deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-7297
Published: 2019-01-31
Description: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securityfocus.com/bid/106815; https://github.com/leonW7/D-Link/blob/master/Vul_1.md; http://www.securityfocus.com/bid/106815
CVE: CVE-2018-15779
Published: 2019-02-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018.  Notes: none
CVE: CVE-2019-7298
Published: 2019-02-01
Description: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of ' /bin/telnetd' for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/106814; https://github.com/leonW7/D-Link/blob/master/Vul_2.md; http://www.securityfocus.com/bid/106814
CVE: CVE-2017-18361
Published: 2019-02-01
Description: In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/Pylons/colander/issues/290; https://github.com/Pylons/colander/pull/323; https://github.com/Pylons/colander/issues/290
CVE: CVE-2019-7300
Published: 2019-02-01
Description: Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering the commands in the admin.index.php command-line field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522
References: https://code610.blogspot.com/2019/01/rce-in-artica.html; https://github.com/c610/tmp/blob/master/aRtiCE.py; https://code610.blogspot.com/2019/01/rce-in-artica.html
CVE: CVE-2019-7301
Published: 2019-02-01
Description: Zen Load Balancer 3.10.1 allows remote authenticated admin users to execute arbitrary commands as root via shell metacharacters in the index.cgi?action=View_Cert certname parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/106812; https://code610.blogspot.com/2019/01/rce-in-zenload-balancer.html; http://www.securityfocus.com/bid/106812
CVE: CVE-2018-15617
Published: 2019-02-01
Description: A vulnerability in the "capro" (Call Processor) process component of Avaya Aura Communication Manager could allow a remote, unauthenticated user to cause denial of service. Affected versions include 6.3.x, all 7.x versions prior to 7.1.3.2, and all 8.x versions prior to 8.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/106826; https://downloads.avaya.com/css/P8/documents/101055396; http://www.securityfocus.com/bid/106826
CVE: CVE-2019-3604
Published: 2019-02-01
Description: Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/106830; https://kc.mcafee.com/corporate/index?page=content&id=SB10268; http://www.securityfocus.com/bid/106830
CVE: CVE-2016-10741
Published: 2019-02-01
Description: In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04197b341f23b908193308b8d63d17ff23232598; http://www.securityfocus.com/bid/106822; https://bugzilla.suse.com/show_bug.cgi?id=1124010
CVE: CVE-2018-5498
Published: 2019-02-01
Description: Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service (DoS) on affected versions of clustered Data ONTAP configured for multiprotocol access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-18988
Published: 2019-02-01
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-20
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2018-0722
Published: 2019-02-01
Description: Path Traversal vulnerability in Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6 could allow remote attackers to access sensitive information on the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.qnap.com/zh-tw/security-advisory/nas-201901-14; https://www.qnap.com/zh-tw/security-advisory/nas-201901-14
CVE: CVE-2018-16479
Published: 2019-02-01
Description: Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/411405; https://hackerone.com/reports/411405
CVE: CVE-2018-16480
Published: 2019-02-01
Description: A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/329950; https://www.npmjs.com/package/public; https://hackerone.com/reports/329950
CVE: CVE-2018-16481
Published: 2019-02-01
Description: A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/330356; https://hackerone.com/reports/330356
CVE: CVE-2018-16482
Published: 2019-02-01
Description: A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/330285; https://hackerone.com/reports/330285
CVE: CVE-2018-16483
Published: 2019-02-01
Description: A deficiency in the access control in module express-cart <=1.1.5 allows unprivileged users to add new users to the application as administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290
References: https://hackerone.com/reports/343626; https://hackerone.com/reports/343626
CVE: CVE-2018-16484
Published: 2019-02-01
Description: A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/319794; https://hackerone.com/reports/319794
CVE: CVE-2018-16485
Published: 2019-02-01
Description: Path Traversal vulnerability in module m-server <1.4.1 allows malicious user to access unauthorized content of any file in the directory tree e.g. /etc/passwd by appending slashes to the URL request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/319795; https://hackerone.com/reports/319795
CVE: CVE-2018-16486
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400, CWE-74
References: https://hackerone.com/reports/380878; https://hackerone.com/reports/380878
CVE: CVE-2018-16487
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-400
References: https://hackerone.com/reports/380873; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://hackerone.com/reports/380873
CVE: CVE-2018-16489
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400, CWE-74
References: https://hackerone.com/reports/430291; https://hackerone.com/reports/430291
CVE: CVE-2018-16490
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-74
References: https://hackerone.com/reports/390860; https://hackerone.com/reports/390860
CVE: CVE-2018-16491
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400, CWE-74
References: https://hackerone.com/reports/430831; https://hackerone.com/reports/430831
CVE: CVE-2018-16492
Published: 2019-02-01
Description: A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400, CWE-74
References: https://hackerone.com/reports/381185; https://hackerone.com/reports/381185
CVE: CVE-2018-16493
Published: 2019-02-01
