deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11685
Published: 2018-06-04
Description: Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00038.html; https://github.com/liblouis/liblouis/issues/593; https://usn.ubuntu.com/3672-1/
CVE: CVE-2018-11692
Published: 2018-06-04
Description: An issue was discovered on Canon LBP6650, LBP3370, LBP3460, and LBP7750C devices. It is possible to bypass the Administrator Mode authentication for /tlogin.cgi via vectors involving frame.cgi?page=DevStatus. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/huykha/2dfbe97810e96a05e67359fd9e7cc9ff; https://www.exploit-db.com/exploits/44844/; https://gist.github.com/huykha/2dfbe97810e96a05e67359fd9e7cc9ff
CVE: CVE-2018-11693
Published: 2018-06-04
Description: An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::skip_over_scopes which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sass/libsass/issues/2661; https://github.com/sass/libsass/issues/2661
CVE: CVE-2018-11694
Published: 2018-06-04
Description: An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/sass/libsass/issues/2663; https://github.com/sass/libsass/issues/2663
CVE: CVE-2018-11695
Published: 2018-06-04
Description: An issue was discovered in LibSass <3.5.3. A NULL pointer dereference was found in the function Sass::Expand::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/sass/libsass/issues/2664; https://github.com/sass/libsass/pull/2631; https://github.com/sass/libsass/releases
CVE: CVE-2018-11696
Published: 2018-06-04
Description: An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Inspect::operator which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/sass/libsass/issues/2665; https://github.com/sass/libsass/issues/2665
CVE: CVE-2018-11697
Published: 2018-06-04
Description: An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sass/libsass/issues/2656; https://github.com/sass/libsass/issues/2656
CVE: CVE-2018-11698
Published: 2018-06-04
Description: An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sass/libsass/issues/2662; https://github.com/sass/libsass/issues/2662
CVE: CVE-2018-9994
Published: 2018-06-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if the data channel on the CPU can be monitored the lookup table accesses are sufficient to leak information on the AES key being used. There was also a leak in AESEngine although it was substantially less. AESEngine has been modified to remove any signs of leakage (testing carried out on Intel X86-64) and is now the primary AES class for the BC JCE provider from 1.56. Use of AESFastEngine is now only recommended where otherwise deemed appropriate.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-310
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/413b42f4d[PII_REDACTED]85c830cfcde95f9b0e93b#diff-54656f860db94b867ba7542430cd2ef0
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/790642084c4e0cadd47352054f868cc8397e2c00#diff-e5934feac8203ca0104ab291a3560a31
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k value and ultimately the private value as well.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-361
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/acaac81f96fec91ab45bd0412beaf9c3acd8defa#diff-e75226a9ca49217a7276b29242ec59ce
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/843c2e60f67d71faf81d236f448ebbe56c62c647#diff-25c3c78db788365f36839b3f2d3016b9
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-04
Description: In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initialised with DSA parameters, 1.55 and earlier generates a private value assuming a 1024 bit key size. In earlier releases this can be dealt with by explicitly passing parameters to the key pair generator.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: https://access.redhat.com/errata/RHSA-2018:2669; https://access.redhat.com/errata/RHSA-2018:2927; https://github.com/bcgit/bc-java/commit/50a53068c094d6cff37659da33c9b4505becd389#diff-5578e61500abb2b87b300d3114bdfd7d
CVE: CVE-2018-11709
Published: 2018-06-04
Description: wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.dewhurstsecurity.com/2018/06/01/wp-foro-wordpress-plugin-xss-vulnerability.html; https://wordpress.org/plugins/wpforo/#developers; https://wpvulndb.com/vulnerabilities/9090
CVE: CVE-2018-11710
Published: 2018-06-04
Description: soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://lib.openmpt.org/libopenmpt/2018/04/29/security-updates-0.3.9-0.2-beta32-0.2.7561-beta20.5-p9-0.2.7386-beta20.3-p12/; https://source.openmpt.org/browse/openmpt/trunk/?op=revision&rev=10149&peg=10150; https://lib.openmpt.org/libopenmpt/2018/04/29/security-updates-0.3.9-0.2-beta32-0.2.7561-beta20.5-p9-0.2.7386-beta20.3-p12/
CVE: CVE-2018-11711
Published: 2018-06-04
Description: A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web interface without knowing the PIN for /login.html via vectors involving /portal_top.html to get full access to the device. NOTE: the vendor reportedly responded that this issue occurs when a customer keeps the default settings without using the countermeasures and best practices shown in the documentation
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://gist.github.com/huykha/9dbcd0e46058f1e18bab241d1b2754bd; https://www.exploit-db.com/exploits/44845/; https://gist.github.com/huykha/9dbcd0e46058f1e18bab241d1b2754bd
CVE: CVE-2018-10611
Published: 2018-06-04
Description: Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch applications and support remote code execution through web services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1; http://www.securityfocus.com/bid/104377; https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
CVE: CVE-2018-10613
Published: 2018-06-04
Description: Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1; http://www.securityfocus.com/bid/104377; https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
CVE: CVE-2018-10615
Published: 2018-06-04
Description: Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform.
