deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9118
Published: 2018-04-12
Description: exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://99robots.com/docs/wp-background-takeover-advertisements/; https://wpvulndb.com/vulnerabilities/9056; https://www.exploit-db.com/exploits/44417/
CVE: CVE-2018-9155
Published: 2018-04-12
Description: Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with a logs?logs.type= URI) and the Manage->Attributes section (via the "Name (display)" field to the attributes/create URI).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/1ZG1qiwpECbVnv92yNckDn7yyuluKoC2_ON-eLhAY97Q/edit?usp=sharing; https://www.exploit-db.com/exploits/44612/; https://docs.google.com/document/d/1ZG1qiwpECbVnv92yNckDn7yyuluKoC2_ON-eLhAY97Q/edit?usp=sharing
CVE: CVE-2018-9842
Published: 2018-04-12
Description: CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2018/Apr/19; http://www.securityfocus.com/archive/1/541931/100/0/threaded; http://www.securitytracker.com/id/1040674
CVE: CVE-2018-9843
Published: 2018-04-12
Description: The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://seclists.org/fulldisclosure/2018/Apr/18; http://www.securityfocus.com/archive/1/541932/100/0/threaded; http://www.securitytracker.com/id/1040675
CVE: CVE-2018-10059
Published: 2018-04-12
Description: Cacti before 1.1.37 has XSS because the get_current_page function in lib/functions.php relies on $_SERVER['PHP_SELF'] instead of $_SERVER['SCRIPT_NAME'] to determine a page name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040620; https://github.com/Cacti/cacti/issues/1457; https://www.cacti.net/changelog.php
CVE: CVE-2018-10060
Published: 2018-04-12
Description: Cacti before 1.1.37 has XSS because it does not properly reject unintended characters, related to use of the sanitize_uri function in lib/functions.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040620; https://github.com/Cacti/cacti/issues/1457; https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE: CVE-2018-10061
Published: 2018-04-12
Description: Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040620; https://github.com/Cacti/cacti/issues/1457; https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE: CVE-2018-1086
Published: 2018-04-12
Description: pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-200
References: https://access.redhat.com/errata/RHSA-2018:1060; https://access.redhat.com/errata/RHSA-2018:1927; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1086
CVE: CVE-2018-1079
Published: 2018-04-12
Description: pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.
CVSS Score: 8.7 (HIGH)
CWE: CWE-552, CWE-22
References: https://access.redhat.com/errata/RHSA-2018:1060; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1079; https://access.redhat.com/errata/RHSA-2018:1060
CVE: CVE-2018-1084
Published: 2018-04-12
Description: corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: http://www.securityfocus.com/bid/103758; https://access.redhat.com/errata/RHSA-2018:1169; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1084
CVE: CVE-2018-10068
Published: 2018-04-12
Description: The jDownloads extension before 3.2.59 for Joomla! has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.jdownloads.com/index.php/news/264-jdownloads-3-2-59-published.html; https://vel.joomla.org/resolved/2150-jdownloads-3-2-58-xss-cross-site-scripting; https://www.exploit-db.com/exploits/44471/
CVE: CVE-2018-10071
Published: 2018-04-12
Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/bigric3/windrvr1260_poc4; https://github.com/bigric3/windrvr1260_poc4
CVE: CVE-2018-10072
Published: 2018-04-12
Description: windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/bigric3/windrvr1260_poc3; https://github.com/bigric3/windrvr1260_poc3
CVE: CVE-2018-10073
Published: 2018-04-12
Description: joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/joyplus/joyplus-cms/issues/423; https://github.com/joyplus/joyplus-cms/issues/423
CVE: CVE-2018-10074
Published: 2018-04-12
Description: The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (NULL pointer dereference) by triggering a failure of resource retrieval.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9903e41ae1f5d50c93f268ca3304d4d7c64b9311; https://github.com/torvalds/linux/commit/9903e41ae1f5d50c93f268ca3304d4d7c64b9311; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9903e41ae1f5d50c93f268ca3304d4d7c64b9311
CVE: CVE-2018-10063
Published: 2018-04-12
Description: The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
CVSS Score: 7.8 (HIGH)
