deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-10885
Published: 2018-07-05
Description: In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/104688; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10885; http://www.securityfocus.com/bid/104688
CVE: CVE-2018-8038
Published: 2018-07-05
Description: Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://cxf.apache.org/security-advisories.data/CVE-2018-8038.txt.asc; http://www.securitytracker.com/id/1041220; https://github.com/apache/cxf-fediz/commit/b6ed9865d0614332fa419fe4b6d0fe81bc2e660d
CVE: CVE-2018-8928
Published: 2018-07-05
Description: Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the (1) family_name, (2) given_name, or (3) additional_name parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_18_10; https://www.synology.com/en-global/support/security/Synology_SA_18_10
CVE: CVE-2018-9185
Published: 2018-07-05
Description: An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104535; http://www.securitytracker.com/id/1041186; https://fortiguard.com/advisory/FG-IR-18-027
CVE: CVE-2018-13250
Published: 2018-07-05
Description: libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libming/libming/issues/147; https://github.com/libming/libming/issues/147
CVE: CVE-2018-13251
Published: 2018-07-05
Description: In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/libming/libming/issues/149; https://github.com/libming/libming/issues/149
CVE: CVE-2018-8026
Published: 2018-07-05
Description: This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr's API, allowing to exploit that vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/104690; https://issues.apache.org/jira/browse/SOLR-12450; https://mail-archives.apache.org/mod_mbox/lucene-solr-user/201807.mbox/%3C0cdc01d413b7%24f97ba580%24ec72f080%24%40apache.org%3E
CVE: CVE-2016-10522
Published: 2018-07-05
Description: rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/sferik/rails_admin/commit/b13e879eb93b661204e9fb5e55f7afa4f397537a; https://www.sourceclear.com/blog/Rails_admin-Vulnerability-Disclosure/; https://www.sourceclear.com/registry/security/cross-site-request-forgery-csrf-/ruby/sid-3173
CVE: CVE-2016-10545
Published: 2018-07-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-3761
Published: 2018-07-05
Description: Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new tokens in case the OAuth2 client was partly compromised.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://hackerone.com/reports/343111; https://nextcloud.com/security/advisory/?id=nc-sa-2018-003; https://hackerone.com/reports/343111
CVE: CVE-2018-3762
Published: 2018-07-05
Description: Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for files it should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-281
References: https://hackerone.com/reports/358339; https://nextcloud.com/security/advisory/?id=nc-sa-2018-002; https://hackerone.com/reports/358339
CVE: CVE-2018-3763
Published: 2018-07-05
Description: In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://nextcloud.com/security/advisory/?id=nc-sa-2018-004; https://nextcloud.com/security/advisory/?id=nc-sa-2018-004
CVE: CVE-2018-3764
Published: 2018-07-05
Description: In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like admins or group admins.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://nextcloud.com/security/advisory/?id=nc-sa-2018-005; https://nextcloud.com/security/advisory/?id=nc-sa-2018-005
CVE: CVE-2018-3766
Published: 2018-07-05
Description: Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://hackerone.com/reports/358112; https://hackerone.com/reports/358112
CVE: CVE-2018-3767
Published: 2018-07-05
Description: `memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-400
References: https://hackerone.com/reports/319809; https://hackerone.com/reports/319809
CVE: CVE-2018-3768
Published: 2018-07-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2[PII_REDACTED].  Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED].  Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-3769
Published: 2018-07-05
Description: ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ruby-grape/grape/commit/6876b71efc7b03f7ce1be3f075eaa4e7e6de19af; https://github.com/ruby-grape/grape/issues/1762; https://github.com/ruby-grape/grape/pull/1763
CVE: CVE-2018-13252
Published: 2018-07-05
Description: Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/herwonowr/CVE/tree/master/CVE-2018-13252; https://github.com/herwonowr/CVE/tree/master/CVE-2018-13252
CVE: CVE-2018-13300
Published: 2018-07-05
Description: In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4, leading to a denial of service and possibly an information disclosure.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104675; https://github.com/FFmpeg/FFmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148; https://github.com/FFmpeg/FFmpeg/commit/e6d3fd942f772f54ab6a5ca619cdaadef26b7702
