deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0739
Published: 2018-03-27
Description: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2018-1091
Published: 2018-03-27
Description: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-391, CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70; http://openwall.com/lists/oss-security/2018/03/27/4; https://access.redhat.com/errata/RHSA-2018:1318
CVE: CVE-2018-1205
Published: 2018-03-27
Description: Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2018/Mar/59; http://seclists.org/fulldisclosure/2018/Mar/59
CVE: CVE-2018-1237
Published: 2018-03-27
Description: Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installation Agent (LIA). This component is deployed on every server in the ScaleIO cluster and is used for central management of ScaleIO nodes. A remote malicious user, having network access to LIA, could potentially exploit this vulnerability to launch brute force guessing of user names and passwords of user accounts on the LIA.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2018/Mar/59; http://seclists.org/fulldisclosure/2018/Mar/59
CVE: CVE-2018-1238
Published: 2018-03-27
Description: Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge of the LIA administrative password, could potentially exploit this vulnerability to run arbitrary commands as root on the systems where LIAs are installed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2018/Mar/59; http://seclists.org/fulldisclosure/2018/Mar/59
CVE: CVE-2018-1327
Published: 2018-03-27
Description: The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML handler as described here http://struts.apache.org/plugins/rest/#custom-contenttypehandlers. Another option is to implement a custom XML handler based on the Jackson XML handler from the Apache Struts 2.5.16.
CVSS Score: 7.5 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/103516; http://www.securitytracker.com/id/1040575
CVE: CVE-2018-9058
Published: 2018-03-27
Description: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the runzip_fd function of runzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/ckolivas/lrzip/issues/93; https://github.com/ckolivas/lrzip/issues/93
CVE: CVE-2018-9092
Published: 2018-03-27
Description: There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/bg5sbk/MiniCMS/issues/14; https://www.exploit-db.com/exploits/44362/; https://github.com/bg5sbk/MiniCMS/issues/14
CVE: CVE-2018-9105
Published: 2018-03-27
Description: NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability. The vulnerability stems from its privileged helper tool's implemented XPC service. This XPC service is responsible for receiving and processing new OpenVPN connection requests from the main application. Unfortunately this XPC service is not protected, which allows arbitrary applications to connect and send it XPC messages. An attacker can send a crafted XPC message to the privileged helper tool requesting it make a new OpenVPN connection. Because he or she controls the contents of the XPC message, the attacker can specify the location of the openvpn executable, which could point to something malicious they control located on disk. Without validation of the openvpn executable, this will give the attacker code execution in the context of the privileged helper tool.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-015.md; https://exchange.xforce.ibmcloud.com/vulnerabilities/140939; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-015.md
CVE: CVE-2018-8823
Published: 2018-03-28
Description: modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to execute arbitrary PHP code via the code parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://ia-informatica.com/it/CVE-2018-8823; https://ia-informatica.com/it/CVE-2018-8823
CVE: CVE-2018-9106
Published: 2018-03-28
Description: CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://www.acyba.com/acysms/change-log.html; https://www.exploit-db.com/exploits/44370/; https://www.acyba.com/acysms/change-log.html
CVE: CVE-2018-9107
Published: 2018-03-28
Description: CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcyMailing extension before 5.9.6 for Joomla! via a value that is mishandled in a CSV export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://vel.joomla.org/articles/2140-introducing-csv-injection; https://vel.joomla.org/resolved/2136-acymailing-5-9-5-csv-injection; https://www.acyba.com/acymailing/change-log.html
CVE: CVE-2018-9108
Published: 2018-03-28
Description: CSRF in /admin/user/manage/add in QuickAppsCMS 2.0.0-beta2 allows an unauthorized remote attacker to create an account with admin privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/quickapps/cms/issues/187; https://github.com/quickapps/cms/issues/187
CVE: CVE-2018-9109
Published: 2018-03-28
Description: Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/Studio-42/elFinder/commit/157f471d7e48f190f74e66eb5bc73360b5352fd3; https://github.com/Studio-42/elFinder/releases/tag/2.1.36; https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110
CVE: CVE-2018-1083
Published: 2018-03-28
Description: Zsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete functionality. A local unprivileged user can create a specially crafted directory path which leads to code execution in the context of the user who tries to use autocomplete to traverse the before mentioned path. If the user affected is privileged, this leads to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-119
References: http://www.securityfocus.com/bid/103572; https://access.redhat.com/errata/RHSA-2018:1932; https://access.redhat.com/errata/RHSA-2018:3073
CVE: CVE-2018-1142
Published: 2018-03-28
Description: Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/tns-2018-02; https://www.tenable.com/security/tns-2018-02
CVE: CVE-2018-7674
Published: 2018-03-28
Description: The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection.
