deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20021
Published: 2018-12-19
Description: LibVNC before commit c3115350eb8bb635d0fdb4dbbb0d0541f38ed19c contains a CWE-835: Infinite loop vulnerability in VNC client code. Vulnerability allows attacker to consume excessive amount of resources like CPU and RAM
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-031-libvnc-infinite-loop/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-20022
Published: 2018-12-19
Description: LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-032-libvnc-multiple-memory-leaks/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-20023
Published: 2018-12-19
Description: LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memory and can be abuse for information disclosure. Combined with another vulnerability, it can be used to leak stack memory layout and in bypassing ASLR
CVSS Score: 7.5 (HIGH)
CWE: CWE-665
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-033-libvnc-memory-leak/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-20024
Published: 2018-12-19
Description: LibVNC before commit 4a21bbd097ef7c44bb000c3bd0907f96a10e4ce7 contains null pointer dereference in VNC client code that can result DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-034-libvnc-null-pointer-dereference/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-6307
Published: 2018-12-19
Description: LibVNC before commit ca2a5ac02fbbadd0a21fabba779c1ea69173d10b contains heap use-after-free vulnerability in server code of file transfer extension that can result remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/12/19/klcert-18-026-libvnc-heap-use-after-free/; https://lists.debian.org/debian-lts-announce/2018/12/msg00017.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00042.html
CVE: CVE-2018-20298
Published: 2018-12-19
Description: S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via the S3 protocol.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://s3browser.com/news.aspx; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-34/; https://s3browser.com/news.aspx
CVE: CVE-2018-18999
Published: 2018-12-19
Description: WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1. Lack of proper validation of user supplied input may allow an attacker to cause the overflow of a buffer on the stack.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-787
References: http://www.securityfocus.com/bid/106245; https://ics-cert.us-cert.gov/advisories/ICSA-18-352-02; https://www.tenable.com/security/research/tra-2018-45
CVE: CVE-2018-19506
Published: 2018-12-19
Description: Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19506/blob/master/Zurmo_PS.pdf; https://github.com/security-breachlock/CVE-2018-19506/blob/master/Zurmo_PS.pdf
CVE: CVE-2018-19507
Published: 2018-12-19
Description: CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19507/blob/master/Persistent-XSS.pdf; https://github.com/security-breachlock/CVE-2018-19507/blob/master/Persistent-XSS.pdf
CVE: CVE-2018-19508
Published: 2018-12-19
Description: CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19508/blob/master/Persistent-XSS.pdf; https://github.com/security-breachlock/CVE-2018-19508/blob/master/Persistent-XSS.pdf
CVE: CVE-2018-19596
Published: 2018-12-19
Description: Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19596/blob/master/Zurmo_PS%20%281%29.pdf; https://github.com/security-breachlock/CVE-2018-19596/blob/master/Zurmo_PS%20%281%29.pdf
CVE: CVE-2018-19597
Published: 2018-12-19
Description: CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19597/blob/master/cmssms.pdf; https://github.com/security-breachlock/CVE-2018-19597/blob/master/cmssms.pdf
CVE: CVE-2018-19598
Published: 2018-12-19
Description: Statamic 2.10.3 allows XSS via First Name or Last Name to the /users URI in an 'Add new user' request.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-breachlock/CVE-2018-19598/blob/master/Static%20cms.pdf; https://github.com/security-breachlock/CVE-2018-19598/blob/master/Static%20cms.pdf
CVE: CVE-2018-11799
Published: 2018-12-19
Description: Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106266; https://lists.apache.org/thread.html/347e7a8cb86014b7ca37e49eb00b8d088203bdc0bcfb4799f8e5955a%40%3Cuser.oozie.apache.org%3E; http://www.securityfocus.com/bid/106266
CVE: CVE-2018-15798
Published: 2018-12-19
Description: Pivotal Concourse Release, versions 4.x prior to 4.2.2, login flow allows redirects to untrusted websites. A remote unauthenticated attacker could convince a user to click on a link using the oAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.
