deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-3894
Published: 2018-09-21
Description: An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250-Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "startTime" value in order to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0570
CVE: CVE-2018-3906
Published: 2018-09-21
Description: An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0576; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0576
CVE: CVE-2018-3913
Published: 2018-09-21
Description: An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581
CVE: CVE-2018-3914
Published: 2018-09-21
Description: An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581
CVE: CVE-2018-3915
Published: 2018-09-21
Description: An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581
CVE: CVE-2018-11352
Published: 2018-09-21
Description: The Wallabag application 2.2.3 to 2.3.2 is affected by one cross-site scripting (XSS) vulnerability that is stored within the configuration page. This vulnerability enables the execution of a JavaScript payload each time an administrator visits the configuration page. The vulnerability can be exploited with authentication and used to target administrators and steal their sessions.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/wallabag-2-2-3-to-2-3-2-stored-cross-site-scripting/; https://www.bishopfox.com/news/2018/09/wallabag-2-2-3-to-2-3-2-stored-cross-site-scripting/
CVE: CVE-2018-14688
Published: 2018-09-21
Description: An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross-site scripting vulnerabilities in the name[x], streamUrl[x], homepageUrl[x] parameters (where x is an integer) to internetRadioSettings.view that could be used to steal session information of a victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE: CVE-2018-14689
Published: 2018-09-21
Description: An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the name[x], sourceformats[x], targetFormat[x], step1[x], and step2[x] parameters (where x is an integer) to transcodingSettings.view that could be used to steal session information of a victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE: CVE-2018-14690
Published: 2018-09-21
Description: An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title and subtitle parameters to generalSettings.view that could be used to steal session information of a victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE: CVE-2018-14691
Published: 2018-09-21
Description: An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored cross-site scripting vulnerabilities in the c0-param2, c0-param3, and c0-param4 parameters to dwr/call/plaincall/tagService.setTags.dwr that could be used to steal session information of a victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE: CVE-2018-16281
Published: 2018-09-21
Description: The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://marketplace.atlassian.com/apps/1210816/profields-project-custom-fields/version-history; https://marketplace.atlassian.com/apps/1210816/profields-project-custom-fields/version-history
CVE: CVE-2018-16597
Published: 2018-09-21
Description: An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in the underlying filesystem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html; http://packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; http://www.securityfocus.com/bid/105394
CVE: CVE-2018-16793
Published: 2018-09-21
Description: Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://packetstormsecurity.com/files/149411/Rollup-18-For-Microsoft-Exchange-Server-2010-SP3-Server-Side-Request-Forgery.html; http://seclists.org/fulldisclosure/2018/Sep/20; http://www.securityfocus.com/bid/105386
CVE: CVE-2018-9282
Published: 2018-09-21
Description: An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a user's session, or elevate privileges by targeting an administrative user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities/
CVE: CVE-2013-4451
Published: 2018-09-21
Description: gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://github.com/sitaramc/gitolite/commit/3dad4f8e3214d6ab5f71823019a624fa48b055a3; https://groups.google.com/forum/#%21topic/gitolite/Tu1sjaf7A4A/discussion; https://www.openwall.com/lists/oss-security/2013/10/21/11
CVE: CVE-2013-7203
Published: 2018-09-21
Description: gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html; https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.html; https://marc.info/?l=oss-security&m=[PII_REDACTED]0756&w=2
CVE: CVE-2018-12511
Published: 2018-09-21
Description: In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md; https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
CVE: CVE-2018-13111
Published: 2018-09-21
Description: There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://hackinganarchy.wordpress.com/2018/09/20/cve-2018-13111/; https://hackinganarchy.wordpress.com/2018/09/20/cve-2018-13111/
CVE: CVE-2018-14730
Published: 2018-09-21
Description: An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages; https://github.com/AgentME/browserify-hmr/issues/41; https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages
CVE: CVE-2018-14731
Published: 2018-09-21
Description: An issue was discovered in HMRServer.js in Parcel parcel-bundler. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1 connection (with a random TCP port number) from any origin. The random port number can be found by connecting to http://127.0.0.1 and reading the "new WebSocket" line in the source code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages; https://github.com/parcel-bundler/parcel/issues/1783; https://github.com/parcel-bundler/parcel/pull/1794
CVE: CVE-2018-14732
Published: 2018-09-21
Description: An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.6. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages; https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10; https://github.com/webpack/webpack-dev-server/issues/1445
CVE: CVE-2018-15612
Published: 2018-09-21
Description: A CSRF vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could allow an attacker to add, change, or remove administrative settings. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352, CWE-352
References: https://downloads.avaya.com/css/P8/documents/101052293; https://downloads.avaya.com/css/P8/documents/101052293
CVE: CVE-2018-15613
Published: 2018-09-21
Description: A cross-site scripting (XSS) vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://downloads.avaya.com/css/P8/documents/101052293; https://downloads.avaya.com/css/P8/documents/101052293
CVE: CVE-2018-16821
Published: 2018-09-21
Description: SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434
