deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-1143
Published: 2018-04-19
Description: A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twonky_command.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2018-08; https://www.tenable.com/security/research/tra-2018-08
CVE: CVE-2018-1144
Published: 2018-04-19
Description: A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2018-08; https://www.tenable.com/security/research/tra-2018-08
CVE: CVE-2018-1145
Published: 2018-04-19
Description: A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.tenable.com/security/research/tra-2018-08; https://www.tenable.com/security/research/tra-2018-08
CVE: CVE-2018-1146
Published: 2018-04-19
Description: A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access.
CVSS Score: 7.5 (HIGH)
References: https://www.tenable.com/security/research/tra-2018-08; https://www.tenable.com/security/research/tra-2018-08
CVE: CVE-2018-6306
Published: 2018-04-19
Description: Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://support.kaspersky.com/vulnerability.aspx?el=12430#120418; https://support.kaspersky.com/vulnerability.aspx?el=12430#120418
CVE: CVE-2017-17310
Published: 2018-04-19
Description: Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a buffer error vulnerability. An unauthenticated, remote attacker has to control the peer device and send specially crafted ENUM packets to the affected products. Due to insufficient verification of some values in the packets, successful exploit may cause buffer error and some services abnormal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-enum-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-enum-en
CVE: CVE-2017-17313
Published: 2018-04-19
Description: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en
CVE: CVE-2017-3774
Published: 2018-04-19
Description: A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination can cause a portion of the authentication routine to overflow its stack, resulting in stack corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.lenovo.com/us/en/product_security/LEN-19586; https://support.lenovo.com/us/en/product_security/LEN-19586
CVE: CVE-2017-3776
Published: 2018-04-19
Description: Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.lenovo.com/us/en/product_security/LEN-20475; https://support.lenovo.com/us/en/product_security/LEN-20475
CVE: CVE-2018-10188
Published: 2018-04-19
Description: phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/103936; http://www.securitytracker.com/id/1040752; https://www.exploit-db.com/exploits/44496/
CVE: CVE-2018-7899
Published: 2018-04-19
Description: The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.111(C00), 8.0.0.112D(C00), 8.0.0.116(C00), 8.0.0.119(C00), 8.0.0.119D(C00), 8.0.0.122(C00), 8.0.0.132(C00), 8.0.0.132D(C00), 8.0.0.142(C00), 8.0.0.151(C00), Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23, 1.0.0.24, 1.0.0.26, 1.0.0.29 has a double free vulnerability. An attacker can trick a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause system reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-smartphone; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-smartphone
CVE: CVE-2018-7920
Published: 2018-04-19
Description: Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 devices have an improper resource management vulnerability. Due to the improper implementation of ACL mechanism, a remote attacker may send TCP messages to the management interface of the affected device to exploit this vulnerability. Successful exploit could exhaust the socket resource of management interface, leading to a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-ar-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-01-ar-en
CVE: CVE-2018-10230
Published: 2018-04-19
Description: Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.synacktiv.com/ressources/zend_server_9_1_3_xss.pdf; https://www.zend.com/en/products/server/release-notes; https://www.synacktiv.com/ressources/zend_server_9_1_3_xss.pdf
CVE: CVE-2018-8118
Published: 2018-04-19
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11, Internet Explorer 10.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8118; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8118
CVE: CVE-2018-9861
Published: 2018-04-19
Description: Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject arbitrary web script through a crafted IMG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103924; https://github.com/ckeditor/ckeditor-dev/blob/master/CHANGES.md; https://www.drupal.org/sa-core-2018-003
CVE: CVE-2018-10235
Published: 2018-04-19
Description: POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacker can control the value of $cache['setting']['ucssocfg'] in diy\module\member\models\Member_model.php and write this code into the api/ucsso/config.php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/myndtt/vulnerability/blob/master/poscms/3-2-10.md; https://github.com/myndtt/vulnerability/blob/master/poscms/3-2-10.md
CVE: CVE-2018-10236
Published: 2018-04-19
Description: POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker can control the value of $data['name'] with no restrictions, and this value is written to the FCPATH.$file file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/myndtt/vulnerability/blob/master/poscms/3-2-18.md; https://github.com/myndtt/vulnerability/blob/master/poscms/3-2-18.md
CVE: CVE-2018-3842
Published: 2018-04-19
