deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-17144
Published: 2018-09-19
Description: Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash.
CVSS Score: 7.5 (HIGH)
References: https://bitcoincore.org/en/2018/09/18/release-0.16.3/; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures#CVE-2018-17144; https://github.com/JinBean/CVE-Extension
CVE: CVE-2018-17182
Published: 2018-09-19
Description: An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7a9cdebdcc17e426fb5287e4a82db1dfe86339b2; http://www.securityfocus.com/bid/105417; http://www.securityfocus.com/bid/106503
CVE: CVE-2018-11761
Published: 2018-09-19
Description: In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/105514; https://lists.apache.org/thread.html/5553e10bba[PII_REDACTED]466618f219c0cae710075819c70cfb3fb421%40%3Cdev.tika.apache.org%3E; https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E
CVE: CVE-2018-11762
Published: 2018-09-19
Description: In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, such as "C:/evil.bat", tika-app would overwrite that file.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/105515; https://lists.apache.org/thread.html/ab2e1af38975f5fc462ba89b517971ef892ec3d06bee12ea2258895b%40%3Cdev.tika.apache.org%3E; http://www.securityfocus.com/bid/105515
CVE: CVE-2018-11878
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=443edf4a19b89593f472c39e820a6a9adee76341; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11883
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=5f21c4fa98f05423552da8716c80abfb7ca43091; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=5f21c4fa98f05423552da8716c80abfb7ca43091
CVE: CVE-2018-11886
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check while calculating the MPDU data length will cause an integer overflow and then to buffer overflow in WLAN function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cc0e6489d67d3fc7b196cf6806a7a5edcff33a88; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=cc0e6489d67d3fc7b196cf6806a7a5edcff33a88
CVE: CVE-2018-11889
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when requesting rssi timeout, access invalid memory may occur since local variable 'context' stack data of wlan function is free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=4e9edcdbb8d7087dd2c7cc250813426c9c27c4d2; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11891
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae[PII_REDACTED]d313fbfb4c74d0c61daa; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11893
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing vendor scan request, when input argument - length of request IEs is greater than maximum can lead to a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9564f777e20bab7dc29dbbb22d353cd1348b1ec2; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=9564f777e20bab7dc29dbbb22d353cd1348b1ec2
CVE: CVE-2018-11894
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e60c5608f843ec106a98a98b33de0c3be070d557; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11895
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=3dfe93028c0c6564db7aa4607a[PII_REDACTED]5aa4; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11897
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=7500b[PII_REDACTED]039001f0ff91ce3b63040544b; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11898
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-09-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=dc657f502adb3038784b7488d2f183ed31b6aac3; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11902
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to OOB access in WLAN HOST.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=e6298b787b3510c295dd0c9276194b3578f3cf09; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin
CVE: CVE-2018-11903
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from caller function used as an array index for WMA interfaces can lead to OOB write in WLAN HOST.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=84cd3bee44fa37b196cfad8b15d[PII_REDACTED]62d; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=84cd3bee44fa37b196cfad8b15d[PII_REDACTED]62d
CVE: CVE-2018-11904
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/107770; https://source.codeaurora.org/quic/la//platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=0a755b400876ab4d58151e98462d3fa8fe099f61; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/prima/commit/?id=00022c12e0cad8b735f94d6ee3785a557b4a3df2
CVE: CVE-2018-3573
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while relocating kernel images with a specially crafted boot image, an out of bounds access can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=49ecadaf98f99d7ef0b5a05a8320e5328da42008; https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/kernel/lk/commit/?id=49ecadaf98f99d7ef0b5a05a8320e5328da42008
CVE: CVE-2018-3574
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the ION_FLAG_SECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which does not belong to HLOS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=3286b75d91519073d2f20bee85f22e294d5f1a18; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=09874396dfbf546e5a628d810fcf5ea51a4d5785; https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=53261410da625aaa2e070555aaa150a8533e5be4
CVE: CVE-2018-5905
Published: 2018-09-19
Description: In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a race condition while accessing num of clients in DIAG services can lead to out of boundary access.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119, CWE-362
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000051163; https://source.android.com/security/bulletin/pixel/2018-08-01#qualcomm-components; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=6eb2f4f6fde1b210712d6ac66b40b9e7684d77db
CVE: CVE-2018-8017
Published: 2018-09-19
Description: In Apache Tika 1.2 to 1.18, a carefully crafted file can trigger an infinite loop in the IptcAnpaParser.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/105513; https://lists.apache.org/thread.html/72df7a3f0dda49a912143a1404b489837a11f374dfd[PII_REDACTED]a91%40%3Cdev.tika.apache.org%3E; http://www.securityfocus.com/bid/105513
CVE: CVE-2017-1794
Published: 2018-09-19
Description: IBM Tivoli Monitoring 6.2.3 through 6.2.3.5 and 6.3.0 through 6.3.0.7 are vulnerable to both TEPS user privilege escalation and possible denial of service due to unconstrained memory growth. IBM X-Force ID: 137039.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/137039; https://www.ibm.com/support/docview.wss?uid=swg22014097; https://exchange.xforce.ibmcloud.com/vulnerabilities/137039
CVE: CVE-2018-1149
Published: 2018-09-19
Description: cgi_system in NUUO's NVRMini2 3.8.0 and below allows remote attackers to execute arbitrary code via crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105720; https://github.com/tenable/poc/tree/master/nuuo/nvrmini2; https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf
CVE: CVE-2018-1150
Published: 2018-09-19
Description: NUUO's NVRMini2 3.8.0 and below contains a backdoor that would allow an unauthenticated remote attacker to take over user accounts if the file /tmp/moses exists.