CVSS Score: 8.1 (HIGH)
CWE: CWE-23, CWE-22
References: http://www.gegridsolutions.com/app/DownloadFile.aspx?prod=pulsenet&type=9&file=1; http://www.securityfocus.com/bid/104377; https://ics-cert.us-cert.gov/advisories/ICSA-18-151-02
CVE: CVE-2018-11712
Published: 2018-06-04
Description: WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://bugs.webkit.org/show_bug.cgi?id=184804; https://security.gentoo.org/glsa/201808-04; https://trac.webkit.org/changeset/230886/webkit
CVE: CVE-2018-11713
Published: 2018-06-04
Description: WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.
CVSS Score: 6.5 (MEDIUM)
References: https://bugs.webkit.org/show_bug.cgi?id=126384; https://security.gentoo.org/glsa/201808-04; https://trac.webkit.org/changeset/228088/webkit
CVE: CVE-2018-11714
Published: 2018-06-04
Description: An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: http://blog.securelayer7.net/time-to-disable-tp-link-home-wifi-router/; https://www.exploit-db.com/exploits/44781/; http://blog.securelayer7.net/time-to-disable-tp-link-home-wifi-router/
CVE: CVE-2016-10636
Published: 2018-06-04
Description: grunt-ccompiler is a Closure Compiler Grunt Plugin. grunt-ccompiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/239; https://nodesecurity.io/advisories/239
CVE: CVE-2016-10637
Published: 2018-06-04
Description: haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/237; https://nodesecurity.io/advisories/237
CVE: CVE-2016-10638
Published: 2018-06-04
Description: js-given is a JavaScript frontend to jgiven. js-given downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/241; https://nodesecurity.io/advisories/241
CVE: CVE-2016-10639
Published: 2018-06-04
Description: redis-srvr is a npm wrapper for redis-server. redis-srvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/238; https://nodesecurity.io/advisories/238
CVE: CVE-2016-10640
Published: 2018-06-04
Description: node-thulac is a node binding for thulac. node-thulac downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/236; https://nodesecurity.io/advisories/236
CVE: CVE-2016-10641
Published: 2018-06-04
Description: node-bsdiff-android downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/234; https://nodesecurity.io/advisories/234
CVE: CVE-2016-10642
Published: 2018-06-04
Description: cmake installs the cmake x86 linux binaries. cmake downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/233; https://nodesecurity.io/advisories/233
CVE: CVE-2016-10643
Published: 2018-06-04
Description: jstestdriver is a wrapper for Google's jstestdriver. jstestdriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/244; https://nodesecurity.io/advisories/244
CVE: CVE-2016-10644
Published: 2018-06-04
Description: slimerjs-edge is a npm wrapper for installing the bleeding edge version of slimerjs. slimerjs-edge downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/243; https://nodesecurity.io/advisories/243
CVE: CVE-2016-10645
Published: 2018-06-04
Description: grunt-images is a grunt plugin for processing images. grunt-images downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/255; https://nodesecurity.io/advisories/255
CVE: CVE-2016-10646
Published: 2018-06-04
Description: resourcehacker is a Node wrapper of Resource Hacker (windows executable resource editor). resourcehacker downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/254; https://nodesecurity.io/advisories/254
CVE: CVE-2016-10647
Published: 2018-06-04
Description: node-air-sdk is an AIR SDK for nodejs. node-air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/250; https://nodesecurity.io/advisories/250
CVE: CVE-2016-10648
Published: 2018-06-04
Description: marionette-socket-host is a marionette-js-runner host for sending actions over a socket. marionette-socket-host downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/252; https://nodesecurity.io/advisories/252
CVE: CVE-2016-10649
Published: 2018-06-04
Description: frames-compiler downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/247; https://nodesecurity.io/advisories/247
CVE: CVE-2016-10651
Published: 2018-06-04
Description: webdriver-launcher is a Node.js Selenium Webdriver Launcher. webdriver-launcher downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/246; https://nodesecurity.io/advisories/246
CVE: CVE-2016-10652
Published: 2018-06-04
Description: prebuild-lwip is a module for comprehensive, fast, and simple image processing and manipulation. prebuild-lwip downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/248; https://nodesecurity.io/advisories/248
CVE: CVE-2016-10653
Published: 2018-06-04
Description: xd-testing is a testing library for cross-device (XD) web applications. xd-testing downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/257; https://nodesecurity.io/advisories/257
CVE: CVE-2016-10654
Published: 2018-06-04
Description: sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/256; https://nodesecurity.io/advisories/256
CVE: CVE-2016-10655
Published: 2018-06-04
Description: The clang-extra module installs LLVM's clang-extra tools. clang-extra downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/265; https://nodesecurity.io/advisories/265
CVE: CVE-2016-10656
Published: 2018-06-04
Description: qbs is a build tool that helps simplify the build process for developing projects across multiple platforms. qbs downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/266; https://nodesecurity.io/advisories/266
CVE: CVE-2016-10657
Published: 2018-06-04
Description: co-cli-installer downloads the co-cli module as part of the install process, but does so over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/268; https://nodesecurity.io/advisories/268