deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5730
Published: 2018-03-06
Description: MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN.
CVSS Score: 3.8 (LOW)
CWE: CWE-90
References: http://www.securitytracker.com/id/1042071; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3071
CVE: CVE-2018-6019
Published: 2018-03-06
Description: Samsung Display Solutions App before 3.02 for Android allows man-in-the-middle attackers to spoof B2B content by leveraging failure to use encryption during information transmission.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://wwws.nightwatchcybersecurity.com/2018/03/01/content-injection-in-samsung-display-solutions-application-for-android-cve-2018-6019/; https://wwws.nightwatchcybersecurity.com/2018/03/01/content-injection-in-samsung-display-solutions-application-for-android-cve-2018-6019/
CVE: CVE-2018-6527
Published: 2018-03-06
Description: XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf; ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE: CVE-2018-6528
Published: 2018-03-06
Description: XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf; ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE: CVE-2018-6529
Published: 2018-03-06
Description: XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf; ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE: CVE-2018-6530
Published: 2018-03-06
Description: OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf; ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf
CVE: CVE-2018-6808
Published: 2018-03-06
Description: NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to download arbitrary files on the target system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040440; https://support.citrix.com/article/CTX232161; http://www.securitytracker.com/id/1040440
CVE: CVE-2018-6809
Published: 2018-03-06
Description: NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1040440; https://support.citrix.com/article/CTX232161; http://www.securitytracker.com/id/1040440
CVE: CVE-2018-6810
Published: 2018-03-06
Description: Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securitytracker.com/id/1040440; https://support.citrix.com/article/CTX232161; http://www.securitytracker.com/id/1040440
CVE: CVE-2018-6811
Published: 2018-03-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Citrix NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to inject arbitrary web script or HTML via the Citrix NetScaler interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040440; https://support.citrix.com/article/CTX232161; http://www.securitytracker.com/id/1040440
CVE: CVE-2018-7170
Published: 2018-03-06
Description: ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order to win the clock selection of ntpd and modify a victim's clock via a Sybil attack. This issue exists because of an incomplete fix for CVE-2016-1549.
CVSS Score: 5.3 (MEDIUM)
References: http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html; http://support.ntp.org/bin/view/Main/NtpBug3415; http://www.securityfocus.com/archive/1/541824/100/0/threaded
CVE: CVE-2018-7182
Published: 2018-03-06
Description: The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mode 6 packet with a ntpd instance from 4.2.8p6 through 4.2.8p10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html; http://support.ntp.org/bin/view/Main/NtpBug3412; http://www.securityfocus.com/archive/1/541824/100/0/threaded
CVE: CVE-2018-7184
Published: 2018-03-06
Description: ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before updating the "received" timestamp, which allows remote attackers to cause a denial of service (disruption) by sending a packet with a zero-origin timestamp causing the association to reset and setting the contents of the packet as the most recent timestamp. This issue is a result of an incomplete fix for CVE-2015-7704.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html; http://support.ntp.org/bin/view/Main/NtpBug3453; http://www.securityfocus.com/archive/1/541824/100/0/threaded
CVE: CVE-2018-7185
Published: 2018-03-06
Description: The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote attackers to cause a denial of service (disruption) by continually sending a packet with a zero-origin timestamp and source IP address of the "other side" of an interleaved association causing the victim ntpd to reset its association.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/146631/Slackware-Security-Advisory-ntp-Updates.html; http://support.ntp.org/bin/view/Main/NtpBug3454; http://www.securityfocus.com/archive/1/541824/100/0/threaded
CVE: CVE-2018-5461
Published: 2018-03-06
Description: An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326, CWE-326
References: http://www.securityfocus.com/bid/103340; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01; http://www.securityfocus.com/bid/103340
CVE: CVE-2018-5465
Published: 2018-03-06
Description: A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: http://www.securityfocus.com/bid/103340; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01; http://www.securityfocus.com/bid/103340
CVE: CVE-2018-5467
Published: 2018-03-06
Description: An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-598, CWE-200
References: http://www.securityfocus.com/bid/103340; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01; http://www.securityfocus.com/bid/103340
CVE: CVE-2018-5469
Published: 2018-03-06
Description: An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: http://www.securityfocus.com/bid/103340; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01; http://www.securityfocus.com/bid/103340
CVE: CVE-2018-5471
Published: 2018-03-06
Description: A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: http://www.securityfocus.com/bid/103340; https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01; http://www.securityfocus.com/bid/103340
CVE: CVE-2018-7736
Published: 2018-03-06
Description: In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ponyma233/cms/blob/master/Z-Blog_1.5.1.1740_bugs.md; https://github.com/zblogcn/zblogphp/issues/205; https://packetstormsecurity.com/files/147066/Z-Blog-1.5.1.1740-Cross-Site-Scripting.html
CVE: CVE-2018-7737
Published: 2018-03-06
Description: In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/ponyma233/cms/blob/master/Z-Blog_1.5.1.1740_bugs.md#web-site-physical-path-leakage; https://github.com/zblogcn/zblogphp/issues/205; https://packetstormsecurity.com/files/147063/Z-Blog-1.5.1.1740-Full-Path-Disclosure.html
CVE: CVE-2016-5179
Published: 2018-03-07
Description: Chrome OS before 53.0.2785.144 allows remote attackers to execute arbitrary commands at boot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93260; https://bugs.chromium.org/p/chromium/issues/detail?id=649039; https://chromereleases.googleblog.com/2016/09/stable-channel-updates-for-chrome-os.html