CVSS Score: 7.3 (HIGH)
References: http://www.securityfocus.com/bid/105720; https://www.nuuo.com/backend/CKEdit/upload/files/NUUO_NVRsolo_v3_9_1_Release%20note.pdf; https://www.tenable.com/security/research/tra-2018-25
CVE: CVE-2018-12242
Published: 2018-09-19
Description: The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105329; https://support.symantec.com/en_US/article.SYMSA1461.html; http://www.securityfocus.com/bid/105329
CVE: CVE-2018-12243
Published: 2018-09-19
Description: The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity (XXE) exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths in the system identifier to access files that should not normally be accessible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/105330; https://support.symantec.com/en_US/article.SYMSA1461.html; http://www.securityfocus.com/bid/105330
CVE: CVE-2018-14792
Published: 2018-09-19
Description: WECON PLC Editor version 1.3.3U may allow an attacker to execute code under the current process when processing project files.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-119
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-261-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-261-01
CVE: CVE-2018-16607
Published: 2018-09-19
Description: Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/1MKeb9lly_oOrVG0Ja4A-HgwaeXhb_xQHT9IIOee3wi0/edit; https://docs.google.com/document/d/1MKeb9lly_oOrVG0Ja4A-HgwaeXhb_xQHT9IIOee3wi0/edit
CVE: CVE-2018-16785
Published: 2018-09-19
Description: XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: https://github.com/ky-j/dedecms/issues/4; https://github.com/ky-j/dedecms/issues/4
CVE: CVE-2018-17183
Published: 2018-09-19
Description: Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code.
CVSS Score: 7.8 (HIGH)
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=fb713b3818b52d8a6cf62c951eba2e1795ff9624; https://access.redhat.com/errata/RHSA-2018:3834; https://bugs.ghostscript.com/show_bug.cgi?id=699708
CVE: CVE-2018-1782
Published: 2018-09-19
Description: IBM GPFS (IBM Spectrum Scale 5.0.1.0 and 5.0.1.1) allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system. IBM X-Force ID: 148805.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/148805; https://www.ibm.com/support/docview.wss?uid=ibm10730967; https://exchange.xforce.ibmcloud.com/vulnerabilities/148805
CVE: CVE-2017-2855
Published: 2018-09-19
Description: An exploitable buffer overflow vulnerability exists in the DDNS client used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. On devices with DDNS enabled, an attacker who is able to intercept HTTP connections will be able to fully compromise the device by creating a rogue HTTP server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0358; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0358
CVE: CVE-2017-2875
Published: 2018-09-19
Description: An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10000 can cause a buffer overflow resulting in overwriting arbitrary data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0382; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0382
CVE: CVE-2017-2878
Published: 2018-09-19
Description: An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0385
CVE: CVE-2017-2879
Published: 2018-09-19
Description: An exploitable buffer overflow vulnerability exists in the UPnP implementation used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted UPnP discovery response can cause a buffer overflow resulting in overwriting arbitrary data. An attacker needs to be in the same subnetwork and reply to a discovery message to trigger this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0386
CVE: CVE-2018-17204
Published: 2018-09-19
Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-617
References: https://access.redhat.com/errata/RHSA-2018:3500; https://access.redhat.com/errata/RHSA-2019:0053; https://access.redhat.com/errata/RHSA-2019:0081
CVE: CVE-2018-17205
Published: 2018-09-19
Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://access.redhat.com/errata/RHSA-2018:3500; https://access.redhat.com/errata/RHSA-2019:0053; https://access.redhat.com/errata/RHSA-2019:0081
CVE: CVE-2018-17206
Published: 2018-09-19
Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2018:3500; https://access.redhat.com/errata/RHSA-2019:0053; https://access.redhat.com/errata/RHSA-2019:0081
CVE: CVE-2018-17207
Published: 2018-09-19
Description: An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files (installer.php and installer-backup.php), an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://snapcreek.com/duplicator/docs/changelog/?lite; https://www.synacktiv.com/ressources/advisories/WordPress_Duplicator-1.2.40-RCE.pdf; https://snapcreek.com/duplicator/docs/changelog/?lite
CVE: CVE-2018-17208
Published: 2018-09-19
Description: Linksys Velop 1.1.2.187020 devices allow unauthenticated command injection, providing an attacker with full root access, via cgi-bin/zbtest.cgi or cgi-bin/zbtest2.cgi (scripts that can be discovered with binwalk on the firmware, but are not visible in the web interface). This occurs because shell metacharacters in the query string are mishandled by ShellExecute, as demonstrated by the zbtest.cgi?cmd=level&level= substring. This can also be exploited via CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://langkjaer.com/velop.html; https://langkjaer.com/velop.html
CVE: CVE-2017-2873
Published: 2018-09-19
Description: An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380; https://talosintelligence.com/vulnerability_reports/TALOS-2017-0380