deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0449
Published: 2019-01-10
Description: A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory permissions set on a JCF created directory. An authenticated attacker with the ability to access an affected directory could create a hard link to an arbitrary location on the affected system. An attacker could convince another user that has administrative privileges to perform an install or update the Cisco Jabber for Mac client to perform such actions, allowing files to be created in an arbitrary location on the disk or an arbitrary file to be corrupted when it is appended to or overwritten.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-275, CWE-732
References: http://www.securityfocus.com/bid/106520; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-jabr-mac-permissions; http://www.securityfocus.com/bid/106520
CVE: CVE-2018-0461
Published: 2019-01-10
Description: A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on an affected device. The vulnerability exists because the software running on an affected device insufficiently validates user-supplied data. An attacker could exploit this vulnerability by persuading a user to click a malicious link provided to the user or through the interface of an affected device. A successful exploit could allow an attacker to execute arbitrary script code in the context of the user interface or access sensitive system-based information, which under normal circumstances should be prohibited.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94, CWE-94
References: http://www.securityfocus.com/bid/106515; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-phone-script-injection; http://www.securityfocus.com/bid/106515
CVE: CVE-2018-0474
Published: 2019-01-10
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could exploit this vulnerability by logging in to the Cisco Unified Communications Manager web-based management interface and viewing the source code for the configuration page. A successful exploit could allow the attacker to recover passwords and expose those accounts to further attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200, CWE-522
References: http://www.securityfocus.com/bid/106538; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cucm-creds-disclosr; http://www.securityfocus.com/bid/106538
CVE: CVE-2018-0482
Published: 2019-01-10
Description: A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106514; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-pnc-stored-xss; http://www.securityfocus.com/bid/106514
CVE: CVE-2018-0483
Published: 2019-01-10
Description: A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could exploit this vulnerability by executing arbitrary JavaScript in the Jabber client of the recipient. A successful exploit could allow the attacker to execute arbitrary script code in the context of the targeted client or allow the attacker to access sensitive client-based information.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106506; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-jcf-im-xss; http://www.securityfocus.com/bid/106506
CVE: CVE-2019-5892
Published: 2019-01-10
Description: bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when ENABLE_BGP_VNC is used for Virtual Network Control, allows remote attackers to cause a denial of service (peering session flap) via attribute 255 in a BGP UPDATE packet. This occurred during Disco in January 2019 because FRR does not implement RFC 7606, and therefore the packets with 255 were considered invalid VNC data and the BGP session was closed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-436
References: https://frrouting.org/community/security/cve-2019-5892.html; https://github.com/FRRouting/frr/commit/943d595a018e69b550db08cccba1d0778a86705a; https://github.com/FRRouting/frr/releases/tag/frr-3.0.4
CVE: CVE-2019-5893
Published: 2019-01-10
Description: Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection; https://www.exploit-db.com/exploits/46118/; https://github.com/EmreOvunc/OpenSource-ERP-SQL-Injection
CVE: CVE-2018-0484
Published: 2019-01-10
Description: A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a missing check in the SSH server. An attacker could use this vulnerability to open an SSH connection to an affected Cisco IOS or IOS XE device with a source address belonging to a VRF instance. Once connected, the attacker would still need to provide valid credentials to access the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/106560; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-ios-ssh-vrf; http://www.securityfocus.com/bid/106560
CVE: CVE-2018-15453
Published: 2019-01-10
Description: A vulnerability in the Secure/Multipurpose Internet Mail Extensions (S/MIME) Decryption and Verification or S/MIME Public Key Harvesting features of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause an affected device to corrupt system memory. A successful exploit could cause the filtering process to unexpectedly reload, resulting in a denial of service (DoS) condition on the device. The vulnerability is due to improper input validation of S/MIME-signed emails. An attacker could exploit this vulnerability by sending a malicious S/MIME-signed email through a targeted device. If Decryption and Verification or Public Key Harvesting is configured, the filtering process could crash due to memory corruption and restart, resulting in a DoS condition. The software could then resume processing the same S/MIME-signed email, causing the filtering process to crash and restart again. A successful exploit could allow the attacker to cause a permanent DoS condition. This vulnerability may require manual intervention to recover the ESA.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-787
References: http://www.securityfocus.com/bid/106511; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-esa-dos; http://www.securityfocus.com/bid/106511
CVE: CVE-2018-15456
Published: 2019-01-10
Description: A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view saved passwords in plain text. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration pages in the Admin Portal. An attacker with read or write access to the Admin Portal could exploit this vulnerability by browsing to a page that contains sensitive data. An exploit could allow the attacker to recover passwords for unauthorized use and expose those accounts to further attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-522
References: http://www.securityfocus.com/bid/106512; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-ise-passwd; http://www.securityfocus.com/bid/106512
CVE: CVE-2018-16803
Published: 2019-01-10
Description: In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://twitter.com/DC3VDP/status/[PII_REDACTED]95753473; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]902212096/; https://www.websec.nl/news.php
CVE: CVE-2018-15457
Published: 2019-01-10
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106509; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cpi-xss; http://www.securityfocus.com/bid/106509
CVE: CVE-2018-15458
Published: 2019-01-10
