deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20538
Published: 2018-12-28
Description: There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392531; https://bugzilla.nasm.us/show_bug.cgi?id=3392531
CVE: CVE-2018-20539
Published: 2018-12-28
Description: There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652609; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE: CVE-2018-20540
Published: 2018-12-28
Description: There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652612; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE: CVE-2018-20541
Published: 2018-12-28
Description: There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652632; https://github.com/hfp/libxsmm/commit/[PII_REDACTED]2e6d1997f8bde52c5c425ea41741d; https://github.com/hfp/libxsmm/issues/287
CVE: CVE-2018-20542
Published: 2018-12-28
Description: There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652633; https://bugzilla.redhat.com/show_bug.cgi?id=1652635; https://github.com/hfp/libxsmm/commit/[PII_REDACTED]2e6d1997f8bde52c5c425ea41741d
CVE: CVE-2018-20543
Published: 2018-12-28
Description: There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652634; https://bugzilla.redhat.com/show_bug.cgi?id=1652634
CVE: CVE-2018-20544
Published: 2018-12-28
Description: There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652627; https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html
CVE: CVE-2018-20545
Published: 2018-12-28
Description: There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652621; https://github.com/cacalabs/libcaca/commit/3e52dabe3e64dc50f4422effe364a1457a8a8592
CVE: CVE-2018-20546
Published: 2018-12-28
Description: There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for the default bpp case.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652622; https://github.com/cacalabs/libcaca/commit/1022d97496c7899e8641515af363381b31ae2f05
CVE: CVE-2018-20547
Published: 2018-12-28
Description: There is an illegal READ memory access at caca/dither.c (function get_rgba_default) in libcaca 0.99.beta19 for 24bpp data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652624; https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html
CVE: CVE-2018-20548
Published: 2018-12-28
Description: There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 1bpp data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652625; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/
CVE: CVE-2018-20549
Published: 2018-12-28
Description: There is an illegal WRITE memory access at caca/file.c (function caca_file_read) in libcaca 0.99.beta19.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html; https://bugzilla.redhat.com/show_bug.cgi?id=1652628; https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html
CVE: CVE-2018-20551
Published: 2018-12-28
Description: A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2019:2713; https://gitlab.freedesktop.org/poppler/poppler/issues/703; https://gitlab.freedesktop.org/poppler/poppler/merge_requests/146
CVE: CVE-2018-20552
Published: 2018-12-28
Description: Tcpreplay before 4.3.1 has a heap-based buffer over-read in packet2tree in tree.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/appneta/tcpreplay/issues/530; https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2; https://github.com/appneta/tcpreplay/issues/530
CVE: CVE-2018-20553
Published: 2018-12-28
Description: Tcpreplay before 4.3.1 has a heap-based buffer over-read in get_l2len in common/get.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/appneta/tcpreplay/issues/530; https://github.com/appneta/tcpreplay/pull/532/commits/6b830a1640ca20528032c89a4fdd8291a4d2d8b2; https://github.com/appneta/tcpreplay/issues/530
CVE: CVE-2018-20557
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the page_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss3; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss3
CVE: CVE-2018-20558
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/system.php?rec=update has XSS via the site_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss8; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss8
CVE: CVE-2018-20559
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product.php?rec=update has XSS via the name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss5; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss5
CVE: CVE-2018-20560
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/show.php?rec=update has XSS via the show_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss2; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss2
CVE: CVE-2018-20561
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article.php?rec=update has XSS via the title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss7; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss7
CVE: CVE-2018-20562
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/article_category.php?rec=update has XSS via the cat_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss6; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss6
