deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10350
Published: 2018-05-25
Description: A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php.  Authentication is required in order to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://success.trendmicro.com/solution/1119715; https://www.zerodayinitiative.com/advisories/ZDI-18-421/; https://success.trendmicro.com/solution/1119715
CVE: CVE-2018-6232
Published: 2018-05-25
Description: A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx; https://www.zerodayinitiative.com/advisories/ZDI-18-266/; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE: CVE-2018-6233
Published: 2018-05-25
Description: A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222060 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx; https://www.zerodayinitiative.com/advisories/ZDI-18-267/; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE: CVE-2018-6234
Published: 2018-05-25
Description: An Out-of-Bounds Read Information Disclosure vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx; https://www.zerodayinitiative.com/advisories/ZDI-18-268/; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE: CVE-2018-6235
Published: 2018-05-25
Description: An Out-of-Bounds write privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222814 by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx; https://www.zerodayinitiative.com/advisories/ZDI-18-269/; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE: CVE-2018-6236
Published: 2018-05-25
Description: A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx; https://www.zerodayinitiative.com/advisories/ZDI-18-410/; https://esupport.trendmicro.com/en-us/home/pages/technical-support/1119591.aspx
CVE: CVE-2018-6237
Published: 2018-05-25
Description: A vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow an unauthenticated remote attacker to manipulate the product to send a large number of specially crafted HTTP requests to potentially cause the file system to fill up, eventually causing a denial of service (DoS) situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://success.trendmicro.com/solution/1119715; https://www.tenable.com/security/research/tra-2018-10; https://success.trendmicro.com/solution/1119715
CVE: CVE-2017-14185
Published: 2018-05-25
Description: An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104288; https://fortiguard.com/advisory/FG-IR-17-231; http://www.securityfocus.com/bid/104288
CVE: CVE-2018-8862
Published: 2018-05-25
Description: In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, an improper authentication vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
CVSS Score: 3.1 (LOW)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/103721; https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01; http://www.securityfocus.com/bid/103721
CVE: CVE-2018-8864
Published: 2018-05-25
Description: In ATI Systems Emergency Mass Notification Systems (HPSS16, HPSS32, MHPSS, and ALERT4000) devices, a missing encryption of sensitive data vulnerability caused by specially crafted malicious radio transmissions may allow an attacker to remotely trigger false alarms.
CVSS Score: 3.1 (LOW)
CWE: CWE-311, CWE-311
References: http://www.securityfocus.com/bid/103721; https://ics-cert.us-cert.gov/advisories/ICSA-18-100-01; http://www.securityfocus.com/bid/103721
CVE: CVE-2018-8871
Published: 2018-05-25
Description: In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: http://www.securityfocus.com/bid/104216; https://ics-cert.us-cert.gov/advisories/ICSA-18-137-04; http://www.securityfocus.com/bid/104216
CVE: CVE-2018-11471
Published: 2018-05-25
Description: Cockpit 0.5.5 has XSS via a collection, form, or region.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nikhil1232/Cockpit-CMS-XSS-POC; https://github.com/nikhil1232/Cockpit-CMS-XSS-POC
CVE: CVE-2018-11472
Published: 2018-05-25
Description: Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/445; https://github.com/nikhil1232/Monstra-CMS-3.0.4-Reflected-XSS-On-Login-; https://github.com/monstra-cms/monstra/issues/445
CVE: CVE-2018-11473
Published: 2018-05-25
Description: Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/446; https://github.com/nikhil1232/Monstra-CMS-3.0.4-XSS-ON-Registration-Page; https://github.com/monstra-cms/monstra/issues/446
CVE: CVE-2018-11474
Published: 2018-05-25
Description: Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser.
CVSS Score: 8.0 (HIGH)
CWE: CWE-384
References: https://github.com/monstra-cms/monstra/issues/444; https://github.com/monstra-cms/monstra/issues/444
CVE: CVE-2018-11475
Published: 2018-05-25
Description: Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.
