus.com/bid/105262
CVE: CVE-2018-16379
Published: 2018-09-03
Description: Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/n00dles/ogma-CMS/issues/38; https://github.com/n00dles/ogma-CMS/issues/38
CVE: CVE-2018-16380
Published: 2018-09-03
Description: An issue was discovered in Ogma CMS 0.4 Beta. There is a CSRF vulnerability in users.php?action=createnew that can add an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/n00dles/ogma-CMS/issues/39; https://github.com/n00dles/ogma-CMS/issues/39
CVE: CVE-2018-16382
Published: 2018-09-03
Description: Netwide Assembler (NASM) 2.14rc15 has a buffer over-read in x86/regflags.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392503
CVE: CVE-2018-16384
Published: 2018-09-03
Description: A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} where a is a special function name (such as "if") and b is the SQL statement to be executed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1167; https://lists.debian.org/debian-lts-announce/2023/01/msg00033.html; https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1167
CVE: CVE-2018-16385
Published: 2018-09-03
Description: ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/top-think/framework/issues/1375; https://exchange.xforce.ibmcloud.com/vulnerabilities/149288; https://github.com/top-think/framework/issues/1375
CVE: CVE-2018-16387
Published: 2018-09-03
Description: An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/jbroadway/elefant/issues/285; https://github.com/jbroadway/elefant/issues/285
CVE: CVE-2018-16391
Published: 2018-09-03
Description: Several buffer overflows when handling responses from a Muscle Card in muscle_list_files in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://access.redhat.com/errata/RHSA-2019:2154; https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-477b7a40136bb418b10ce271c8664536; https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
CVE: CVE-2018-16392
Published: 2018-09-03
Description: Several buffer overflows when handling responses from a TCOS Card in tcos_select_file in libopensc/card-tcos.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://access.redhat.com/errata/RHSA-2019:2154; https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad#diff-b2a356323a9ff2024d041cf2d7e89dd3; https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
CVE: CVE-2018-16393
Published: 2018-09-03
Description: Several buffer overflows when handling responses from a Gemsafe V1 Smartcard in gemsafe_get_cert_len in libopensc/pkcs15-gemsafeV1.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://access.redhat.com/errata/RHSA-2019:2154; https://github.com/OpenSC/OpenSC/commit/360e95d45ac4123255a4c796db96337f332160ad; https://github.com/OpenSC/OpenSC/releases/tag/0.19.0-rc1
CVE: CVE-2018-16397
Published: 2018-09-03
Description: In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: https://github.com/LimeSurvey/LimeSurvey/blob/3be9b41e76826b57f5860d18d93b23f47d59d2e4/docs/release_notes.txt#L51; https://github.com/LimeSurvey/LimeSurvey/blob/3be9b41e76826b57f5860d18d93b23f47d59d2e4/docs/release_notes.txt#L51
CVE: CVE-2018-16398
Published: 2018-09-03
Description: In Twistlock AuthZ Broker 0.1, regular expressions are mishandled, as demonstrated by containers/aa/pause?aaa=\/start to bypass a policy in which "docker start" is allowed but "docker pause" is not allowed.
CVSS Score: 7.5 (HIGH)
References: https://github.com/twistlock/authz/issues/50; https://github.com/twistlock/authz/issues/51; https://github.com/twistlock/authz/issues/50
CVE: CVE-2018-16402
Published: 2018-09-03
Description: libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2018-16403
Published: 2018-09-03
Description: libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://sourceware.org/bugzilla/show_bug.cgi?id=23529
CVE: CVE-2018-16405
Published: 2018-09-03
Description: An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst; https://gitlab.com/mayan-edms/mayan-edms/commit/9ebe80595afe4fdd1e2c74358d6a9421f4ce130e; https://gitlab.com/mayan-edms/mayan-edms/issues/494
CVE: CVE-2018-16406
Published: 2018-09-03
Description: An issue was discovered in Mayan EDMS before 3.0.2. The Cabinets app has XSS via a crafted cabinet label.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst; https://gitlab.com/mayan-edms/mayan-edms/commit/48dfc06e49c7f773749e063f8cc69c95509d1c32; https://gitlab.com/mayan-edms/mayan-edms/issues/495
CVE: CVE-2018-16407
Published: 2018-09-03
Description: An issue was discovered in Mayan EDMS before 3.0.3. The Tags app has XSS because tag label values are mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/mayan-edms/mayan-edms/blob/master/HISTORY.rst; https://gitlab.com/mayan-edms/mayan-edms/commit/076468a9225e4630a463c0bbceb8e5b805fe380c; https://gitlab.com/mayan-edms/mayan-edms/issues/496
CVE: CVE-2018-16408
Published: 2018-09-03
Description: D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link%20DIR-846%20RCE.md; https://github.com/PAGalaxyLab/VulInfo/blob/master/D-Link/DIR-846/RCE_0/D-Link%20DIR-846%20RCE.md; https://www.us-cert.gov/ncas/bulletins/SB18-253
CVE: CVE-2018-16409
Published: 2018-09-03
Description: In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/gogs/gogs/issues/5372; https://github.com/gogs/gogs/issues/5372