Description: An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. A specially crafted PDF document can lead to a dereference of an uninitialized pointer which, if under attacker control, can result in arbitrary code execution. An attacker needs to trick the user to open a malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: http://www.securityfocus.com/bid/103942; http://www.securitytracker.com/id/1040733; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0525
CVE: CVE-2018-3843
Published: 2018-04-19
Description: An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document can lead to an object of invalid type to be dereferenced, which can potentially lead to sensitive memory disclosure, and possibly to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.securityfocus.com/bid/103942; http://www.securitytracker.com/id/1040733; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0526
CVE: CVE-2018-0112
Published: 2018-04-19
Description: A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to insufficient input validation by the Cisco WebEx clients. An attacker could exploit this vulnerability by providing meeting attendees with a malicious Flash (.swf) file via the file-sharing capabilities of the client. Exploitation of this vulnerability could allow arbitrary code execution on the system of a targeted user. This affects the clients installed by customers when accessing a WebEx meeting. The following client builds of Cisco WebEx Business Suite (WBS30, WBS31, and WBS32), Cisco WebEx Meetings, and Cisco WebEx Meetings Server are impacted: Cisco WebEx Business Suite (WBS31) client builds prior to T31.23.2, Cisco WebEx Business Suite (WBS32) client builds prior to T32.10, Cisco WebEx Meetings with client builds prior to T32.10, Cisco WebEx Meetings Server builds prior to 2.8 MR2. Cisco Bug IDs: CSCvg19384, CSCvi10746.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/103920; http://www.securitytracker.com/id/1040709; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-wbs
CVE: CVE-2018-0227
Published: 2018-04-19
Description: A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to establish an SSL VPN connection and bypass certain SSL certificate verification steps. The vulnerability is due to incorrect verification of the SSL Client Certificate. An attacker could exploit this vulnerability by connecting to the ASA VPN without a proper private key and certificate pair. A successful exploit could allow the attacker to establish an SSL VPN connection to the ASA when the connection should have been rejected. This vulnerability affects Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliances (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliances (ASAv), Firepower 4110 Security Appliances, Firepower 9300 ASA Security Modules. Cisco Bug IDs: CSCvg40155.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/104018; http://www.securitytracker.com/id/1040723; https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01
CVE: CVE-2018-0228
Published: 2018-04-19
Description: A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the CPU to increase upwards of 100% utilization, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect handling of an internal software lock that could prevent other system processes from getting CPU cycles, causing a high CPU condition. An attacker could exploit this vulnerability by sending a steady stream of malicious IP packets that can cause connections to be created on the targeted device. A successful exploit could allow the attacker to exhaust CPU resources, resulting in a DoS condition during which traffic through the device could be delayed. This vulnerability applies to either IPv4 or IPv6 ingress traffic. This vulnerability affects Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software that is running on the following Cisco products: 3000 Series Industrial Security Appliances (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliances (ASAv), Firepower 2100 Series Security Appliances, Firepower 4110 Security Appliances, Firepower 9300 ASA Security Modules. Cisco Bug IDs: CSCvf63718.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-667
References: http://www.securityfocus.com/bid/104220; http://www.securitytracker.com/id/1040724; https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01
CVE: CVE-2018-0229
Published: 2018-04-19
Description: A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. The authentication would need to be done by an unsuspecting third party, aka Session Fixation. The vulnerability exists because there is no mechanism for the ASA or FTD Software to detect that the authentication request originates from the AnyConnect client directly. An attacker could exploit this vulnerability by persuading a user to click a crafted link and authenticating using the company's Identity Provider (IdP). A successful exploit could allow the attacker to hijack a valid authentication token and use that to establish an authenticated AnyConnect session through an affected device running ASA or FTD Software. This vulnerability affects the Cisco AnyConnect Secure Mobility Client, and ASA Software and FTD Software configured for SAML 2.0-based SSO for AnyConnect Remote Access VPN that is running on the following Cisco products: 3000 Series Industrial Security Appliances (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, Adaptive Security Virtual Appliance (ASAv), Firepower 2100 Series Security Appliance, Firepower 4100 Series Security Appliance, Firepower 9300 ASA Security Module, FTD Virtual (FTDv). Cisco Bug IDs: CSCvg65072, CSCvh87448.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384, CWE-384
References: http://www.securityfocus.com/bid/103939; http://www.securitytracker.com/id/1040711; http://www.securitytracker.com/id/1040712
CVE: CVE-2018-0230
Published: 2018-04-19
