deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6182
Published: 2018-04-09
Description: Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of POST data containing bad content with which to hit the server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.launchpad.net/mahara/+bug/1744789; https://mahara.org/interaction/forum/topic.php?id=8215; https://bugs.launchpad.net/mahara/+bug/1744789
CVE: CVE-2018-5463
Published: 2018-04-09
Description: A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-703, CWE-119
References: http://www.securityfocus.com/bid/103724; https://ics-cert.us-cert.gov/advisories/ICSA-18-095-03; http://www.securityfocus.com/bid/103724
CVE: CVE-2018-9840
Published: 2018-04-10
Description: The Open Whisper Signal app before 2.23.2 for iOS allows physically proximate attackers to bypass the screen locker feature via certain rapid sequences of actions that include app opening, clicking on cancel, and using the home button.
CVSS Score: 6.8 (MEDIUM)
References: http://nint.en.do/Signal-Bypass-Screen-locker.php; https://github.com/signalapp/Signal-iOS/commit/018a35df7b42b4941cb4dfc9f462b37c3fafd9e9; https://github.com/signalapp/Signal-iOS/commits/release/2.23.2
CVE: CVE-2018-9922
Published: 2018-04-10
Description: An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.php pathname.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/idreamsoft/iCMS/issues/16; https://github.com/idreamsoft/iCMS/issues/16
CVE: CVE-2018-9923
Published: 2018-04-10
Description: An issue was discovered in idreamsoft iCMS through 7.0.7. CSRF exists in admincp.php, as demonstrated by adding an article via an app=article&do=save&frame=iPHP request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/idreamsoft/iCMS/issues/17; https://github.com/idreamsoft/iCMS/issues/17
CVE: CVE-2018-9924
Published: 2018-04-10
Description: An issue was discovered in idreamsoft iCMS through 7.0.7. SQL injection exists via the pid array parameter in an admincp.php?app=tag&do=save&frame=iPHP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/idreamsoft/iCMS/issues/19; https://github.com/idreamsoft/iCMS/issues/19
CVE: CVE-2018-9925
Published: 2018-04-10
Description: An issue was discovered in idreamsoft iCMS through 7.0.7. XSS exists via the nickname field in an admincp.php?app=user&do=save&frame=iPHP request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/18; https://github.com/idreamsoft/iCMS/issues/18
CVE: CVE-2018-9926
Published: 2018-04-10
Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/6/; https://github.com/wuzhicms/wuzhicms/issues/128; https://www.exploit-db.com/exploits/44439/
CVE: CVE-2018-9927
Published: 2018-04-10
Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a user account via index.php?m=member&f=index&v=add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/7/; https://github.com/wuzhicms/wuzhicms/issues/128; http://www.iwantacve.cn/index.php/archives/7/
CVE: CVE-2018-9928
Published: 2018-04-10
Description: Cross-site scripting (XSS) vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sm1L3ing/xss-in-metinfo/blob/master/README.md; https://github.com/Sm1L3ing/xss-in-metinfo/blob/master/README.md
CVE: CVE-2018-9934
Published: 2018-04-10
Description: The reset-password feature in MetInfo 6.0 allows remote attackers to change arbitrary passwords via vectors involving a Host HTTP header that is modified to specify a web server under the attacker's control.
