deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-1755
Published: 2018-08-24
Description: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by incorrect transport being used when Liberty is configured to use Java Authentication SPI for Containers (JASPIC). This can happen when the Application Server is configured to permit access on non-secure (http) port and using JASPIC or JSR375 authentication.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105150; http://www.securitytracker.com/id/1041558; https://exchange.xforce.ibmcloud.com/vulnerabilities/148597
CVE: CVE-2018-11749
Published: 2018-08-24
Description: When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet Enterprise 2018.1.3, 2017.3.9, and 2016.4.14, and is fixed in Puppet Enterprise 2018.1.4, 2017.3.10, and 2016.4.15. It scored an 8.5 CVSS score.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: https://puppet.com/security/cve/cve-2018-11749; https://puppet.com/security/cve/cve-2018-11749
CVE: CVE-2018-11061
Published: 2018-08-24
Description: RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
CVSS Score: 9.1 (CRITICAL)
References: http://seclists.org/fulldisclosure/2018/Aug/32; http://www.securityfocus.com/bid/105134; http://www.securitytracker.com/id/1041541
CVE: CVE-2018-11065
Published: 2018-08-24
Description: The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Aug/31; http://www.securityfocus.com/bid/105128; http://www.securitytracker.com/id/1041540
CVE: CVE-2017-11563
Published: 2018-08-24
Description: D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has a remote code execution vulnerability. A UDP "Discover" service, which provides multiple functions such as changing the passwords and getting basic information, was installed on the device. A remote attacker can send a crafted UDP request to finderd to perform stack overflow and execute arbitrary code with root privilege on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Aug/18; https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf; http://seclists.org/fulldisclosure/2018/Aug/18
CVE: CVE-2017-11564
Published: 2018-08-24
Description: The D-Link EyeOn Baby Monitor (DCS-825L) 1.08.1 has multiple command injection vulnerabilities in the web service framework. An attacker can forge malicious HTTP requests to execute commands; authentication is required before executing the attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2018/Aug/19; https://documents.trendmicro.com/assets/tech_brief_Device_Vulnerabilities_in_the_Connected_Home2.pdf; http://seclists.org/fulldisclosure/2018/Aug/19
CVE: CVE-2017-12573
Published: 2018-08-24
Description: An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". An attacker can send a crafted HTTP POST request to execute arbitrary code. Authentication is required before executing the attack.
CVSS Score: 8.8 (HIGH)
References: http://seclists.org/fulldisclosure/2018/Aug/29; http://seclists.org/fulldisclosure/2018/Aug/29
CVE: CVE-2017-12574
Published: 2018-08-24
Description: An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; the account can't be modified or deleted.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2018/Aug/25; http://seclists.org/fulldisclosure/2018/Aug/25
CVE: CVE-2017-12575
Published: 2018-08-24
Description: An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker could exploit this vulnerability by sending a crafted HTTP request to retrieve DHCP clients, firmware version, and network status (ex.: curl -X http://[IP]/aterm_httpif.cgi/negotiate -d "REQ_ID=SUPPORT_IF_GET").
