deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15764
Published: 2018-09-28
Description: Dell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggered JMX services. A remote unauthenticated attacker may potentially exploit this vulnerability to execute arbitrary code in the server's JVM.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105405; http://www.securitytracker.com/id/1041714; https://seclists.org/fulldisclosure/2018/Sep/47
CVE: CVE-2018-9074
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9075
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9076
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9077
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9078
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does not prevent the user from uploading SVG images and returns these images within their origin. As a result, malicious users can upload SVG images that contain arbitrary JavaScript that is evaluated when the victim issues a request to download the file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9079
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9080
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise the user's session.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9081
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer application are vulnerable to self cross-site scripting self-XSS. As a result, adversaries can add files to shares accessible from the Content Viewer with a cross site scripting payload in its name, and wait for a user to try and rename the file for their payload to trigger.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-9082
Published: 2018-09-28
Description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their password and retain access to the user's account
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: https://support.lenovo.com/us/en/solutions/LEN-24224; https://support.lenovo.com/us/en/solutions/LEN-24224
CVE: CVE-2018-17776
Published: 2018-09-28
Description: PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users to gain privileges by replacing an executable file with a Trojan horse.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://packetstormsecurity.com/files/149581/PCProtect-4-8.35-Privilege-Escalation.html; https://www.exploit-db.com/exploits/45503/; https://packetstormsecurity.com/files/149581/PCProtect-4-8.35-Privilege-Escalation.html
CVE: CVE-2018-17781
Published: 2018-09-29
Description: Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041769; https://www.foxitsoftware.com/support/security-bulletins.php; http://www.securitytracker.com/id/1041769
CVE: CVE-2018-17780
Published: 2018-09-29
Description: Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105521; https://www.inputzero.io/2018/09/bug-bounty-telegram-cve-2018-17780.html; http://www.securityfocus.com/bid/105521
CVE: CVE-2018-17785
Published: 2018-09-30
Description: In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/blynkkk/blynk-server/issues/1256; https://github.com/blynkkk/blynk-server/releases/tag/v0.39.7; https://github.com/blynkkk/blynk-server/issues/1256
CVE: CVE-2018-17793
Published: 2018-09-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-17794
Published: 2018-09-30
Description: An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87350; https://usn.ubuntu.com/4326-1/; https://usn.ubuntu.com/4336-1/
CVE: CVE-2018-17795
Published: 2018-09-30
Description: The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2816; http://www.securityfocus.com/bid/105445; https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-17795
CVE: CVE-2018-17796
Published: 2018-09-30
Description: An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T parameter in a request and uses it as a hash of SQL statements without filtering, resulting in a SQL injection vulnerability in getChannel() in the ChannelService.java file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuweiit/mushroom/issues/16; https://github.com/wuweiit/mushroom/issues/16
CVE: CVE-2018-17797
Published: 2018-09-30
Description: An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/seedis/zzcms/blob/master/arbitrary_file_deletion1.md; https://github.com/seedis/zzcms/blob/master/arbitrary_file_deletion1.md
CVE: CVE-2018-17798
Published: 2018-09-30
Description: An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolute pathname in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/seedis/zzcms/blob/master/arbitrary_file_deletion2.md; https://github.com/seedis/zzcms/blob/master/arbitrary_file_deletion2.md
CVE: CVE-2018-17216
Published: 2018-10-01
Description: An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.ptc.com/en/support/article?n=CS291004; https://www.ptc.com/en/support/article?n=CS291004
CVE: CVE-2018-17217
Published: 2018-10-01
Description: An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.ptc.com/en/support/article?n=CS291004; https://www.ptc.com/en/support/article?n=CS291004
CVE: CVE-2018-17218
Published: 2018-10-01
Description: An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is reflected XSS in the SQUEAL search function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ptc.com/en/support/article?n=CS291004; https://www.ptc.com/en/support/article?n=CS291004
CVE: CVE-2015-9267
Published: 2018-10-01
Description: Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: http://jvn.jp/en/jp/JVN68418039/index.html; https://lists.debian.org/debian-lts-announce/2018/11/msg00041.html; https://sourceforge.net/p/nsis/bugs/1125/
CVE: CVE-2015-9268
Published: 2018-10-01
Description: Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN68418039/index.html; https://lists.debian.org/debian-lts-announce/2018/11/msg00041.html; https://sourceforge.net/p/nsis/bugs/1125/
CVE: CVE-2018-17427
Published: 2018-10-01
Description: SIMDComp before 0.1.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) because it can read (and then discard) extra bytes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/lemire/simdcomp/issues/21; https://github.com/lemire/simdcomp/issues/21
CVE: CVE-2018-17825
Published: 2018-10-01
Description: An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://github.com/adplug/adplug/issues/67; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
CVE: CVE-2018-17826
Published: 2018-10-01
Description: HisiPHP 1.0.8 allows CSRF via admin.php/admin/user/adduser.html to add an administrator account. The attacker can then use that account to execute arbitrary PHP code by leveraging app/common/model/AdminAnnex.php to add .php to the default list of allowable file-upload types (.jpg, .png, .gif, .jpeg, and .ico).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/rakjong/vuln/blob/master/hisiphp_getshell.pdf; https://github.com/rakjong/vuln/blob/master/hisiphp_getshell.pdf
CVE: CVE-2018-17827
Published: 2018-10-01
