deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0396
Published: 2018-07-18
Description: A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting certain malicious code. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve25985.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/104872; http://www.securitytracker.com/id/1041349; http://www.securitytracker.com/id/1041350
CVE: CVE-2018-0398
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-918
References: http://www.securityfocus.com/bid/104886; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-finesse; http://www.securityfocus.com/bid/104886
CVE: CVE-2018-0399
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-918
References: http://www.securityfocus.com/bid/104886; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-finesse; http://www.securityfocus.com/bid/104886
CVE: CVE-2018-0400
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70904.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securitytracker.com/id/1041352; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx; http://www.securitytracker.com/id/1041352
CVE: CVE-2018-0401
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. Cisco Bug IDs: CSCvg70967.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securitytracker.com/id/1041352; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx; http://www.securitytracker.com/id/1041352
CVE: CVE-2018-0402
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. Cisco Bug IDs: CSCvg70921.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: http://www.securitytracker.com/id/1041352; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx; http://www.securitytracker.com/id/1041352
CVE: CVE-2018-0403
Published: 2018-07-18
Description: Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to retrieve a cleartext password. Cisco Bug IDs: CSCvg71040.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79, CWE-918
References: http://www.securitytracker.com/id/1041352; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-uccx; http://www.securitytracker.com/id/1041352
CVE: CVE-2018-14339
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the MMSE dissector could go into an infinite loop. This was addressed in epan/proto.c by adding offset and length validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14340
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14341
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14342
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the BGP protocol dissector could go into a large loop. This was addressed in epan/dissectors/packet-bgp.c by validating Path Attribute lengths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14343
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14344
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ISMP dissector could crash. This was addressed in epan/dissectors/packet-ismp.c by validating the IPX address length to avoid a buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14367
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-252
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14368
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14369
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14370
Published: 2018-07-19
Description: In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c via bounds checking that prevents a buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html; http://www.securityfocus.com/bid/104847; http://www.securitytracker.com/id/1041608
CVE: CVE-2018-14392
Published: 2018-07-19
Description: The New Threads plugin before 1.2 for MyBB has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://community.mybb.com/mods.php?action=changelog&pid=1143; https://www.exploit-db.com/exploits/45057/; https://community.mybb.com/mods.php?action=changelog&pid=1143
CVE: CVE-2018-14394
Published: 2018-07-19
Description: libavformat/movenc.c in FFmpeg before 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://github.com/FFmpeg/FFmpeg/commit/3a2d21bc5f97aa0161db3ae731fc2732be6108b8; https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html; https://github.com/FFmpeg/FFmpeg/commit/3a2d21bc5f97aa0161db3ae731fc2732be6108b8
CVE: CVE-2018-14395
Published: 2018-07-19
Description: libavformat/movenc.c in FFmpeg 3.2 and 4.0.2 allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted audio file when converting to the MOV audio format.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.securitytracker.com/id/1041394; https://github.com/FFmpeg/FFmpeg/commit/2c0e98a0b478284bdff6d7a[PII_REDACTED]a8beae5; https://github.com/FFmpeg/FFmpeg/commit/fa19fbcf712a6a6cc5a5cfdc3254a97b9bce6582
CVE: CVE-2018-14399
Published: 2018-07-19
Description: libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI in the SRC attribute of an IMG element within info[content] JSON data to the index.php?m=member&c=index&a=register URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.an-sheng.cc/index.php/archives/4/; http://www.an-sheng.cc/index.php/archives/4/
CVE: CVE-2018-14401
Published: 2018-07-19
Description: CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/jjanier/axml/issues/1; https://github.com/jjanier/axml/issues/1
CVE: CVE-2018-14402
Published: 2018-07-19
Description: axmldec 1.2.0 has an out-of-bounds write in the jitana::axml_parser::parse_start_namespace function in lib/jitana/util/axml_parser.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/ytsutano/axmldec/issues/4; https://github.com/ytsutano/axmldec/issues/4
CVE: CVE-2018-14403
Published: 2018-07-19
Description: MP4NameFirstMatches in mp4util.cpp in MP4v2 2.0.0 mishandles substrings of atom names, leading to use of an inappropriate data type for associated atoms. The resulting type confusion can cause out-of-bounds memory access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: http://www.openwall.com/lists/oss-security/2018/07/18/3; https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YCHVOYPIBGM5HYUMQ77KZH2IHSITKVE/