CVE: CVE-2018-20563
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobile_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss9; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss9
CVE: CVE-2018-20564
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/product_category.php?rec=update has XSS via the cat_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss4; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss4
CVE: CVE-2018-20565
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. admin/nav.php?rec=update has XSS via the nav_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss1; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#xss1
CVE: CVE-2018-20566
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. It allows full path disclosure in "Smarty error: unable to read resource" error messages for a crafted installation page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#information-disclosure; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#information-disclosure
CVE: CVE-2018-20567
Published: 2018-12-28
Description: An issue was discovered in DouCo DouPHP 1.5 20181221. \install\index.php allows a reload of the product in opportunistic circumstances in which install.lock cannot be read.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#reloadapplication; https://github.com/AvaterXXX/CVEs/blob/master/DouPHP.md#reloadapplication
CVE: CVE-2018-20568
Published: 2018-12-28
Description: Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nabby27/CMS/pull/2; https://github.com/nabby27/CMS/pull/2
CVE: CVE-2018-20569
Published: 2018-12-28
Description: user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nabby27/CMS/pull/2; https://github.com/nabby27/CMS/pull/2
CVE: CVE-2018-20570
Published: 2018-12-28
Description: jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; https://github.com/mdadams/jasper/issues/191
CVE: CVE-2018-20571
Published: 2018-12-28
Description: DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/AutismJH/damicms/issues/1; https://github.com/AutismJH/damicms/issues/1
CVE: CVE-2018-20572
Published: 2018-12-28
Description: WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/166; https://github.com/wuzhicms/wuzhicms/issues/166
CVE: CVE-2018-20573
Published: 2018-12-28
Description: The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/jbeder/yaml-cpp/issues/655; http://seclists.org/fulldisclosure/2024/Nov/0; https://github.com/jbeder/yaml-cpp/issues/655
CVE: CVE-2018-20574
Published: 2018-12-28
Description: The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/jbeder/yaml-cpp/issues/654; http://seclists.org/fulldisclosure/2024/Nov/0; https://github.com/jbeder/yaml-cpp/issues/654
CVE: CVE-2018-5203
Published: 2018-12-28
Description: DEXTUploadX5 version Between 1.0.0.0 and 2.2.0.0 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30122
CVE: CVE-2018-5204
Published: 2018-12-28
Description: ML Report version Between 2.00.000.0000 and 2.18.628.5980 contains a vulnerability that could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. this can be leveraged for code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30123; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30123
CVE: CVE-2018-7366
Published: 2018-12-28
Description: ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized operations.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010023; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010023
CVE: CVE-2018-16630
Published: 2018-12-28
Description: Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdf; https://github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdf
CVE: CVE-2018-16632
Published: 2018-12-28
Description: Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-16632/blob/master/mezzanine_persistent%20XSS.pdf; https://github.com/security-breachlock/CVE-2018-16632/blob/master/mezzanine_persistent%20XSS.pdf
CVE: CVE-2018-16637
Published: 2018-12-28
Description: Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-16637/blob/master/evolution_xss_stored.pdf; https://github.com/security-breachlock/CVE-2018-16637/blob/master/evolution_xss_stored.pdf
CVE: CVE-2018-16638
Published: 2018-12-28
Description: Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-16638/blob/master/evolution_xss_reflected.pdf; https://github.com/security-breachlock/CVE-2018-16638/blob/master/evolution_xss_reflected.pdf
CVE: CVE-2018-18665
Published: 2018-12-28
Description: The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://etherscan.io/address/0x7627de4b93263a6a7570b8dafa64bae812e5c394#code; https://github.com/NexxusUniversity/nexxuscoin/issues/2; https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
CVE: CVE-2018-18666
Published: 2018-12-28
Description: The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://etherscan.io/address/0x0bb217e40f8a5cb79adf04e1aab60e5abd0dfc1e#code; https://github.com/SwftCoins/SwftCoin/issues/1; https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
CVE: CVE-2018-18667
Published: 2018-12-28
