deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-13006
Published: 2018-06-29
Description: An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gpac/gpac/commit/bceb03fd2be95097a7b409ea59914f332fb6bc86; https://lists.debian.org/debian-lts-announce/2018/07/msg00024.html; https://usn.ubuntu.com/3926-1/
CVE: CVE-2018-13007
Published: 2018-06-29
Description: An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain checks for GPMF_KEY_END and nest_level (not conditional on a buffer_size_longs check).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/29; https://github.com/gopro/gpmf-parser/issues/29
CVE: CVE-2018-13008
Published: 2018-06-29
Description: An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain checks for a positive nest_level.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/29; https://github.com/gopro/gpmf-parser/issues/29
CVE: CVE-2018-13009
Published: 2018-06-29
Description: An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Next, related to certain checks for GPMF_KEY_END and nest_level (conditional on a buffer_size_longs check).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/29; https://github.com/gopro/gpmf-parser/issues/29
CVE: CVE-2018-13010
Published: 2018-06-29
Description: WSTMall v1.9.1_170316 has CSRF via the index.php?m=Admin&c=Users&a=edit URI to add a user account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/wstmall/wstmall/issues/4; https://github.com/wstmall/wstmall/issues/4
CVE: CVE-2018-13011
Published: 2018-06-29
Description: An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Validate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/31; https://github.com/gopro/gpmf-parser/issues/31
CVE: CVE-2018-13012
Published: 2018-06-29
Description: Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.12 allows the remote attacker to execute unauthorized code by substituting a forged update server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494
References: http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-5; http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-5
CVE: CVE-2018-13013
Published: 2018-06-29
Description: Improper check of unusual conditions when launching msiexec.exe in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.9 allows the local attacker to bypass a code-signing protection mechanism and install/execute an unauthorized program by modifying the system configuration and installing a forged MSI file. (The intended behavior is that the component SysWatch does not allow installation of MSI files unless they are signed by a limited list of certificates.)
CVSS Score: 7.8 (HIGH)
CWE: CWE-754
References: http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-3; http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-3
CVE: CVE-2018-13014
Published: 2018-06-29
Description: Storing password in recoverable format in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.2 allows the local attacker to restore the SysWatch password from the settings database and modify program settings.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2; http://www.safensoft.com/security.phtml?c=865#SNSVE-2018-2
CVE: CVE-2018-8901
Published: 2018-06-29
Description: An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects customers who have enabled LDAP authentication in their configuration.
CVSS Score: 7.8 (HIGH)
References: https://community.ivanti.com/docs/DOC-68406; https://community.ivanti.com/docs/DOC-68406
CVE: CVE-2018-8902
Published: 2018-06-29
Description: An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://community.ivanti.com/docs/DOC-68406; https://community.ivanti.com/docs/DOC-68406
CVE: CVE-2018-12464
Published: 2018-06-29
Description: A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account and used in conjunction with CVE-2018-12465 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that use the GWAVA product name (i.e. GWAVA 6.5).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://pentest.blog/unexpected-journey-6-all-ways-lead-to-rome-remote-code-execution-on-microfocus-secure-messaging-gateway/; https://support.microfocus.com/kb/doc.php?id=7023132; https://www.exploit-db.com/exploits/45083/
CVE: CVE-2018-12465
Published: 2018-06-29
Description: An OS command injection vulnerability in the web administration component of Micro Focus Secure Messaging Gateway (SMG) allows a remote attacker authenticated as a privileged user to execute arbitrary OS commands on the SMG server. This can be exploited in conjunction with CVE-2018-12464 to achieve unauthenticated remote code execution. Affects Micro Focus Secure Messaging Gateway versions prior to 471. It does not affect previous versions of the product that used GWAVA product name (i.e. GWAVA 6.5).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://pentest.blog/unexpected-journey-6-all-ways-lead-to-rome-remote-code-execution-on-microfocus-secure-messaging-gateway/; https://support.microfocus.com/kb/doc.php?id=7023133; https://www.exploit-db.com/exploits/45083/
CVE: CVE-2018-13021
Published: 2018-06-29
Description: An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/Neeke/HongCMS/issues/5; https://github.com/Neeke/HongCMS/issues/5
CVE: CVE-2018-13024
Published: 2018-06-29
Description: Metinfo v6.0.0 allows remote attackers to write code into a .php file, and execute that code, via the module parameter to admin/column/save.php in an editor upload action.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://www.kingkk.com/2018/06/Metinfo-v6-0-0-getshell-in-background/; http://www.kingkk.com/2018/06/Metinfo-v6-0-0-getshell-in-background/
CVE: CVE-2018-13025
Published: 2018-06-29
Description: protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to delete arbitrary files via the index.php?r=admin/photo/delpic picname parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-732
References: https://github.com/zhaoheng521/yxcms/blob/master/Any%20file%20deletion; https://github.com/zhaoheng521/yxcms/blob/master/Any%20file%20deletion
CVE: CVE-2018-10860
Published: 2018-06-29
Description: perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/104580; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10860; https://lists.debian.org/debian-lts-announce/2018/07/msg00032.html