Description: HisiPHP 1.0.8 allows remote attackers to execute arbitrary PHP code by editing a plugin's name to contain that code. This name is then injected into app/admin/model/AdminPlugins.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/rakjong/vuln/blob/master/hisiphp_hetshell_2.pdf; https://github.com/rakjong/vuln/blob/master/hisiphp_hetshell_2.pdf
CVE: CVE-2018-17828
Published: 2018-10-01
Description: Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/gdraheim/zziplib/issues/62; https://github.com/gdraheim/zziplib/issues/62
CVE: CVE-2018-17830
Published: 2018-10-01
Description: The $args variable in addons/mediapool/pages/index.php in REDAXO 5.6.2 is not effectively filtered, because names are not restricted (only values are restricted). The attacker can insert XSS payloads via an index.php?page=mediapool/media&opener_input_field=&args[ substring.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/redaxo/redaxo4/issues/421; https://github.com/redaxo/redaxo4/issues/421
CVE: CVE-2018-17831
Published: 2018-10-01
Description: In REDAXO before 5.6.3, a critical SQL injection vulnerability has been discovered in the rex_list class because of the prepareQuery function in core/lib/list.php, via the index.php?page=users/users sort parameter. Endangered was the backend and the frontend only if rex_list were used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/redaxo/redaxo/issues/2043; https://github.com/redaxo/redaxo/releases/tag/5.6.3; https://redaxo.org/cms/news/sicherheitsluecke-und-neue-yform-version/
CVE: CVE-2018-17832
Published: 2018-10-01
Description: XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/45514/; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-17835
Published: 2018-10-01
Description: An issue was discovered in GetSimple CMS 3.3.15. An administrator can insert stored XSS via the admin/settings.php Custom Permalink Structure parameter, which injects the XSS payload into any page created at the admin/pages.php URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1298; https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1298
CVE: CVE-2018-17836
Published: 2018-10-01
Description: An issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP code by using a /console/file/manage.php?type=action&action=addfile&path=..%2F substring to upload, in conjunction with a multipart/form-data PHP payload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/AvaterXXX/JTBC/blob/master/README.md#getshell; https://github.com/AvaterXXX/JTBC/blob/master/README.md#getshell
CVE: CVE-2018-17837
Published: 2018-10-01
Description: An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file deletion is possible via a /console/file/manage.php?type=action&action=delete&path=c%3A%2F substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/AvaterXXX/JTBC/blob/master/README.md#arbitrary-file-deletion; https://github.com/AvaterXXX/JTBC/blob/master/README.md#arbitrary-file-deletion
CVE: CVE-2018-17838
Published: 2018-10-01
Description: An issue was discovered in JTBC(PHP) 3.0.1.6. Arbitrary file read operations are possible via a /console/#/console/file/manage.php?type=list&path=c:/ substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/AvaterXXX/JTBC/blob/master/README.md#arbitrary-file-read; https://github.com/AvaterXXX/JTBC/blob/master/README.md#arbitrary-file-read
CVE: CVE-2018-17846
Published: 2018-10-01
Description: The html package (aka x/net/html) through 2018-09-25 in Go mishandles <table><math><select><mi><select></table>, leading to an infinite loop during an html.Parse call because inSelectIM and inSelectInTableIM do not comply with a specification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/golang/go/issues/27842; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK/
CVE: CVE-2018-17847
Published: 2018-10-01
Description: The html package (aka x/net/html) through 2018-09-25 in Go mishandles <svg><template><desc><t><svg></template>, leading to a "panic: runtime error" (index out of range) in (*nodeStack).pop in node.go, called from (*parser).clearActiveFormattingElements, during an html.Parse call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/golang/go/issues/27846; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK/
CVE: CVE-2018-17848
Published: 2018-10-01
Description: The html package (aka x/net/html) through 2018-09-25 in Go mishandles <math><template><mn><b></template>, leading to a "panic: runtime error" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://github.com/golang/go/issues/27846; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK/
CVE: CVE-2018-17850
Published: 2018-10-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-17851
Published: 2018-10-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-17852
Published: 2018-10-01
Description: A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/155; https://github.com/wuzhicms/wuzhicms/issues/155
CVE: CVE-2018-17854
Published: 2018-10-01
Description: SIMDComp before 0.1.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) because it can read (and then discard) extra bytes. NOTE: this issue exists because of an incomplete fix for CVE-2018-17427.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/lemire/simdcomp/issues/21; https://github.com/lemire/simdcomp/issues/21
CVE: CVE-2018-14788
Published: 2018-10-01
Description: Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: http://www.securityfocus.com/bid/105411; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02; http://www.securityfocus.com/bid/105411
CVE: CVE-2018-14790
Published: 2018-10-01
Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-126, CWE-125
References: http://www.securityfocus.com/bid/105408; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03; http://www.securityfocus.com/bid/105408
CVE: CVE-2018-14794
Published: 2018-10-01
Description: Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/105411; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02; http://www.securityfocus.com/bid/105411
CVE: CVE-2018-14798
Published: 2018-10-01
Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/105408; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03; http://www.securityfocus.com/bid/105408
CVE: CVE-2018-14802
Published: 2018-10-01
Description: Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/105408; https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03; http://www.securityfocus.com/bid/105408
CVE: CVE-2018-1420
Published: 2018-10-01
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative Fix (CF) installation. This can lead to security miss-configuration of the installation. IBM X-Force ID: 138950.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securitytracker.com/id/1041767; https://exchange.xforce.ibmcloud.com/vulnerabilities/138950; https://www.ibm.com/support/docview.wss?uid=swg22014276
CVE: CVE-2018-1672
Published: 2018-10-01
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.securitytracker.com/id/1041766; https://exchange.xforce.ibmcloud.com/vulnerabilities/144958; https://www.ibm.com/support/docview.wss?uid=ibm10716981