CVE: CVE-2016-7443
Published: 2018-03-07
Description: Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.exponentcms.org/news/patch-1-released-for-v2-3-9; https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0; http://www.exponentcms.org/news/patch-1-released-for-v2-3-9
CVE: CVE-2017-11649
Published: 2018-03-07
Description: Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html; https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html
CVE: CVE-2017-11650
Published: 2018-03-07
Description: Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html; https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html
CVE: CVE-2018-7738
Published: 2018-03-07
Description: In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/103367; https://bugs.debian.org/892179; https://github.com/karelzak/util-linux/commit/75f03badd7ed9f1dd951863d75e756883d3acc55
CVE: CVE-2018-7739
Published: 2018-03-07
Description: antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and password parameters, as demonstrated by a username=>&password=%0a string to the /login URI. This allows obtaining root permissions within the web management console, because the login process uses Java's ProcessBuilder class and a bash script called antsle-auth with insufficient input validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://blog.codecatoctin.com/2018/02/antman-authentication-bypass.html; https://www.exploit-db.com/exploits/44220/; https://www.exploit-db.com/exploits/44262/
CVE: CVE-2017-18221
Published: 2018-03-07
Description: The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc; http://www.securityfocus.com/bid/103321; https://github.com/torvalds/linux/commit/70feee0e1ef331b22cc51f383d532a0d043fbdcc
CVE: CVE-2018-7720
Published: 2018-03-07
Description: A cross-site request forgery (CSRF) vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Kyhvedn/CVE_Description/blob/master/CVE-2018-7720_Description.md; https://github.com/Kyhvedn/CVE_Description/blob/master/CVE-2018-7720_Description.md
CVE: CVE-2018-7721
Published: 2018-03-07
Description: Cross Site Scripting (XSS) exists in MetInfo 6.0.0 via /feedback/index.php because app/system/feedback/web/feedback.class.php mishandles input data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Gitaddy/vluns/blob/master/Metinfo.md; https://github.com/Gitaddy/vluns/blob/master/Metinfo.md
CVE: CVE-2018-7740
Published: 2018-03-07
Description: The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/103316; https://access.redhat.com/errata/RHSA-2018:3083; https://access.redhat.com/errata/RHSA-2018:3096
CVE: CVE-2018-7741
Published: 2018-03-07
Description: Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069; https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069
CVE: CVE-2018-1054
Published: 2018-03-07
Description: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-125
References: http://www.securityfocus.com/bid/103228; https://access.redhat.com/errata/RHSA-2018:0414; https://access.redhat.com/errata/RHSA-2018:0515
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-07
Description: NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2018/03/msg00020.html; https://sourceforge.net/p/net-snmp/bugs/2821/; https://www.debian.org/security/2018/dsa-4154
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-07
Description: Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://bugs.python.org/issue33001; https://github.com/python/cpython/pull/5989; https://bugs.python.org/issue33001
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-07
Description: Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via the victim opening an electron protocol handler in their browser. This vulnerability appears to have been fixed in Electron 1.8.2-beta.5. This issue is due to an incomplete fix for CVE-2[PII_REDACTED], specifically the black list used was not case insensitive allowing an attacker to potentially bypass it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://electronjs.org/releases#1.8.2-beta.5; https://github.com/electron/electron/commit/ce361a12e355f9e1e99c989f1ea056c9e502dbe7; https://electronjs.org/releases#1.8.2-beta.5
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-07
Description: Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. This vulnerability appears to have been fixed in 1.5.5 and 2.0.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: https://access.redhat.com/errata/RHSA-2018:1060; https://github.com/sinatra/rack-protection/pull/98; https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb#commitcomment-27964109
CVE: CVE-2014-5044
Published: 2018-03-07
Description: Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2014/07/24/1; http://www.openwall.com/lists/oss-security/2014/07/31/6; https://bugzilla.redhat.com/show_bug.cgi?id=1122812
CVE: CVE-2014-8780
Published: 2018-03-07
Description: Cross-site scripting (XSS) vulnerability in Jease 2.11 allows remote authenticated users to inject arbitrary web script or HTML via a content section note.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/534272/100/0/threaded; https://www.vulnerability-lab.com/get_content.php?id=1373; http://www.securityfocus.com/archive/1/534272/100/0/threaded
CVE: CVE-2018-7473
Published: 2018-03-07
Description: Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://blog.redyops.com/cve-2018-7473-open-url-redirection-vulnerability/; https://blog.redyops.com/cve-2018-7473-open-url-redirection-vulnerability/
CVE: CVE-2018-7745
Published: 2018-03-07
Description: An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/install/installation/createuserinfo requests, resulting in account creation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/cobub/razor/issues/161; https://www.exploit-db.com/exploits/44419/; https://github.com/cobub/razor/issues/161
CVE: CVE-2018-7746
Published: 2018-03-07
Description: An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://github.com/cobub/razor/issues/161; https://www.exploit-db.com/exploits/44416/; https://github.com/cobub/razor/issues/161
CVE: CVE-2018-5452
Published: 2018-03-07
Description: A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547 could force the PLC to change its state into halt mode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/103180; https://ics-cert.us-cert.gov/advisories/ICSA-18-058-03; http://www.securityfocus.com/bid/103180
CVE: CVE-2017-15367
Published: 2018-03-07
Description: Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://bacula-web.org/download/articles/bacula-web-8-0-0-rc2.html; http://bugs.bacula-web.org/view.php?id=211; https://github.com/bacula-web/bacula-web/commit/90d4c44a0dd0d65c6fb3ab2417b83d700c8413ae