CVSS Score: 8.8 (HIGH)
References: http://www.cnblogs.com/babers/p/8503116.html; http://www.cnblogs.com/babers/p/8745739.html; http://www.cnblogs.com/babers/p/8503116.html
CVE: CVE-2017-1081
Published: 2018-04-10
Description: In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet fragments due to incorrect memory handling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-20
References: http://www.securityfocus.com/bid/98089; http://www.securitytracker.com/id/1038369; https://www.freebsd.org/security/advisories/FreeBSD-SA-17:04.ipfilter.asc
CVE: CVE-2017-18100
Published: 2018-04-10
Description: The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103729; https://jira.atlassian.com/browse/JRASERVER-67106; http://www.securityfocus.com/bid/103729
CVE: CVE-2017-18101
Published: 2018-04-10
Description: Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-862
References: http://www.securityfocus.com/bid/103730; https://jira.atlassian.com/browse/JRASERVER-67107; http://www.securityfocus.com/bid/103730
CVE: CVE-2018-5227
Published: 2018-04-10
Description: Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the display url of a configured application link.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103731; https://ecosystem.atlassian.net/browse/APL-1361; http://www.securityfocus.com/bid/103731
CVE: CVE-2014-0158
Published: 2018-04-10
Description: Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file because of incorrect j2k_decode, j2k_read_eoc, and tcd_decode_tile interaction, a related issue to CVE-2013-6045. NOTE: this is not a duplicate of CVE-2013-1447, because the scope of CVE-2013-1447 was specifically defined in http://openwall.com/lists/oss-security/2013/12/04/6 as only "null pointer dereferences, division by zero, and anything that would just fit as DoS."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1082925; https://bugzilla.suse.com/show_bug.cgi?id=871412; https://bugzilla.redhat.com/show_bug.cgi?id=1082925
CVE: CVE-2014-1398
Published: 2018-04-10
Description: The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statistics properties via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html; http://www.openwall.com/lists/oss-security/2014/01/09/3
CVE: CVE-2014-1399
Published: 2018-04-10
Description: The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html; http://www.openwall.com/lists/oss-security/2014/01/09/3
CVE: CVE-2014-1400
Published: 2018-04-10
Description: The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html; http://www.openwall.com/lists/oss-security/2014/01/09/3
CVE: CVE-2014-1889
Published: 2018-04-10
Description: The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/531050/100/0/threaded; http://www.securityfocus.com/bid/65554; https://buddypress.org/2014/02/buddypress-1-9-2/
CVE: CVE-2014-1946
Published: 2018-04-10
Description: OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/archive/1/531351/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/91577; https://www.htbridge.com/advisory/HTB23202
CVE: CVE-2014-2073
Published: 2018-04-10
Description: Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://packetstormsecurity.com/files/125325/Catia-V5-6R2013-Stack-Buffer-Overflow.html; http://packetstormsecurity.com/files/125325/Catia-V5-6R2013-Stack-Buffer-Overflow.html
CVE: CVE-2014-2078
Published: 2018-04-10
Description: The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/531502/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/92017; http://www.securityfocus.com/archive/1/531502/100/0/threaded
CVE: CVE-2014-3114
Published: 2018-04-10
Description: The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2014/05/01/11; http://www.openwall.com/lists/oss-security/2014/05/01/11
CVE: CVE-2014-3999
Published: 2018-04-10
Description: The Horde_Ldap library before 2.0.6 for Horde allows remote attackers to bypass authentication by leveraging knowledge of the LDAP bind user DN.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2014/06/14/1; http://www.securityfocus.com/bid/68014; https://bugzilla.redhat.com/show_bug.cgi?id=1109628
CVE: CVE-2015-0172
Published: 2018-04-10
Description: IBM Security SiteProtector System 3.0, 3.1.0 and 3.1.1 allows remote attackers to bypass intended security restrictions and consequently execute unspecified commands and obtain sensitive information via unknown vectors. IBM X-Force ID: 100927.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21699472; http://www-01.ibm.com/support/docview.wss?uid=swg21699472
CVE: CVE-2015-1957
Published: 2018-04-10
Description: IBM WebSphere MQ 7.5.x before 7.5.0.6 and 8.0.x before 8.0.0.3 allows remote authenticated users to obtain sensitive information via a man-in-the-middle attack, related to duplication of message data in cleartext outside the protected payload. IBM X-Force ID: 103482.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg21960506; https://exchange.xforce.ibmcloud.com/vulnerabilities/103482; http://www-01.ibm.com/support/docview.wss?uid=swg21960506
CVE: CVE-2017-14323
Published: 2018-04-10
Description: SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://seclists.org/fulldisclosure/2018/Apr/16; http://seclists.org/fulldisclosure/2018/Apr/16
CVE: CVE-2017-14611
Published: 2018-04-10
Description: SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: http://seclists.org/fulldisclosure/2018/Apr/15; http://seclists.org/fulldisclosure/2018/Apr/15
CVE: CVE-2018-2403
Published: 2018-04-10
Description: Under certain conditions, SAP Disclosure Management 10.1 allows an attacker to access information which would otherwise be restricted. It is possible for an authorized user to get SAP Disclosure Management to point a specific chapter type to a chapter the user has not been given access to.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/103727; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2595800
CVE: CVE-2018-2404
Published: 2018-04-10
Description: SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-434
References: http://www.securityfocus.com/bid/103727; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2607052
CVE: CVE-2018-2405
Published: 2018-04-10
Description: SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103703; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2372688
CVE: CVE-2018-2406
Published: 2018-04-10
Description: Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-428
References: http://www.securityfocus.com/bid/103719; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2560132
CVE: CVE-2018-2408
Published: 2018-04-10
Description: Improper Session Management in SAP Business Objects, 4.0, from 4.10, from 4.20, 4.30, CMC/BI Launchpad/Fiorified BI Launchpad. In case of password change for a user, all other active sessions created using older password continues to be active.