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://jvn.jp/en/jp/JVN38248512/index.html; http://seclists.org/fulldisclosure/2018/Aug/26; http://jvn.jp/en/jp/JVN38248512/index.html
CVE: CVE-2017-12576
Published: 2018-08-24
Description: An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management page was used for debugging purposes, once you login and access the page directly (/admin/system_command.asp), you can execute any command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-668
References: http://seclists.org/fulldisclosure/2018/Aug/27; http://seclists.org/fulldisclosure/2018/Aug/27
CVE: CVE-2017-12577
Published: 2018-08-24
Description: An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2018/Aug/28; http://seclists.org/fulldisclosure/2018/Aug/28
CVE: CVE-2018-14598
Published: 2018-08-24
Description: An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2018/08/21/6; http://www.securityfocus.com/bid/105177; http://www.securitytracker.com/id/1041543
CVE: CVE-2018-14599
Published: 2018-08-24
Description: An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193
References: http://www.openwall.com/lists/oss-security/2018/08/21/6; http://www.securityfocus.com/bid/105177; http://www.securitytracker.com/id/1041543
CVE: CVE-2018-14600
Published: 2018-08-24
Description: An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2018/08/21/6; http://www.securityfocus.com/bid/105177; http://www.securitytracker.com/id/1041543
CVE: CVE-2018-15120
Published: 2018-08-24
Description: libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://52.117.224.77/xfce4-pdos.webm; https://github.com/GNOME/pango/blob/1.42.4/NEWS; https://github.com/GNOME/pango/commit/71aaeaf020340412b8d012fe23a556c0420eda5f
CVE: CVE-2018-15499
Published: 2018-08-24
Description: GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://downwithup.github.io/CVEPosts.html; https://github.com/DownWithUp/CVE-2018-15499; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-15535
Published: 2018-08-24
Description: /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is outside of that directory, aka Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2018/Aug/34; https://www.exploit-db.com/exploits/45271/; http://seclists.org/fulldisclosure/2018/Aug/34
CVE: CVE-2018-15536
Published: 2018-08-24
Description: /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of crafted archives to overwrite arbitrary files via an extract action, aka Directory Traversal.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2018/Aug/34; https://www.exploit-db.com/exploits/45271/; http://seclists.org/fulldisclosure/2018/Aug/34
CVE: CVE-2018-15605
Published: 2018-08-24
Description: An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105168; http://www.securitytracker.com/id/1041548; https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f[PII_REDACTED]7a9fbebd0a1
CVE: CVE-2018-15728
Published: 2018-08-24
Description: Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://seclists.org/bugtraq/2018/Aug/49; http://www.securityfocus.com/bid/105157; https://www.couchbase.com/resources/security#SecurityAlerts
CVE: CVE-2018-3786
Published: 2018-08-24
Description: A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md; https://github.com/eggjs/egg-scripts/pull/26; https://hackerone.com/reports/388936
CVE: CVE-2017-9818
Published: 2018-08-24
Description: The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/148927; https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf
CVE: CVE-2017-9819
Published: 2018-08-24
Description: The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/148926; https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf
CVE: CVE-2017-9820
Published: 2018-08-24
Description: The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/148925; https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf
CVE: CVE-2017-9821
Published: 2018-08-24
Description: The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings (AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM) for SMS validation, which makes it easier for attackers to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/148923; https://github.com/magicj3lly/appexploits/blob/master/BHIM-App-PreliminaryReport.pdf
CVE: CVE-2018-11502
Published: 2018-08-24
Description: An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. An attacker can remotely delete all mod notes and mod note logs in the modCP and ACP via CSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://packetstormsecurity.com/files/148999/MyBB-Moderator-Log-Notes-1.1-Cross-Site-Request-Forgery.html; https://www.exploit-db.com/exploits/45224/; https://packetstormsecurity.com/files/148999/MyBB-Moderator-Log-Notes-1.1-Cross-Site-Request-Forgery.html
CVE: CVE-2018-11653
Published: 2018-08-24
Description: Information disclosure in Netwave IP camera at //etc/RT2870STA.dat (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11653; https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11653
CVE: CVE-2018-11654
Published: 2018-08-24