CVSS Score: 8.0 (HIGH)
CWE: CWE-384
References: https://github.com/monstra-cms/monstra/issues/443; https://github.com/monstra-cms/monstra/issues/443
CVE: CVE-2018-11479
Published: 2018-05-25
Description: The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \\.\pipe\WindscribeService named pipe endpoint that allows the Windscribe VPN process to connect and execute an OpenVPN process or other processes (like taskkill, etc.). There is no validation of the program name before constructing the lpCommandLine argument for a CreateProcess call. An attacker can run any malicious process with SYSTEM privileges through this named pipe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/156222/Windscribe-WindscribeService-Named-Pipe-Privilege-Escalation.html; http://sqlulz.blogspot.com/2018/05/windscribe-vpn-privilege-escalation.html; http://packetstormsecurity.com/files/156222/Windscribe-WindscribeService-Named-Pipe-Privilege-Escalation.html
CVE: CVE-2018-9091
Published: 2018-05-25
Description: A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.
CVSS Score: 9.8 (CRITICAL)
References: https://support.kemptechnologies.com/hc/en-us/articles/[PII_REDACTED]52-Mitigation-for-Remote-Access-Execution-Vulnerability; https://support.kemptechnologies.com/hc/en-us/articles/[PII_REDACTED]52-Mitigation-for-Remote-Access-Execution-Vulnerability
CVE: CVE-2018-11487
Published: 2018-05-26
Description: PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gaozhifeng/PHPMyWind/issues/2; https://github.com/gaozhifeng/PHPMyWind/issues/2
CVE: CVE-2018-11489
Published: 2018-05-26
Description: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-787
References: http://www.securityfocus.com/bid/104341; https://github.com/pts/sam2p/issues/37; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE: CVE-2018-11490
Published: 2018-05-26
Description: The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-787
References: http://www.securityfocus.com/bid/104327; https://github.com/pts/sam2p/issues/38; https://lists.debian.org/debian-lts-announce/2022/12/msg00008.html
CVE: CVE-2018-11493
Published: 2018-05-26
Description: An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/wuzhicms/wuzhicms/issues/137; https://github.com/wuzhicms/wuzhicms/issues/137
CVE: CVE-2018-11494
Published: 2018-05-26
Description: The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name (containing 10 random digits) via a directory traversal attack involving language_info['code'].
CVSS Score: 8.0 (HIGH)
CWE: CWE-22, CWE-434
References: http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/; http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/
CVE: CVE-2018-11495
Published: 2018-05-26
Description: OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/; http://www.bigdiao.cc/2018/05/24/Opencart-v3-0-2-0/
CVE: CVE-2018-11496
Published: 2018-05-26
Description: In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in read_stream in stream.c, because decompress_file in lrzip.c lacks certain size validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/ckolivas/lrzip/issues/96; https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html; https://github.com/ckolivas/lrzip/issues/96
CVE: CVE-2018-11498
Published: 2018-05-26
Description: In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the Lizard_decompress_LIZv1 function (lib/lizard_decompress_liz.h). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted input file, as well as achieve remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/inikep/lizard/issues/16; https://github.com/inikep/lizard/issues/16
CVE: CVE-2018-11499
Published: 2018-05-26
Description: A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-11500
Published: 2018-05-26
Description: An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/sanluan/PublicCMS/issues/11; https://github.com/sanluan/PublicCMS/issues/11
CVE: CVE-2018-11501
Published: 2018-05-26
Description: PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://gkaim.com/cve-2018-11501-vikas-chaudhary/; https://whitehatck01.blogspot.com/2018/02/website-seller-script-203-stored-xss.html; https://gkaim.com/cve-2018-11501-vikas-chaudhary/
CVE: CVE-2018-11503
Published: 2018-05-26
Description: The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Orc/discount/issues/189#issuecomment-392247798; https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html; https://www.debian.org/security/2018/dsa-4293
CVE: CVE-2018-11504
Published: 2018-05-26
Description: The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file, as demonstrated by mkd2html.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/Orc/discount/issues/189#issuecomment-392247798; https://lists.debian.org/debian-lts-announce/2018/09/msg00009.html; https://www.debian.org/security/2018/dsa-4293
CVE: CVE-2018-11505
Published: 2018-05-26