CVE: CVE-2018-13301
Published: 2018-07-05
Description: In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104675; https://github.com/FFmpeg/FFmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b; http://www.securityfocus.com/bid/104675
CVE: CVE-2018-13302
Published: 2018-07-05
Description: In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/104675; https://github.com/FFmpeg/FFmpeg/commit/ed22dc22216f74c75ee7901f82649e1ff725ba50; https://www.debian.org/security/2018/dsa-4249
CVE: CVE-2018-13303
Published: 2018-07-05
Description: In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NULL pointer dereference while converting a crafted AVI file to MPEG4, leading to a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104675; https://github.com/FFmpeg/FFmpeg/commit/00e8181bd97c834fe60751b0c511d4bb97875f78; http://www.securityfocus.com/bid/104675
CVE: CVE-2018-13304
Published: 2018-07-05
Description: In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://github.com/FFmpeg/FFmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235; https://github.com/FFmpeg/FFmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235
CVE: CVE-2018-13305
Published: 2018-07-05
Description: In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to an information disclosure or a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html; https://github.com/FFmpeg/FFmpeg/commit/d08d4a8c7387e758d439b0592782e4cfa2b4d6a4; http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
CVE: CVE-2017-11175
Published: 2018-07-05
Description: In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md; https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md
CVE: CVE-2018-12021
Published: 2018-07-05
Description: Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2019/05/16/1; https://github.com/singularityware/singularity/releases/tag/2.5.2; http://www.openwall.com/lists/oss-security/2019/05/16/1
CVE: CVE-2018-12691
Published: 2018-07-05
Description: Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to bypass network access control via data plane packet injection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: https://gerrit.onosproject.org/#/c/18867/; https://wiki.onosproject.org/display/ONOS/Security+advisories; https://gerrit.onosproject.org/#/c/18867/
CVE: CVE-2018-12910
Published: 2018-07-05
Description: The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html; https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2018:3140
CVE: CVE-2018-12976
Published: 2018-07-05
Description: In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory traversal and remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/golang/gddo/commit/daffe1f90ec57f8ed69464f9094753fc6452e983; https://groups.google.com/forum/#%21msg/golang-announce/4rpTbfzYB1k/no6MEwlQAwAJ; https://github.com/golang/gddo/commit/daffe1f90ec57f8ed69464f9094753fc6452e983
CVE: CVE-2018-13325
Published: 2018-07-05
Description: The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/safecomet/EtherTokens/blob/master/GROWCHAIN%20%28GROW%29/GROWCHAIN%20%28GROW%29.md; https://github.com/safecomet/EtherTokens/blob/master/GROWCHAIN%20%28GROW%29/GROWCHAIN%20%28GROW%29.md
CVE: CVE-2018-13326
Published: 2018-07-05
Description: The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/safecomet/EtherTokens/blob/master/Bittelux%20%28BTX%29/Bittelux%20%28BTX%29.md; https://github.com/soohoio/VeriSmartBench/wiki/CVE-False-Reported-Case; https://github.com/safecomet/EtherTokens/blob/master/Bittelux%20%28BTX%29/Bittelux%20%28BTX%29.md
CVE: CVE-2018-13327
Published: 2018-07-05
Description: The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/safecomet/EtherTokens/blob/master/ChuCunLingAIGO%20%28CCLAG%29/ChuCunLingAIGO%20%28CCLAG%29.md; https://github.com/soohoio/VeriSmartBench/wiki/CVE-False-Reported-Case; https://github.com/safecomet/EtherTokens/blob/master/ChuCunLingAIGO%20%28CCLAG%29/ChuCunLingAIGO%20%28CCLAG%29.md
CVE: CVE-2018-13328
Published: 2018-07-05
Description: The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an integer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/safecomet/EtherTokens/blob/master/PFGc%20%28PFGc%29/PFGc%20%28PFGc%29.md; https://github.com/safecomet/EtherTokens/blob/master/PFGc%20%28PFGc%29/PFGc%20%28PFGc%29.md
CVE: CVE-2018-7944
Published: 2018-07-05
Description: Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker gets some user's smart phone and performs some special operations in the guide function. The attacker may exploit the vulnerability to bypass FRP function and use the phone normally.