Description: A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548, CWE-22
References: https://hackerone.com/reports/432600; https://hackerone.com/reports/432600
CVE: CVE-2018-19004
Published: 2019-02-01
Description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/106634; https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01; http://www.securityfocus.com/bid/106634
CVE: CVE-2019-7308
Published: 2019-02-01
Description: kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=979d63d50c0c0f7bc537bf821e056cc9fe5abd38; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d3bd7413e0ca40b60cf60d4003246d067cafdeda; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
CVE: CVE-2019-7309
Published: 2019-02-03
Description: In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106835; https://security.gentoo.org/glsa/202006-04; https://sourceware.org/bugzilla/show_bug.cgi?id=24155
CVE: CVE-2019-7310
Published: 2019-02-03
Description: In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-681
References: http://www.securityfocus.com/bid/106829; https://access.redhat.com/errata/RHSA-2019:2022; https://access.redhat.com/errata/RHSA-2019:2713
CVE: CVE-2019-7312
Published: 2019-02-03
Description: Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.primx.eu/en/bulletins/security-bulletin-19110545; https://www.primx.eu/en/bulletins/security-bulletin-19110545
CVE: CVE-2019-7313
Published: 2019-02-03
Description: www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code; https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code
CVE: CVE-2019-7314
Published: 2019-02-04
Description: liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation fault) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.live555.com/pipermail/live-devel/2019-February/021143.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00024.html
CVE: CVE-2019-7316
Published: 2019-02-04
Description: An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/eddietcc/CVEnotes/tree/master/Chat2; https://kc.mcafee.com/corporate/index?page=content&id=SB10330; https://packetstormsecurity.com/files/125780
CVE: CVE-2019-7317
Published: 2019-02-04
Description: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html
CVE: CVE-2019-7323
Published: 2019-02-04
Description: GUP (generic update process) in LightySoft LogMX before 7.4.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update. The update process relies on cleartext HTTP. The attacker could replace the LogMXUpdater.class file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://bmantra.github.io/logmx/logmx.html; https://github.com/bmantra/bmantra.github.io/blob/master/logmx/logmx.html; https://logmx.com/download
CVE: CVE-2018-11760
Published: 2019-02-04
Description: When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106786; https://lists.apache.org/thread.html/6d015e56b3a3da968f86e0b6acc69f17ecc16b499389e12d8255bf6e%40%3Ccommits.spark.apache.org%3E; https://lists.apache.org/thread.html/a86ee93d07b6f61b82b61a28049aed311f5cc9420d26cc95f1a9de7b%40%3Cuser.spark.apache.org%3E
CVE: CVE-2019-3461
Published: 2019-02-04
Description: Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918956; https://lists.debian.org/debian-lts-announce/2019/01/msg00017.html; https://lists.debian.org/debian-security-announce/2019/msg00003.html
CVE: CVE-2019-3813
Published: 2019-02-04
Description: Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193
References: http://www.securityfocus.com/bid/106801; https://access.redhat.com/errata/RHSA-2019:0231; https://access.redhat.com/errata/RHSA-2019:0232
CVE: CVE-2018-20751
Published: 2019-02-04
Description: An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-crop_page-podofo-0-9-6/; https://sourceforge.net/p/podofo/tickets/33/; https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-crop_page-podofo-0-9-6/
CVE: CVE-2019-7324
Published: 2019-02-04
Description: app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153093/Kanboard-1.2.7-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/May/41; https://github.com/kanboard/kanboard/commit/83deec2e3621c40d15a06e2491f27571d32fe10f
CVE: CVE-2019-7325
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2450; https://github.com/ZoneMinder/zoneminder/issues/2450
CVE: CVE-2019-7326
Published: 2019-02-04
Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper filtration is omitted. This relates to the index.php?view=monitor Host Name field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2452; https://github.com/ZoneMinder/zoneminder/issues/2452
CVE: CVE-2019-7327
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2447; https://github.com/ZoneMinder/zoneminder/issues/2447
CVE: CVE-2019-7328
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2449; https://github.com/ZoneMinder/zoneminder/issues/2449
CVE: CVE-2019-7329
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2446; https://github.com/ZoneMinder/zoneminder/issues/2446
CVE: CVE-2019-7330
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2448; https://github.com/ZoneMinder/zoneminder/issues/2448
CVE: CVE-2019-7331
Published: 2019-02-04
Description: Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it vulnerable to HTML Injection and an XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2451; https://github.com/ZoneMinder/zoneminder/issues/2451
CVE: CVE-2019-7332
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view download (download.php) because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2442; https://github.com/ZoneMinder/zoneminder/issues/2442
CVE: CVE-2019-7333
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (download.php) because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2441; https://github.com/ZoneMinder/zoneminder/issues/2441
CVE: CVE-2019-7334
Published: 2019-02-04
Description: Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because proper filtration is omitted.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZoneMinder/zoneminder/issues/2443; https://github.com/ZoneMinder/zoneminder/issues/2443