Description: The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://pastebin.com/NtPn3jB8; https://www.exploit-db.com/exploits/44776/; https://pastebin.com/NtPn3jB8
CVE: CVE-2018-6409
Published: 2018-05-26
Description: An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://metalamin.github.io/MachForm-not-0-day-EN/; https://www.exploit-db.com/exploits/44804/; https://www.machform.com/blog-machform-423-security-release/
CVE: CVE-2018-6410
Published: 2018-05-26
Description: An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://metalamin.github.io/MachForm-not-0-day-EN/; https://www.exploit-db.com/exploits/44804/; https://www.machform.com/blog-machform-423-security-release/
CVE: CVE-2018-6411
Published: 2018-05-26
Description: An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://metalamin.github.io/MachForm-not-0-day-EN/; https://www.exploit-db.com/exploits/44804/; https://www.machform.com/blog-machform-423-security-release/
CVE: CVE-2018-11506
Published: 2018-05-28
Description: The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f7068114d45ec55996b9040e98111afa56e010fe; https://access.redhat.com/errata/RHSA-2018:2948; https://github.com/torvalds/linux/commit/f7068114d45ec55996b9040e98111afa56e010fe
CVE: CVE-2018-11507
Published: 2018-05-28
Description: An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm in image/image-pnm.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: https://github.com/FLIF-hub/FLIF/issues/509; https://github.com/FLIF-hub/FLIF/issues/509
CVE: CVE-2018-11508
Published: 2018-05-28
Description: The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0a0b98734479aa5b3c671d5190e86273372cab95; http://www.securityfocus.com/bid/104292; https://bugs.chromium.org/p/project-zero/issues/detail?id=1574
CVE: CVE-2018-11512
Published: 2018-05-28
Description: Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "General" menu in Creatiwity wityCMS 0.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to admin/settings/general.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/Creatiwity/wityCMS/commit/7967e5bf15b4d2ee6b85b56e82d7e1229147de44; https://github.com/Creatiwity/wityCMS/issues/150; https://www.exploit-db.com/exploits/44790/
CVE: CVE-2018-11514
Published: 2018-05-28
Description: PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_resume_det.php, as demonstrated by changing .docx to .php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://whitehatck01.blogspot.com/2018/02/naukri-clone-script-303-file-upload.html; https://whitehatck01.blogspot.com/2018/02/naukri-clone-script-303-file-upload.html
CVE: CVE-2018-11515
Published: 2018-05-28
Description: The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/DediData/wpforo/issues/1; https://wpvulndb.com/vulnerabilities/9089; https://github.com/DediData/wpforo/issues/1
CVE: CVE-2018-11309
Published: 2018-05-28
Description: Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admin-ajax.php request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.riccardoancarani.it/cve-2018-11309-blind-sql-injection-in-membermouse-plugin/; https://blog.riccardoancarani.it/cve-2018-11309-blind-sql-injection-in-membermouse-plugin/
CVE: CVE-2018-11430
Published: 2018-05-28
Description: An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is located in the mod notes textarea.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/44754/; https://www.exploit-db.com/exploits/44754/
CVE: CVE-2018-11516
Published: 2018-05-28
Description: The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted .swf file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://code610.blogspot.com/2018/05/make-free-vlc.html; http://www.securityfocus.com/bid/104293; http://www.securitytracker.com/id/1041312
CVE: CVE-2018-11517
Published: 2018-05-28
Description: mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure; https://www.emreovunc.com/blog/en/mypro_enum_projectid.rb; https://github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure
CVE: CVE-2018-10732
Published: 2018-05-28
Description: The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pictures visibility.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://doc.dataiku.com/dss/latest/release_notes/4.2.html#security; https://github.com/alt3kx/CVE-2018-10732; https://doc.dataiku.com/dss/latest/release_notes/4.2.html#security
CVE: CVE-2018-11488
Published: 2018-05-29
Description: A stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows remote attackers to cause a denial of service condition by sending a specially crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/bitsadmin/exploits/tree/master/CVE-2018-11488; https://www.dtsearch.com/ReleaseNotes.html; https://www.dtsearch.com/ReleaseNotesBeta.html
CVE: CVE-2018-11523
Published: 2018-05-29
Description: upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/unh3x/just4cve/issues/1; https://www.exploit-db.com/exploits/44794/; https://github.com/unh3x/just4cve/issues/1