CVE: CVE-2018-13026
Published: 2018-06-30
Description: An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMF_parser.c in the function GPMF_Type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/gopro/gpmf-parser/issues/32; https://github.com/gopro/gpmf-parser/issues/32
CVE: CVE-2018-13030
Published: 2018-06-30
Description: An issue was discovered in jpeg-compressor 0.1. The build_huffman function in stb_image.c allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/fouzhe/security/tree/master/jpeg-compressor; https://github.com/kornelski/jpeg-compressor/issues/12; https://github.com/fouzhe/security/tree/master/jpeg-compressor
CVE: CVE-2018-12990
Published: 2018-06-30
Description: phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf_token_value field.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://3xpl01tc0d3r.blogspot.com/2018/06/information-disclosure-internal-path.html; https://3xpl01tc0d3r.blogspot.com/2018/06/information-disclosure-internal-path.html
CVE: CVE-2018-7475
Published: 2018-06-30
Description: Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0xd0ff9.wordpress.com/2018/06/21/cve-2018-7475/; https://www.youtube.com/watch?v=8_3Q80JrMm4; https://0xd0ff9.wordpress.com/2018/06/21/cve-2018-7475/
CVE: CVE-2018-13032
Published: 2018-07-01
Description: ECESSA ShieldLink SL175EHQ 10.7.4 devices have CSRF to add superuser accounts via the cgi-bin/pl_web.cgi/util_configlogin_act URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/44938/; https://www.exploit-db.com/exploits/44938/
CVE: CVE-2018-13033
Published: 2018-07-01
Description: The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/104584; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3032
CVE: CVE-2018-13037
Published: 2018-07-01
Description: An issue was discovered in jpeg-compressor 0.1. The bmp_load function in stb_image.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/fouzhe/security/tree/master/jpeg-compressor; https://github.com/kornelski/jpeg-compressor/issues/13; https://github.com/fouzhe/security/tree/master/jpeg-compressor
CVE: CVE-2018-13038
Published: 2018-07-01
Description: OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/OpenSID/OpenSID/issues/1177; https://github.com/OpenSID/OpenSID/issues/1177
CVE: CVE-2018-13039
Published: 2018-07-01
Description: OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OpenSID/OpenSID/issues/1175; https://github.com/OpenSID/OpenSID/issues/1175
CVE: CVE-2018-13040
Published: 2018-07-01
Description: OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account (at the admin level) via the index.php/man_user/insert URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/OpenSID/OpenSID/issues/1176; https://github.com/OpenSID/OpenSID/issues/1176
CVE: CVE-2018-13041
Published: 2018-07-01
Description: The mint function of a smart contract implementation for Link Platform (LNK), an Ethereum ERC20 token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/dwfault/AirTokens/blob/master/Link_Platform__LNK_/mint%20integer%20overflow.md; https://github.com/dwfault/AirTokens/blob/master/Link_Platform__LNK_/mint%20integer%20overflow.md
CVE: CVE-2018-13043
Published: 2018-07-01
Description: scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://bugs.debian.org/902409; https://usn.ubuntu.com/3704-1/; https://bugs.debian.org/902409
CVE: CVE-2018-13049
Published: 2018-07-02
Description: The constructSQL function in inc/search.class.php in GLPI 9.2.x through 9.3.0 allows SQL Injection, as demonstrated by triggering a crafted LIMIT clause to front/computer.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi/issues/4270; https://github.com/glpi-project/glpi/issues/4270
CVE: CVE-2018-13050
Published: 2018-07-02
Description: A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_security_check POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/x-f1v3/ForCve/issues/1; https://www.manageengine.com/products/applications_manager/issues.html; https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-13050.html
CVE: CVE-2018-0499
Published: 2018-07-02
Description: A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.xapian.org/pipermail/xapian-discuss/2018-July/009652.html; https://trac.xapian.org/wiki/SecurityFixes/2018-07-02; https://usn.ubuntu.com/3709-1/
CVE: CVE-2018-13053
Published: 2018-07-02
Description: The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: http://www.securityfocus.com/bid/104671; https://access.redhat.com/errata/RHSA-2019:0831; https://access.redhat.com/errata/RHSA-2019:2029
CVE: CVE-2017-17175
Published: 2018-07-02
Description: Short Message Service (SMS) module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354(C00) has a Denial of Service (DoS) vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone to fail to make calls and send and receive text messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180629-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180629-01-smartphone-en
CVE: CVE-2017-17316
Published: 2018-07-02
Description: Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker has to control the peer device and craft the Signalling Connection Control Part (SCCP) messages to the target devices. Due to insufficient input validation of some values in the messages, successful exploit will cause out-of-bounds read and some services abnormal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-sccp-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-sccp-en
CVE: CVE-2017-17317
Published: 2018-07-02
Description: Common Open Policy Service Protocol (COPS) module in Huawei USG6300 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6500 V100R001C10; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; Secospace USG6600 V100R001C00; V100R001C20; V100R001C30; V500R001C00; V500R001C20; V500R001C30; V500R001C50; TE30 V100R001C02; V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C01; V100R001C10; V500R002C00; V600R006C00 has a buffer overflow vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted message to the affected products. Due to insufficient input validation, successful exploit may cause some services abnormal.