References: http://blog.51cto.com/13770310/2177212; http://www.seacms.net/thread-6249-1-1.html; http://blog.51cto.com/13770310/2177212
CVE: CVE-2018-16822
Published: 2018-09-21
Description: SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://blog.51cto.com/13770310/2177214; http://www.seacms.net/thread-6251-1-1.html; http://blog.51cto.com/13770310/2177214
CVE: CVE-2018-16833
Published: 2018-09-21
Description: Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149436/ManageEngine-Desktop-Central-10.0.271-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149436/ManageEngine-Desktop-Central-10.0.271-Cross-Site-Scripting.html
CVE: CVE-2018-16965
Published: 2018-09-21
Description: In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html; https://pitstop.manageengine.com/portal/community/topic/supportcenter-plus-version-8-1-build-8109-released; http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html
CVE: CVE-2018-17001
Published: 2018-09-21
Description: On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149441/RICOH-SP-4510SF-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149441/RICOH-SP-4510SF-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17002
Published: 2018-09-21
Description: On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149443/RICOH-MP-2001-Printer-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149443/RICOH-MP-2001-Printer-Cross-Site-Scripting.html
CVE: CVE-2018-17003
Published: 2018-09-21
Description: In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149435/LimeSurvey-3.14.7-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149435/LimeSurvey-3.14.7-Cross-Site-Scripting.html
CVE: CVE-2018-17050
Published: 2018-09-21
Description: The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md; https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
CVE: CVE-2018-17141
Published: 2018-09-21
Description: HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-824
References: http://git.hylafax.org/HylaFAX?a=commit%3Bh=c6cac8d8cd0dbe313689ba77023e12bc5b3027be; http://www.openwall.com/lists/oss-security/2018/09/20/1; https://lists.debian.org/debian-lts-announce/2018/09/msg00026.html
CVE: CVE-2018-17173
Published: 2018-09-21
Description: LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://mamaquieroserpentester.blogspot.com/2018/09/lg-supersign-rce-to-luna-and-back-to.html; http://packetstormsecurity.com/files/152733/LG-Supersign-EZ-CMS-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/45448/
CVE: CVE-2018-17174
Published: 2018-09-21
Description: A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to trigger denial of service (even arbitrary code execution in a certain context) in a product using this library via malformed data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.cnblogs.com/tr3e/p/9662324.html; https://www.cnblogs.com/tr3e/p/9662324.html
CVE: CVE-2018-17317
Published: 2018-09-21
Description: FruityWifi (aka PatatasFritas/PatataWifi) 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the io_mode, ap_mode, io_action, io_in_iface, io_in_set, io_in_ip, io_in_mask, io_in_gw, io_out_iface, io_out_set, io_out_mask, io_out_gw, iface, or domain parameter to /www/script/config_iface.php, or the newSSID, hostapd_secure, hostapd_wpa_passphrase, or supplicant_ssid parameter to /www/page_config.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://blog.51cto.com/010bjsoft/2175710; https://github.com/PatatasFritas/PatataWifi/issues/1; https://github.com/xtr4nge/FruityWifi/issues/276
CVE: CVE-2018-17320
Published: 2018-09-21
Description: An issue was discovered in UCMS 1.4.6. aaddpost.php has stored XSS via the sadmin/aindex.php minfo parameter in a sadmin_aaddpost action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ucms/ucms/issues/1; https://github.com/ucms/ucms/issues/1
CVE: CVE-2018-12169
Published: 2018-09-21
Description: Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.
CVSS Score: 7.6 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105387; https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html; https://support.lenovo.com/us/en/solutions/LEN-20527
CVE: CVE-2018-14889
Published: 2018-09-21
Description: CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://vectra.ai/security-advisories; https://vectra.ai/security-advisories
CVE: CVE-2018-14890
Published: 2018-09-21
Description: Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://vectra.ai/security-advisories; https://vectra.ai/security-advisories
CVE: CVE-2018-14891
Published: 2018-09-21
Description: Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability.
CVSS Score: 7.8 (HIGH)
References: https://vectra.ai/security-advisories; https://vectra.ai/security-advisories
CVE: CVE-2018-17321
Published: 2018-09-22
Description: An issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://secwk.blogspot.com/2018/09/seacms-664-xss-vulnerability_14.html; https://secwk.blogspot.com/2018/09/seacms-664-xss-vulnerability_14.html
CVE: CVE-2018-17322
Published: 2018-09-22
Description: Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/source-trace/yunucms/issues/1; https://github.com/source-trace/yunucms/issues/1
CVE: CVE-2018-17332
Published: 2018-09-22
Description: An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/agambier/libsvg2/issues/2; https://github.com/agambier/libsvg2/issues/2
CVE: CVE-2018-17333
Published: 2018-09-22
Description: An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svg_types.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because sscanf is misused.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/agambier/libsvg2/issues/4; https://github.com/agambier/libsvg2/issues/4
CVE: CVE-2018-17334
Published: 2018-09-22
Description: An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/agambier/libsvg2/issues/3; https://github.com/agambier/libsvg2/issues/3
CVE: CVE-2018-17336
Published: 2018-09-22
Description: UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: https://access.redhat.com/errata/RHSA-2019:2178; https://github.com/storaged-project/udisks/issues/578; https://usn.ubuntu.com/3772-1/
CVE: CVE-2018-17338
Published: 2018-09-23
Description: An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/grandnew/software-vulnerabilities/tree/master/pdfalto#heap-buffer-overflow-in-function-textpagedump; https://github.com/kermitt2/pdfalto/issues/29; https://github.com/grandnew/software-vulnerabilities/tree/master/pdfalto#heap-buffer-overflow-in-function-textpagedump
CVE: CVE-2018-17341
Published: 2018-09-23
Description: BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://github.com/bigtreecms/BigTree-CMS/issues/345; https://github.com/bigtreecms/BigTree-CMS/issues/345