Description: Information disclosure in Netwave IP camera at get_status.cgi (via HTTP on port 8000) allows an unauthenticated attacker to exfiltrate sensitive information from the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11654; https://github.com/SadFud/Exploits/tree/master/Real%20World/SCADA%20-%20IOT%20Systems/CVE-2018-11654
CVE: CVE-2018-15576
Published: 2018-08-24
Description: An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/149018/Easylogin-Pro-1.3.0-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/45227/; http://packetstormsecurity.com/files/149018/Easylogin-Pro-1.3.0-Remote-Code-Execution.html
CVE: CVE-2018-14059
Published: 2018-08-24
Description: Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/148954/Pimcore-5.2.3-CSRF-Cross-Site-Scripting-SQL-Injection.html; http://seclists.org/fulldisclosure/2018/Aug/13; https://www.exploit-db.com/exploits/45208/
CVE: CVE-2018-15869
Published: 2018-08-25
Description: An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/105172; https://github.com/hashicorp/packer/issues/6584; http://www.securityfocus.com/bid/105172
CVE: CVE-2018-15870
Published: 2018-08-25
Description: An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/libming/libming/issues/122; https://github.com/libming/libming/issues/122
CVE: CVE-2018-15871
Published: 2018-08-25
Description: An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/libming/libming/issues/123; https://github.com/libming/libming/issues/123
CVE: CVE-2018-15874
Published: 2018-08-25
Description: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_DHCP/dlink_dir615_xss_dhcp.md; https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_DHCP/dlink_dir615_xss_dhcp.md
CVE: CVE-2018-15875
Published: 2018-08-25
Description: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_UPnP/dlink_dir615_xss_upnp.md; https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_UPnP/dlink_dir615_xss_upnp.md
CVE: CVE-2018-15842
Published: 2018-08-25
Description: WolfCMS 0.8.3.1 has XSS via the /?/admin/page/add slug parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/wolfcms/wolfcms/issues/679; https://github.com/wolfcms/wolfcms/issues/679
CVE: CVE-2018-15843
Published: 2018-08-25
Description: GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1293; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1293
CVE: CVE-2018-15844
Published: 2018-08-25
Description: An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Vict00r/poc/issues/1; https://www.exploit-db.com/exploits/45314/; https://github.com/Vict00r/poc/issues/1
CVE: CVE-2018-15845
Published: 2018-08-25
Description: There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/gleez/cms/issues/800; https://www.exploit-db.com/exploits/45258/; https://github.com/gleez/cms/issues/800
CVE: CVE-2018-15846
Published: 2018-08-25
Description: An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/mattiapazienti/fledrCMS/issues/2; https://exchange.xforce.ibmcloud.com/vulnerabilities/148992; https://github.com/mattiapazienti/fledrCMS/issues/2
CVE: CVE-2018-15847
Published: 2018-08-25
Description: An issue was discovered in puppyCMS 5.1. There is an XSS vulnerability via menu.php in the "Add Page/URL" URL link field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/choregus/puppyCMS/issues/12; https://exchange.xforce.ibmcloud.com/vulnerabilities/149001; https://github.com/choregus/puppyCMS/issues/12
CVE: CVE-2018-15848
Published: 2018-08-25
Description: An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Westbrookadmin/portfolioCMS/issues/1; https://github.com/Westbrookadmin/portfolioCMS/issues/1
CVE: CVE-2018-15849
Published: 2018-08-25
Description: An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/Westbrookadmin/portfolioCMS/issues/1; https://github.com/Westbrookadmin/portfolioCMS/issues/1
CVE: CVE-2018-15850
Published: 2018-08-25
Description: An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/redaxo/redaxo4/issues/420; https://github.com/redaxo/redaxo4/issues/420
CVE: CVE-2018-15851
Published: 2018-08-25
Description: An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/flexocms/flexo1.source/issues/25; https://github.com/flexocms/flexo1.source/issues/25
CVE: CVE-2018-15852
Published: 2018-08-25
Description: Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bkd00r.wordpress.com/2018/08/24/cve-2018-15852-exploit-title-cable-modem-technicolor-tc7200-20-wifi-buffer-overflow/; https://bkd00r.wordpress.com/2018/08/24/cve-2018-15852-exploit-title-cable-modem-technicolor-tc7200-20-wifi-buffer-overflow/
CVE: CVE-2018-15853
Published: 2018-08-25
Description: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://access.redhat.com/errata/RHSA-2019:2079; https://github.com/xkbcommon/libxkbcommon/commit/1f9d1248c07cda8aaff762429c0dce146de8632a; https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html
CVE: CVE-2018-15854
Published: 2018-08-25
Description: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2019:2079; https://github.com/xkbcommon/libxkbcommon/commit/e3cacae7b1bfda0d839c280494f23284a1187adf; https://lists.freedesktop.org/archives/wayland-devel/2018-August/039232.html