References: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/; https://www.exploit-db.com/exploits/44447/; https://www.tassos.gr/blog/convert-forms-2-0-4-security-release
CVE: CVE-2018-3861
Published: 2018-04-12
Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0546; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0546
CVE: CVE-2018-3862
Published: 2018-04-12
Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0547; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0547
CVE: CVE-2018-3868
Published: 2018-04-12
Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0550; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0550
CVE: CVE-2018-3889
Published: 2018-04-12
Description: A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0564; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0564
CVE: CVE-2014-6120
Published: 2018-04-12
Description: IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/96721; https://exchange.xforce.ibmcloud.com/vulnerabilities/96721
CVE: CVE-2014-6169
Published: 2018-04-12
Description: Cross-site scripting (XSS) vulnerability in IBM Forms Experience Builder 8.5.0 and 8.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 97777.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103761; https://exchange.xforce.ibmcloud.com/vulnerabilities/97777; http://www.securityfocus.com/bid/103761
CVE: CVE-2014-6412
Published: 2018-04-12
Description: WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.
CVSS Score: 8.1 (HIGH)
CWE: CWE-640
References: http://packetstormsecurity.com/files/130380/WordPress-Failed-Randomness.html; http://seclists.org/fulldisclosure/2015/Feb/42; http://seclists.org/fulldisclosure/2015/Feb/53
CVE: CVE-2014-8421
Published: 2018-04-12
Description: Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allow remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of (1) ConfigureCoreFile.sh, (2) Traceroute.sh, (3) apps.sh, (4) conversion_java2native.sh, (5) coreCompression.sh, (6) deletePasswd.sh, (7) findHealthSvcFDs.sh, (8) fw_printenv.sh, (9) fw_setenv.sh, (10) hw_wd_kicker.sh, (11) new_rootfs.sh, (12) opera_killSnmpd.sh, (13) opera_startSnmpd.sh, (14) rebootOperaSoftware.sh, (15) removeLogFiles.sh, (16) runOperaServices.sh, (17) setPasswd.sh, (18) startAccTestSvcs.sh, (19) usbNotification.sh, or (20) appWeb in /Opera_Deploy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://networks.unify.com/security/advisories/OBSO-1501-02.pdf; https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt; https://networks.unify.com/security/advisories/OBSO-1501-02.pdf
CVE: CVE-2014-8422
Published: 2018-04-12
Description: The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-331
References: https://networks.unify.com/security/advisories/OBSO-1501-02.pdf; https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt; https://networks.unify.com/security/advisories/OBSO-1501-02.pdf
CVE: CVE-2014-8888
Published: 2018-04-12
Description: The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.03.B02_EN.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/110755; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.03.B02_EN.PDF
CVE: CVE-2014-9563
Published: 2018-04-12
Description: CRLF injection vulnerability in the web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 allows remote authenticated users to modify the root password and consequently access the debug port using the serial interface via the ssh-password parameter to page.cmd.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-93
References: https://networks.unify.com/security/advisories/OBSO-1501-02.pdf; https://www.modzero.ch/advisories/MZ-14-02-Siemens-Unify-OpenStage.txt; https://networks.unify.com/security/advisories/OBSO-1501-02.pdf
CVE: CVE-2015-0150
Published: 2018-04-12
Description: The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/110583; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE: CVE-2015-0151
Published: 2018-04-12
Description: Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/110584; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE: CVE-2015-0152
Published: 2018-04-12
Description: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/110585; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE: CVE-2015-0153
Published: 2018-04-12
Description: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-320
References: ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/110586; ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-815/REVB/DIR-815_REVB_FIRMWARE_PATCH_NOTES_2.07.B01_EN.PDF
CVE: CVE-2018-5254
Published: 2018-04-12
Description: Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-417