CVSS Score: 7.3 (HIGH)
CWE: CWE-384
References: http://www.securityfocus.com/bid/103700; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2537150
CVE: CVE-2018-2409
Published: 2018-04-10
Description: Improper session management when using SAP Cloud Platform 2.0 (Connectivity Service and Cloud Connector). Under certain conditions, data of some other user may be shown or modified when using an application built on top of SAP Cloud Platform.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-384
References: http://www.securityfocus.com/bid/103702; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2614141
CVE: CVE-2018-2410
Published: 2018-04-10
Description: SAP Business One, 9.2, 9.3, browser access does not sufficiently encode user controlled inputs, which results in a Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103704; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2582870
CVE: CVE-2018-2412
Published: 2018-04-10
Description: SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 3.8 (LOW)
CWE: CWE-862
References: http://www.securityfocus.com/bid/103727; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2614359
CVE: CVE-2018-2413
Published: 2018-04-10
Description: SAP Disclosure Management 10.1 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/103727; https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/; https://launchpad.support.sap.com/#/notes/2614501
CVE: CVE-2018-8772
Published: 2018-04-10
Description: Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/19/coship-rt3052-wireless-router-persistent-cross-site-scripting-xss/; https://0day4u.wordpress.com/2018/03/19/coship-rt3052-wireless-router-persistent-cross-site-scripting-xss/
CVE: CVE-2018-9037
Published: 2018-04-10
Description: Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain .php files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/monstra-cms/monstra/issues/433; https://www.exploit-db.com/exploits/44621/; https://github.com/monstra-cms/monstra/issues/433
CVE: CVE-2018-9038
Published: 2018-04-10
Description: Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/monstra-cms/monstra/issues/434; https://www.exploit-db.com/exploits/44512/; https://github.com/monstra-cms/monstra/issues/434
CVE: CVE-2018-9918
Published: 2018-04-10
Description: libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
CVSS Score: 7.8 (HIGH)
CWE: CWE-674
References: https://github.com/qpdf/qpdf/commit/b4d6cf6836ce025ba1811b7bbec52680c7204223; https://github.com/qpdf/qpdf/issues/202; https://usn.ubuntu.com/3638-1/
CVE: CVE-2018-9985
Published: 2018-04-10
Description: The front page of MetInfo 6.0 allows XSS by sending a feedback message to an administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/learnsec6/test/issues/1; https://github.com/learnsec6/test/issues/1
CVE: CVE-2018-9988
Published: 2018-04-10
Description: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/ARMmbed/mbedtls/commit/027f84c69f4ef30c0693832a6c396ef19e563ca1; https://github.com/ARMmbed/mbedtls/commit/a1098f81c252b317ad34ea978aea2bc47760b215; https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html
CVE: CVE-2018-9989
Published: 2018-04-10
Description: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/ARMmbed/mbedtls/commit/5224a7544c95552553e2e6be0b4a789956a6464e; https://github.com/ARMmbed/mbedtls/commit/740b218386083dc708ce98ccc94a63a95cd5629e; https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html
CVE: CVE-2018-3837
Published: 2018-04-10
Description: An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://security.gentoo.org/glsa/201903-17; https://www.debian.org/security/2018/dsa-4177; https://www.debian.org/security/2018/dsa-4184
CVE: CVE-2018-3838
Published: 2018-04-10
Description: An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://security.gentoo.org/glsa/201903-17; https://www.debian.org/security/2018/dsa-4177; https://www.debian.org/security/2018/dsa-4184
CVE: CVE-2018-3839
Published: 2018-04-10
Description: An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/201903-17; https://www.debian.org/security/2018/dsa-4177; https://www.debian.org/security/2018/dsa-4184
CVE: CVE-2018-9993
Published: 2018-04-10
Description: YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/imsebao/404team/blob/master/yunucms/yunucms.md; https://github.com/imsebao/404team/blob/master/yunucms/yunucms.md
CVE: CVE-2016-9645
Published: 2018-04-10
Description: The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has been fixed in 3.20161229.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://ikiwiki.info/security/#cve-2016-9645; https://marc.info/?l=oss-security&m=[PII_REDACTED]1854&w=2; https://security-tracker.debian.org/tracker/CVE-2016-9645
CVE: CVE-2018-9995
Published: 2018-04-10
Description: TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response.
CVSS Score: 9.8 (CRITICAL)
References: http://misteralfa-hack.blogspot.cl/2018/04/tbk-vision-dvr-login-bypass.html; http://misteralfa-hack.blogspot.cl/2018/04/update-dvr-login-bypass-cve-2018-9995.html; https://www.bleepingcomputer.com/news/security/new-hacking-tool-lets-users-access-a-bunch-of-dvrs-and-their-video-feeds/