Description: A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service (DoS) condition. The vulnerability occurs because the configuration of the Shell Access Filter, when used with a specific type of remote authentication, can cause a system file to have unbounded writes. An attacker could exploit this vulnerability by sending a steady stream of remote authentication requests to the appliance when the specific configuration is applied. Successful exploitation could allow the attacker to increase the size of a system log file so that it consumes most of the disk space. The lack of available disk space could lead to a DoS condition in which the device functions could operate abnormally, making the device unstable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-399, CWE-770
References: http://www.securityfocus.com/bid/106516; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-fpwr-mc-dos; http://www.securityfocus.com/bid/106516
CVE: CVE-2017-3718
Published: 2019-01-10
Description: Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.2 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00144.html
CVE: CVE-2018-12166
Published: 2019-01-10
Description: Insufficient write protection in firmware for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html
CVE: CVE-2018-12167
Published: 2019-01-10
Description: Firmware update routine in bootloader for Intel(R) Optane(TM) SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00175.html
CVE: CVE-2018-12177
Published: 2019-01-10
Description: Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00182.html
CVE: CVE-2018-18098
Published: 2019-01-10
Description: Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00203.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00203.html
CVE: CVE-2018-3703
Published: 2019-01-10
Description: Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00207.html
CVE: CVE-2019-0088
Published: 2019-01-10
Description: Insufficient path checking in Intel(R) System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00212.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00212.html
CVE: CVE-2[PII_REDACTED]
Published: 2019-01-10
Description: Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94, CWE-79
References: https://github.com/fedora-infra/bodhi/issues/1740; https://github.com/fedora-infra/bodhi/issues/1740
CVE: CVE-2[PII_REDACTED]
Published: 2019-01-10
Description: modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-242, CWE-20
References: https://pagure.io/modulemd/issue/55; https://pagure.io/modulemd/issue/55
CVE: CVE-2018-20684
Published: 2019-01-10
Description: In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106526; https://github.com/winscp/winscp/commit/49d876f2c5fc00bcedaa986a7cf6dedd6bf16f54; https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
CVE: CVE-2018-20685
Published: 2019-01-10
Description: In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: http://www.securityfocus.com/bid/106531; https://access.redhat.com/errata/RHSA-2019:3702; https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE: CVE-2018-15460
Published: 2019-01-10
Description: A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of service (DoS) condition on an affected device. The vulnerability is due to improper filtering of email messages that contain references to whitelisted URLs. An attacker could exploit this vulnerability by sending a malicious email message that contains a large number of whitelisted URLs. A successful exploit could allow the attacker to cause a sustained DoS condition that could force the affected device to stop scanning and forwarding email messages.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-770
References: http://www.securityfocus.com/bid/106507; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-esa-url-dos; http://www.securityfocus.com/bid/106507
CVE: CVE-2018-5403
Published: 2019-01-10
Description: Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77, CWE-287
References: https://www.exploit-db.com/exploits/45542; https://www.exploit-db.com/exploits/45542
CVE: CVE-2018-5412
Published: 2019-01-10
Description: Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.exploit-db.com/exploits/45132; https://www.exploit-db.com/exploits/45132
CVE: CVE-2018-5413
Published: 2019-01-10
Description: Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-250, CWE-732
References: https://www.exploit-db.com/exploits/45130; https://www.exploit-db.com/exploits/45130
CVE: CVE-2018-15461
Published: 2019-01-10
Description: A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by convincing a user to click a crafted URL. To exploit this vulnerability, the attacker may provide a link that directs a user to a malicious site and use misleading language or instructions to persuade the user to follow the provided link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106505; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-webex-bs-xss; http://www.securityfocus.com/bid/106505
CVE: CVE-2019-6126
Published: 2019-01-11
Description: The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff.
CVSS Score: 7.5 (HIGH)
CWE: CWE-425
References: https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md; https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md
CVE: CVE-2019-6127
Published: 2019-01-11
Description: An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be used for PHP code execution via "INTO OUTFILE" with a .php filename.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Eas3n/Vulnerabilities/blob/master/XiaoCMS_20141229_GETSHELL.md; https://github.com/Eas3n/Vulnerabilities/blob/master/XiaoCMS_20141229_GETSHELL.md
CVE: CVE-2019-6128
Published: 2019-01-11
Description: The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
CVSS Score: 8.8 (HIGH)
CWE: CWE-401
References: http://bugzilla.maptools.org/show_bug.cgi?id=2836; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html; http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html
CVE: CVE-2019-6129
Published: 2019-01-11
Description: png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/glennrp/libpng/issues/269; https://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; https://github.com/glennrp/libpng/issues/269
CVE: CVE-2019-6130
Published: 2019-01-11
Description: Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-118
References: http://www.securityfocus.com/bid/106558; https://bugs.ghostscript.com/show_bug.cgi?id=700446; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=faf47b94e24314d74907f3f6bc874105f2c962ed
CVE: CVE-2019-6131
Published: 2019-01-11
Description: svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://www.securityfocus.com/bid/106558; https://bugs.ghostscript.com/show_bug.cgi?id=700442; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=c8f7e48ff74720a5e984ae19d978a5ab4d5dde5b
CVE: CVE-2019-6132
Published: 2019-01-11
Description: An issue was discovered in Bento4 v1.5.1-627. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp when called from the AP4_EsdsAtom class in Core/Ap4EsdsAtom.cpp, as demonstrated by mp42aac.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/axiomatic-systems/Bento4/issues/357; https://github.com/axiomatic-systems/Bento4/issues/357
CVE: CVE-2019-6133
Published: 2019-01-11
Description: In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00049.html; http://www.securityfocus.com/bid/106537; https://access.redhat.com/errata/RHSA-2019:0230
CVE: CVE-2018-15464
Published: 2019-01-11
Description: A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the device. An attacker could exploit this vulnerability by sending large streams of broadcast packets to an affected device. If successful, an exploit could allow an attacker to impact services running on the device, resulting in a partial DoS condition.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/106550; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-asr900-dos; http://www.securityfocus.com/bid/106550