CVSS Score: 2.1 (LOW)
CWE: CWE-601
References: https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html
CVE: CVE-2018-7676
Published: 2018-03-28
Description: The NetIQ Identity Manager, in versions prior to 4.7, userapp with log / trace enabled may leak sensitive information.
CVSS Score: 3.9 (LOW)
CWE: CWE-200
References: https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html; https://www.netiq.com/documentation/identity-manager-47/releasenotes_idm47/data/releasenotes_idm47.html
CVE: CVE-2018-9110
Published: 2018-03-28
Description: Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessible by the web server process and delete files owned by the account running the web server process. NOTE: this issue exists because of an incomplete fix for CVE-2018-9109.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/Studio-42/elFinder/commit/e6351557b86cc10a7651253d2d2aff7f6b918f8e; https://github.com/Studio-42/elFinder/releases/tag/2.1.37; https://github.com/Studio-42/elFinder/wiki/Advisory-about-vulnerability-of-CVE-2018-9109-and-CVE-2018-9110
CVE: CVE-2017-11509
Published: 2018-03-28
Description: An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://lists.debian.org/debian-lts-announce/2018/05/msg00005.html; https://lists.debian.org/debian-lts-announce/2020/02/msg00036.html; https://lists.debian.org/debian-lts-announce/2021/11/msg00018.html
CVE: CVE-2017-11510
Published: 2018-03-28
Description: An information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator username and password via an ONVIF GetSnapshotUri request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-522
References: https://www.tenable.com/security/research/tra-2017-33; https://www.tenable.com/security/research/tra-2017-33
CVE: CVE-2018-5451
Published: 2018-03-28
Description: In Philips Alice 6 System version R8.0.2 or prior, when an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct. This weakness can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with sensitive information or the ability to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/103537; https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01; http://www.securityfocus.com/bid/103537
CVE: CVE-2018-7498
Published: 2018-03-28
Description: In Philips Alice 6 System version R8.0.2 or prior, the lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-311, CWE-311
References: http://www.securityfocus.com/bid/103537; https://ics-cert.us-cert.gov/advisories/ICSMA-18-086-01; http://www.securityfocus.com/bid/103537
CVE: CVE-2018-1064
Published: 2018-03-28
Description: libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://access.redhat.com/errata/RHSA-2018:1396; https://access.redhat.com/errata/RHSA-2018:1929; https://bugzilla.redhat.com/show_bug.cgi?id=1550672
CVE: CVE-2017-0936
Published: 2018-03-28
Description: Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to change the scope of app passwords of other users. Note that the app passwords themselves where neither disclosed nor could the error be misused to identify as another user.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://hackerone.com/reports/297751; https://nextcloud.com/security/advisory/?id=nc-sa-2018-001; https://hackerone.com/reports/297751
CVE: CVE-2018-8820
Published: 2018-03-28
Description: An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xp_cmdshell. In some cases, the authentication requirement for the attack can be met by sending the default admin credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Mar/57; http://seclists.org/fulldisclosure/2018/Mar/57
CVE: CVE-2018-8885
Published: 2018-03-28
Description: screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService._check_permission call.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://usn.ubuntu.com/3607-1/; https://usn.ubuntu.com/3607-1/
CVE: CVE-2018-6608
Published: 2018-03-28
Description: In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information (such as https://ip.voidsec.com), the browser can disclose a private IP address in a STUN request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://docs.google.com/spreadsheets/d/1Nm7mxfFvmdn-3Az-BtE5O0BIdbJiIAWUnkoAF_v_0ug/edit?usp=sharing; https://github.com/VoidSec/WebRTC-Leak; https://news.ycombinator.com/item?id=16699270
CVE: CVE-2018-0150
Published: 2018-03-28
Description: A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running an affected release of Cisco IOS XE Software with the default username and password that are used at initial boot, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with privilege level 15 that has a default username and password. An attacker could exploit this vulnerability by using this account to remotely connect to an affected device. A successful exploit could allow the attacker to log in to the device with privilege level 15 access. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software Release 16.x. This vulnerability does not affect Cisco IOS XE Software releases prior to Release 16.x. Cisco Bug IDs: CSCve89880.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: http://www.securityfocus.com/bid/103539; http://www.securitytracker.com/id/1040579; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc
CVE: CVE-2018-0151
Published: 2018-03-28
Description: A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds checking of certain values in packets that are destined for UDP port 18999 of an affected device. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packets are processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code on the affected device with elevated privileges. The attacker could also leverage this vulnerability to cause the device to reload, causing a temporary DoS condition while the device is reloading. The malicious packets must be destined to and processed by an affected device. Traffic transiting a device will not trigger the vulnerability. Cisco Bug IDs: CSCvf73881.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/103540; http://www.securitytracker.com/id/1040582; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03
CVE: CVE-2018-0152
Published: 2018-03-28
Description: A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An attacker who has valid credentials for an affected device could exploit this vulnerability by remotely accessing a VTY line to the device. A successful exploit could allow the attacker to access an affected device with the privileges of the user who previously logged in to the web UI. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the HTTP Server feature is enabled and authentication, authorization, and accounting (AAA) authorization is not configured for EXEC sessions. The default state of the HTTP Server feature is version-dependent. This vulnerability was introduced in Cisco IOS XE Software Release 16.1.1. Cisco Bug IDs: CSCvf71769.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264, CWE-613
References: http://www.securityfocus.com/bid/103558; http://www.securitytracker.com/id/1040597; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xepriv
CVE: CVE-2018-0154
Published: 2018-03-28
Description: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco Bug IDs: CSCvd39267.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/103559; http://www.securitytracker.com/id/1040585; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos
CVE: CVE-2018-0155
Published: 2018-03-28
Description: A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affected switch. A successful exploit could allow the attacker to trigger a reload of the system. This vulnerability affects Catalyst 4500 Supervisor Engine 6-E (K5), Catalyst 4500 Supervisor Engine 6L-E (K10), Catalyst 4500 Supervisor Engine 7-E (K10), Catalyst 4500 Supervisor Engine 7L-E (K10), Catalyst 4500E Supervisor Engine 8-E (K10), Catalyst 4500E Supervisor Engine 8L-E (K10), Catalyst 4500E Supervisor Engine 9-E (K10), Catalyst 4500-X Series Switches (K10), Catalyst 4900M Switch (K5), Catalyst 4948E Ethernet Switch (K5). Cisco Bug IDs: CSCvc40729.
CVSS Score: 8.6 (HIGH)
CWE: CWE-388, CWE-755
References: http://www.securityfocus.com/bid/103565; http://www.securitytracker.com/id/1040587; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
CVE: CVE-2018-0156
Published: 2018-03-28
Description: A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-20
References: http://www.securityfocus.com/bid/103569; http://www.securitytracker.com/id/1040596; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
CVE: CVE-2018-0157
Published: 2018-03-28
Description: A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload. The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending fragmented IP Version 4 or IP Version 6 packets through an affected device. An exploit could allow the attacker to cause the device to crash, resulting in a denial of service (DoS) condition. The following releases of Cisco IOS XE Software are vulnerable: Everest-16.4.1, Everest-16.4.2, Everest-16.5.1, Everest-16.5.1b, Everest-16.6.1, Everest-16.6.1a. Cisco Bug IDs: CSCvf60296.
CVSS Score: 8.6 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/103561; http://www.securitytracker.com/id/1040593; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip
CVE: CVE-2018-0158
Published: 2018-03-28
Description: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf22394.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-401
References: http://www.securityfocus.com/bid/103566; http://www.securitytracker.com/id/1040595; https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03