CVSS Score: 6.8 (MEDIUM)
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180622-01-bypass-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180622-01-bypass-en
CVE: CVE-2017-16816
Published: 2018-07-05
Description: The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html; https://www-auth.cs.wisc.edu/lists/htcondor-users/2017-November/msg00022.shtml; http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html
CVE: CVE-2018-10987
Published: 2018-07-05
Description: An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs "/mnt/skyeye/mode_switch.sh %s" with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: https://gist.github.com/neolead/10b27c5c04bca84a5515783ca6f2ecb4#file-cve-2018-10987-txt; https://gist.github.com/neolead/10b27c5c04bca84a5515783ca6f2ecb4#file-cve-2018-10987-txt
CVE: CVE-2018-10988
Published: 2018-07-05
Description: An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at boot and tries to find the update folder on the microSD card. It executes code, without a digital signature, as root from the /mnt/sdcard/$PRO_NAME/upgrade.sh or /sdcard/upgrage_360/upgrade.sh pathname.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://gist.github.com/neolead/a1fadac[PII_REDACTED]7705a7d61e638ae#file-cve-2018-10988-txt; https://gist.github.com/neolead/a1fadac[PII_REDACTED]7705a7d61e638ae#file-cve-2018-10988-txt
CVE: CVE-2018-12103
Published: 2018-07-05
Description: An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisions). Due to the predictability of the /docs/captcha_(number).jpeg URI, being local to the network, but unauthenticated to the administrator's panel, an attacker can disclose the CAPTCHAs used by the access point and can elect to load the CAPTCHA of their choosing, leading to unauthorized login attempts to the access point.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: http://seclists.org/fulldisclosure/2018/Jul/13; https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10099; http://seclists.org/fulldisclosure/2018/Jul/13
CVE: CVE-2018-12113
Published: 2018-07-05
Description: Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/148383/Core-FTP-LE-2.2-Buffer-Overflow.html; https://gist.github.com/berkgoksel/a654c8cb661c7a27a3f763dee92016aa; https://gist.github.com/berkgoksel/e97b3f3b15e2f8293f649d4ebe6a6fc9
CVE: CVE-2018-12520
Published: 2018-07-05
Description: An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session IDs being allocated for active user sessions. An attacker with foreknowledge of the operating system and standard library in use by the host running the service and the username of the user whose session they're targeting can abuse the deterministic random number generation in order to hijack the user's session, thus escalating their access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-335
References: http://seclists.org/fulldisclosure/2018/Jul/14; https://gist.github.com/Psychotropos/3e8c047cada9b1fb716e6a014a428b7f; https://github.com/ntop/ntopng/commit/30610bda60cbfc058f90a1c0a17d0e8f4516221a
CVE: CVE-2018-12571
Published: 2018-07-05
Description: uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://packetstormsecurity.com/files/148389/Microsoft-Forefront-Unified-Access-Gateway-2010-External-DNS-Interaction.html; http://seclists.org/fulldisclosure/2018/Jul/2; http://seclists.org/fulldisclosure/2018/Jul/7
CVE: CVE-2018-12739
Published: 2018-07-05
Description: In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.cnblogs.com/v1vvwv/p/9226389.html; https://www.exploit-db.com/exploits/44952/; https://www.cnblogs.com/v1vvwv/p/9226389.html
CVE: CVE-2018-13031
Published: 2018-07-05
Description: DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AutismJH/damicms/issues/6; https://www.cnblogs.com/v1vvwv/p/9248562.html; https://www.exploit-db.com/exploits/44960/
CVE: CVE-2018-13052
Published: 2018-07-05
Description: In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.
CVSS Score: 9.8 (CRITICAL)
References: https://www.youtube.com/watch?v=xYRbXBPubaw; https://www.youtube.com/watch?v=xYRbXBPubaw
CVE: CVE-2018-8046
Published: 2018-07-05
Description: The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://examples.sencha.com/extjs/6.6.0/release-notes.html; http://seclists.org/fulldisclosure/2018/Jul/8; http://examples.sencha.com/extjs/6.6.0/release-notes.html
CVE: CVE-2018-8738
Published: 2018-07-05
Description: Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/44986/; https://www.raifberkaydincel.com/airties-air5444tt-airties-air5444-cross-site-scripting.html; https://www.exploit-db.com/exploits/44986/
CVE: CVE-2018-9997
Published: 2018-07-05
Description: Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev28 allows remote attackers to inject arbitrary web script or HTML via the data-target attribute in an HTML page with data-toggle gadgets.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154127/Open-Xchange-OX-Guard-Cross-Site-Scripting-Signature-Validation.html; http://seclists.org/fulldisclosure/2018/Jul/12; http://www.securitytracker.com/id/1041213