CVE: CVE-2016-9574
Published: 2018-07-19
Description: nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-325, CWE-384
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1320695; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9574; https://bugzilla.mozilla.org/show_bug.cgi?id=1320695
CVE: CVE-2017-2673
Published: 2018-07-19
Description: An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles including administrative roles.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863, CWE-863
References: http://seclists.org/oss-sec/2017/q2/125; http://www.securityfocus.com/bid/98032; https://access.redhat.com/errata/RHSA-2017:1461
CVE: CVE-2017-7481
Published: 2018-07-19
Description: Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/98492; https://access.redhat.com/errata/RHSA-2017:1244; https://access.redhat.com/errata/RHSA-2017:1334
CVE: CVE-2018-12911
Published: 2018-07-19
Description: WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://trac.webkit.org/changeset/233404/webkit; https://usn.ubuntu.com/3743-1/; https://trac.webkit.org/changeset/233404/webkit
CVE: CVE-2018-14404
Published: 2018-07-19
Description: A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/errata/RHSA-2019:1543; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817; https://bugzilla.redhat.com/show_bug.cgi?id=1595985
CVE: CVE-2018-1529
Published: 2018-07-19
Description: IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142291.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10717531; http://www.securityfocus.com/bid/104928; https://exchange.xforce.ibmcloud.com/vulnerabilities/142291
CVE: CVE-2018-1535
Published: 2018-07-19
Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10716029; https://exchange.xforce.ibmcloud.com/vulnerabilities/142557; http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE: CVE-2018-1536
Published: 2018-07-19
Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142558.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10716029; https://exchange.xforce.ibmcloud.com/vulnerabilities/142558; http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE: CVE-2018-1585
Published: 2018-07-19
Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10716029; https://exchange.xforce.ibmcloud.com/vulnerabilities/143498; http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE: CVE-2018-1587
Published: 2018-07-19
Description: IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716029; https://exchange.xforce.ibmcloud.com/vulnerabilities/143500; http://www.ibm.com/support/docview.wss?uid=ibm10716029
CVE: CVE-2018-5532
Published: 2018-07-19
Description: On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securitytracker.com/id/1041345; https://support.f5.com/csp/article/K48224824; http://www.securitytracker.com/id/1041345
CVE: CVE-2018-5533
Published: 2018-07-19
Description: Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041342; https://support.f5.com/csp/article/K45325728; http://www.securitytracker.com/id/1041342
CVE: CVE-2018-5534
Published: 2018-07-19
Description: Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041343; https://support.f5.com/csp/article/K64552448; http://www.securitytracker.com/id/1041343
CVE: CVE-2018-5535
Published: 2018-07-19
Description: On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041344; https://support.f5.com/csp/article/K19634255; http://www.securitytracker.com/id/1041344
CVE: CVE-2018-5540
Published: 2018-07-19
Description: On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/104920; http://www.securitytracker.com/id/1041340; http://www.securitytracker.com/id/1041341
CVE: CVE-2018-14332
Published: 2018-07-19
Description: An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html; https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332
CVE: CVE-2014-0243
Published: 2018-07-19
Description: Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/check_mk_agent/job.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=0426323df1641596c4f01ef5a716a3b65276f01c; http://git.mathias-kettner.de/git/?p=check_mk.git%3Ba=commit%3Bh=a2ef8d00c53ec9cbd05c4ae2f09b50761130e7ce; http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134160.html
CVE: CVE-2014-2302
Published: 2018-07-19
Description: The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection attacks by intercepting a request to update.webedition.org.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/126861/webEdition-CMS-2.8.0.0-Remote-Command-Execution.html; http://seclists.org/fulldisclosure/2014/May/147; http://www.securityfocus.com/archive/1/532230/100/0/threaded
CVE: CVE-2018-7602
Published: 2018-07-19
Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.securityfocus.com/bid/103985; http://www.securitytracker.com/id/1040754; https://lists.debian.org/debian-lts-announce/2018/04/msg00030.html
CVE: CVE-2018-10620
Published: 2018-07-19
Description: AVEVA InduSoft Web Studio v8.1 and v8.1SP1, and InTouch Machine Edition v2017 8.1 and v2017 8.1 SP1 a remote user could send a carefully crafted packet to exploit a stack-based buffer overflow vulnerability during tag, alarm, or event related actions such as read and write, with potential for code to be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/104870; https://ics-cert.us-cert.gov/advisories/ICSA-18-200-01; https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec128%28002%29.pdf
CVE: CVE-2018-14423
Published: 2018-07-19
Description: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://github.com/uclouvain/openjpeg/issues/1123; https://lists.debian.org/debian-lts-announce/2018/12/msg00013.html; https://usn.ubuntu.com/4109-1/
CVE: CVE-2018-3857
Published: 2018-07-19
Description: An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3858.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0541; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0541