References: https://www.arista.com/en/support/advisories-notices/security-advisories/4403-security-advisory-33; https://www.arista.com/en/support/advisories-notices/security-advisories/4403-security-advisory-33
CVE: CVE-2018-6870
Published: 2018-04-12
Description: Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.0.3 via the Listings Search feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/19/website-seller-script-reflected-xss/; https://0day4u.wordpress.com/2018/03/19/website-seller-script-reflected-xss/
CVE: CVE-2018-6879
Published: 2018-04-12
Description: PHP Scripts Mall Website Seller Script 2.0.3 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://0day4u.wordpress.com/2018/03/12/website-seller-script-improper-validation-of-email-address/; https://0day4u.wordpress.com/2018/03/12/website-seller-script-improper-validation-of-email-address/
CVE: CVE-2018-6900
Published: 2018-04-12
Description: PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/12/website-broker-script-stored-xss/; https://0day4u.wordpress.com/2018/03/12/website-broker-script-stored-xss/
CVE: CVE-2018-6902
Published: 2018-04-12
Description: PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/12/image-sharing-script-stored-xss/; https://0day4u.wordpress.com/2018/03/12/image-sharing-script-stored-xss/
CVE: CVE-2018-6903
Published: 2018-04-12
Description: PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://0day4u.wordpress.com/2018/03/12/hot-scripts-clone-script-classified-improper-validation-of-email-address/; https://0day4u.wordpress.com/2018/03/12/hot-scripts-clone-script-classified-improper-validation-of-email-address/
CVE: CVE-2018-6904
Published: 2018-04-12
Description: PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/12/car-rental-script-stored-xss/; https://0day4u.wordpress.com/2018/03/12/car-rental-script-stored-xss/
CVE: CVE-2018-6934
Published: 2018-04-12
Description: CSRF exists in student/personal-info in PHP Scripts Mall Online Tutoring Script 2.0.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://0day4u.wordpress.com/2018/03/12/97/; https://0day4u.wordpress.com/2018/03/12/97/
CVE: CVE-2018-6935
Published: 2018-04-12
Description: PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to list_student.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://0day4u.wordpress.com/2018/03/19/student-profile-management-system-script-stored-xss/; https://0day4u.wordpress.com/2018/03/19/student-profile-management-system-script-stored-xss/
CVE: CVE-2018-10080
Published: 2018-04-13
Description: Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
CVSS Score: 8.6 (HIGH)
CWE: CWE-345
References: https://www.exploit-db.com/exploits/44393/; https://www.exploit-db.com/exploits/44393/
CVE: CVE-2018-10081
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2018-10082
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php, /admin/footer.php, /lib/tasks/class.ClearCache.task.php, or /lib/tasks/class.CmsSecurityCheck.task.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2018-10083
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2018-10084
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because an SHA-1 cryptographic protection mechanism can be bypassed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-327
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2018-10085
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2018-10086
Published: 2018-04-13
Description: CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/itodaro/cve/blob/master/README.md; https://github.com/itodaro/cve/blob/master/README.md
CVE: CVE-2017-6143
Published: 2018-04-13
Description: X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-295
References: https://support.f5.com/csp/article/K11464209; https://support.f5.com/csp/article/K11464209
CVE: CVE-2017-6148
Published: 2018-04-13
Description: Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K55225440; https://support.f5.com/csp/article/K55225440
CVE: CVE-2017-6155
Published: 2018-04-13
Description: On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K10930474; https://support.f5.com/csp/article/K10930474
CVE: CVE-2017-6156
Published: 2018-04-13
Description: When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary credentials to negotiate the phase 1 of the IPSec exchange to exploit this vulnerability; in many environment this limits the attack surface to other endpoints under the same administration.
CVSS Score: 6.4 (MEDIUM)
References: https://support.f5.com/csp/article/K05263202; https://support.f5.com/csp/article/K05263202