Description: The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://etherscan.io/address/0x7703c35cffdc5cda8d27aa3df2f9ba6964544b6e#code; https://github.com/klenergy/ethereum-contracts/issues/1; https://github.com/n0pn0pn0p/smart_contract_-vulnerability/blob/master/PolyAi.md
CVE: CVE-2018-18696
Published: 2018-12-28
Description: main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has been provided (https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=en_US) and disagrees that this issue is a vulnerability. They also claim that MicroStrategy was never properly informed of this issue via normal support channels or their vulnerability reporting page on their website, so they were unable to evaluate the report or explain how this is something their customers view as a feature and not a security vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=en_US; https://raw.githubusercontent.com/Siros96/MicroStrategy_CSRF/master/PoC; https://seclists.org/bugtraq/2018/Dec/3
CVE: CVE-2018-20575
Published: 2018-12-28
Description: Orange Livebox 00.96.320S devices have an undocumented /system_firmwarel.stm URI for manual firmware update. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/zadewg/LIVEBOX-0DAY; https://github.com/zadewg/LIVEBOX-0DAY
CVE: CVE-2018-20576
Published: 2018-12-28
Description: Orange Livebox 00.96.320S devices allow cgi-bin/autodialing.exe and cgi-bin/phone_test.exe CSRF, leading to arbitrary outbound telephone calls to an attacker-specified telephone number. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://gbhackers.com/orange-adsl-modems/; https://github.com/zadewg/LIVEBOX-0DAY; https://gbhackers.com/orange-adsl-modems/
CVE: CVE-2018-20577
Published: 2018-12-28
Description: Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-352
References: https://github.com/zadewg/LIVEBOX-0DAY; https://github.com/zadewg/LIVEBOX-0DAY
CVE: CVE-2018-20578
Published: 2018-12-28
Description: An issue was discovered in NuttX before 7.27. The function netlib_parsehttpurl() in apps/netutils/netlib/netlib_parsehttpurl.c mishandles URLs longer than hostlen bytes (in the webclient, this is set by default to 40), leading to an Infinite Loop. The attack vector is the Location header of an HTTP 3xx response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://bitbucket.org/nuttx/nuttx/downloads/nuttx-7_27-README.txt; https://bitbucket.org/nuttx/nuttx/issues/119/denial-of-service-infinite-loop-while; https://bitbucket.org/nuttx/nuttx/downloads/nuttx-7_27-README.txt
CVE: CVE-2018-20579
Published: 2018-12-28
Description: Contiki-NG before 4.2 has a stack-based buffer overflow in the push function in os/lib/json/jsonparse.c that allows an out-of-bounds write of an '{' or '[' character.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://github.com/contiki-ng/contiki-ng/issues/601; https://github.com/contiki-ng/contiki-ng/issues/601
CVE: CVE-2018-14979
Published: 2018-12-28
Description: The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-keys contains a pre-installed app with a package name of com.asus.loguploader (versionCode=[PII_REDACTED], versionName=7.0.0.55_170515). This app contains an exported service app component named com.asus.loguploader.LogUploaderService that, when accessed with a particular action string, will write a bugreport (kernel log, logcat log, and the state of system services including the text of active notifications), Wi-Fi Passwords, and other system data to external storage (sdcard). Any app with the READ_EXTERNAL_STORAGE permission on this device can read this data from the sdcard after it has been dumped there by the com.asus.loguploader. Third-party apps are not allowed to directly create a bugreport or access the user's stored wireless network credentials.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: https://www.kryptowire.com/portal/android-firmware-defcon-2018/; https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf; https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE: CVE-2018-14984
Published: 2018-12-28
Description: The Leagoo Z5C Android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/MRA58K/android.20[PII_REDACTED]36:user/release-keys contains a pre-installed app with a package name of com.android.messaging (versionCode=1000110, versionName=1.0.001, (android.20[PII_REDACTED]53-0)) with an exported broadcast receiver app component named com.android.messaging.trackersender.TrackerSender. Any app co-located on the device, even one with no permissions, can send a broadcast intent with certain embedded data to the exported broadcast receiver application component that will result in the programmatic sending of a text message where the phone number and body of the text message is controlled by the attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.kryptowire.com/portal/android-firmware-defcon-2018/; https://www.kryptowire.com/portal/wp-content/uploads/2018/12/DEFCON-26-Johnson-and-Stavrou-Vulnerable-Out-of-the-Box-An-Eval-of-Android-Carrier-Devices-WP-Updated.pdf; https://www.kryptowire.com/portal/android-firmware-defcon-2018/