Description: A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to the affected software improperly validating IP Version 4 (IPv4) and IP Version 6 (IPv6) packets after the software reassembles the packets (following IP Fragmentation). An attacker could exploit this vulnerability by sending a series of malicious, fragmented IPv4 or IPv6 packets to an affected device. A successful exploit could allow the attacker to cause Snort processes on the affected device to hang at 100% CPU utilization, which could cause the device to stop processing traffic and result in a DoS condition until the device is reloaded manually. This vulnerability affects Cisco Firepower Threat Defense (FTD) Software Releases 6.2.1 and 6.2.2, if the software is running on a Cisco Firepower 2100 Series Security Appliance. Cisco Bug IDs: CSCvf91098.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/103931; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fp2100; http://www.securityfocus.com/bid/103931
CVE: CVE-2018-0231
Published: 2018-04-19
Description: A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious TLS message to an interface enabled for Secure Layer Socket (SSL) services on an affected device. Messages using SSL Version 3 (SSLv3) or SSL Version 2 (SSLv2) cannot be be used to exploit this vulnerability. An exploit could allow the attacker to cause a buffer underflow, triggering a crash on an affected device. This vulnerability affects Cisco ASA Software and Cisco FTD Software that is running on the following Cisco products: Adaptive Security Virtual Appliance (ASAv), Firepower Threat Defense Virtual (FTDv), Firepower 2100 Series Security Appliance. Cisco Bug IDs: CSCve18902, CSCve34335, CSCve38446.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-787
References: http://www.securitytracker.com/id/1040725; https://ics-cert.us-cert.gov/advisories/ICSA-18-184-01; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-asa3
CVE: CVE-2018-0233
Published: 2018-04-19
Description: A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the detection engine to consume excessive system memory on an affected device, which could cause a denial of service (DoS) condition. The vulnerability is due to the affected software improperly handling changes to SSL connection states. An attacker could exploit this vulnerability by sending crafted SSL connections through an affected device. A successful exploit could allow the attacker to cause the detection engine to consume excessive system memory on the affected device, which could cause a DoS condition. The device may need to be reloaded manually to recover from this condition. This vulnerability affects Cisco Firepower System Software Releases 6.0.0 and later, running on any of the following Cisco products: Adaptive Security Appliance (ASA) 5500-X Series Firewalls with FirePOWER Services, Adaptive Security Appliance (ASA) 5500-X Series Next-Generation Firewalls, Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances, Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances, Firepower 4100 Series Appliances, FirePOWER 7000 Series Appliances, FirePOWER 8000 Series Appliances, Firepower 9300 Series Security Appliances, Firepower Threat Defense for Integrated Services Routers (ISRs), Firepower Threat Defense Virtual for VMware, Industrial Security Appliance 3000, Sourcefire 3D System Appliances. Cisco Bug IDs: CSCve23031.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/103930; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-fpsnort; http://www.securityfocus.com/bid/103930
CVE: CVE-2018-0237
Published: 2018-04-19
Description: A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware detection. The vulnerability occurs because the software relies on only the file extension for detecting DMG files. An attacker could exploit this vulnerability by sending a DMG file with a nonstandard extension to a device that is running an affected AMP for Endpoints macOS Connector. An exploit could allow the attacker to bypass configured malware detection. Cisco Bug IDs: CSCve34034.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-706
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-amp; https://wwws.nightwatchcybersecurity.com/2018/02/25/research-compressed-files-auto-detection-on-macos/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-amp
CVE: CVE-2018-0238
Published: 2018-04-19
Description: A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in the UCS Director end-user portal and perform any permitted operations on any virtual machine. The permitted operations can be configured for the end user on the virtual machines with either of the following settings: The virtual machine is associated to a Virtual Data Center (VDC) that has an end user self-service policy attached to the VDC. The end user role has VM Management Actions settings configured under User Permissions. This is a global configuration, so all the virtual machines visible in the end-user portal will have the VM management actions available. The vulnerability is due to improper user authentication checks. An attacker could exploit this vulnerability by logging in to the UCS Director with a modified username and valid password. A successful exploit could allow the attacker to gain visibility into and perform actions against all virtual machines in the UCS Director end-user portal of the affected system. This vulnerability affects Cisco Unified Computing System (UCS) Director releases 6.0 and 6.5 prior to patch 3 that are in a default configuration. Cisco Bug IDs: CSCvh53501.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/103919; http://www.securitytracker.com/id/1040708; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-uscd