CVSS Score: 3.7 (LOW)
CWE: CWE-119
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-cops-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180630-01-cops-en
CVE: CVE-2018-10874
Published: 2018-07-02
Description: In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-20
References: http://www.securitytracker.com/id/1041396; https://access.redhat.com/errata/RHBA-2018:3788; https://access.redhat.com/errata/RHSA-2018:2150
CVE: CVE-2018-8039
Published: 2018-07-02
Description: It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-755
References: http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1&modificationDate=[PII_REDACTED]00&api=v2; http://www.securityfocus.com/bid/106357; http://www.securitytracker.com/id/1041199
CVE: CVE-2018-13054
Published: 2018-07-02
Description: An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.
CVSS Score: 8.1 (HIGH)
CWE: CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1083067; https://github.com/linuxmint/Cinnamon/pull/7683; https://lists.debian.org/debian-lts-announce/2018/07/msg00011.html
CVE: CVE-2018-13056
Published: 2018-07-02
Description: An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcms_main table and then making an img add request. This can be leveraged for database access by deleting install.lock.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/actionyz/ZZCMS/blob/master/del.php.md; https://github.com/actionyz/ZZCMS/blob/master/del.php.md
CVE: CVE-2018-10075
Published: 2018-07-02
Description: Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/eventlog/release-notes.html; https://www.manageengine.com/products/eventlog/release-notes.html
CVE: CVE-2018-10076
Published: 2018-07-02
Description: An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality (the search box of the Dashboard).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/eventlog/release-notes.html; https://www.manageengine.com/products/eventlog/release-notes.html
CVE: CVE-2018-12499
Published: 2018-07-02
Description: The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorola MBP853 camera and the servers it communicates with. In one such instance, it was identified that the device was downloading what appeared to be a client certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://blog.sean-wright.com/cve-2018-12499/; https://blog.sean-wright.com/cve-2018-12499/
CVE: CVE-2018-12528
Published: 2018-07-02
Description: An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configuration files backup, which can lead to corrupting the router firmware settings or even the uploading of malicious files. In order to exploit the vulnerability, an attacker can upload any malicious file and force reboot the router with it.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: http://securitywarrior9.blogspot.com/2018/06/malicious-file-upload-intex-router-n.html; https://www.exploit-db.com/exploits/44933/; http://securitywarrior9.blogspot.com/2018/06/malicious-file-upload-intex-router-n.html
CVE: CVE-2018-12529
Published: 2018-07-02
Description: An issue was discovered on Intex N150 devices. The router firmware suffers from multiple CSRF injection point vulnerabilities including changing user passwords and router settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://securitywarrior9.blogspot.com/2018/06/cross-site-request-forgery-intex-router.html; https://www.exploit-db.com/exploits/44939/; https://www.exploit-db.com/exploits/44933/
CVE: CVE-2018-12574
Published: 2018-07-02
Description: CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://software-talk.org/blog/2018/06/tplink-wr841n-csrf-cve-2018-12574/; https://software-talk.org/blog/2018/06/tplink-wr841n-csrf-cve-2018-12574/
CVE: CVE-2018-12575
Published: 2018-07-02
Description: On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://software-talk.org/blog/2018/06/tplink-wr841n-broken-auth-cve-2018-12575/; https://software-talk.org/blog/2018/06/tplink-wr841n-broken-auth-cve-2018-12575/