CVSS Score: 7.6 (HIGH)
CWE: CWE-601
References: https://pivotal.io/security/cve-2018-15798; https://pivotal.io/security/cve-2018-15798
CVE: CVE-2018-15801
Published: 2018-12-19
Description: Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malicious user must be used when signing JWTs. In that case, a malicious user could fashion signed JWTs with the malicious issuer URL that may be granted for the honest issuer.
CVSS Score: 7.4 (HIGH)
CWE: CWE-345
References: https://pivotal.io/security/cve-2018-15801; https://pivotal.io/security/cve-2018-15801
CVE: CVE-2018-20299
Published: 2018-12-19
Description: An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://psirt.bosch.com/Advisory/BOSCH-2018-1203.html; https://psirt.bosch.com/Advisory/BOSCH-2018-1203.html
CVE: CVE-2018-20300
Published: 2018-12-20
Description: Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://p0desta.com/2018/12/19/empirecms%E6%9C%80%E6%96%B0%E7%89%88%E5%90%8E%E5%8F%B0%E5%A4%9A%E5%A4%84getshell/; http://p0desta.com/2018/12/19/empirecms%E6%9C%80%E6%96%B0%E7%89%88%E5%90%8E%E5%8F%B0%E5%A4%9A%E5%A4%84getshell/
CVE: CVE-2018-20302
Published: 2018-12-20
Description: An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dependabot/elixir-security-advisories/blob/master/packages/xain/2018-09-03.yml; https://github.com/smpallen99/xain/issues/18; https://github.com/dependabot/elixir-security-advisories/blob/master/packages/xain/2018-09-03.yml
CVE: CVE-2018-20303
Published: 2018-12-20
Description: In pkg/tool/path.go in Gogs before 0.11.82.1218, a directory traversal in the file-upload functionality can allow an attacker to create a file under data/sessions on the server, a similar issue to CVE-2018-18925.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/gogs/gogs/commit/ff93d9dbda5cebe90d86e4b7dfb2c6b8642970ce; https://github.com/gogs/gogs/issues/5558; https://pentesterlab.com/exercises/cve-2018-18925/
CVE: CVE-2018-20304
Published: 2018-12-20
Description: wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long second argument. NOTE: this is not a Microsoft product.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/devinsmith/libexcel/issues/9; https://github.com/devinsmith/libexcel/issues/9
CVE: CVE-2018-20305
Published: 2018-12-20
Description: D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/RootSoull/Vuln-Poc/tree/master/D-Link/DIR-816; https://github.com/RootSoull/Vuln-Poc/tree/master/D-Link/DIR-816
CVE: CVE-2018-20301
Published: 2018-12-20
Description: An issue was discovered in Steve Pallen Coherence before 0.5.2 that is similar to a Mass Assignment vulnerability. In particular, "registration" endpoints (e.g., creating, editing, updating) allow users to update any coherence_fields data. For example, users can automatically confirm their accounts by sending the confirmed_at parameter with their registration request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/smpallen99/coherence/issues/270; https://github.com/smpallen99/coherence/issues/270
CVE: CVE-2018-20306
Published: 2018-12-20
Description: A stored cross-site scripting (XSS) vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730
CVE: CVE-2018-20307
Published: 2018-12-20
Description: Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730
CVE: CVE-2018-6669
Published: 2018-12-20
Description: A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows a remote or local user to execute blacklisted files through an ASP.NET form.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-425
References: http://www.securityfocus.com/bid/106282; https://kc.mcafee.com/corporate/index?page=content&id=SB10261; http://www.securityfocus.com/bid/106282
CVE: CVE-2018-8653
Published: 2018-12-20
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8643.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/106255; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8653; http://www.securityfocus.com/bid/106255
CVE: CVE-2018-1661
Published: 2018-12-20
Description: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144887.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/106329; https://exchange.xforce.ibmcloud.com/vulnerabilities/144887; https://www.ibm.com/support/docview.wss?uid=ibm10744189
CVE: CVE-2018-1677
Published: 2018-12-20
Description: IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-755
References: http://www.securityfocus.com/bid/106284; https://exchange.xforce.ibmcloud.com/vulnerabilities/145171; https://www.ibm.com/support/docview.wss?uid=ibm10744555
CVE: CVE-2018-1771
Published: 2018-12-20
Description: IBM Domino 9.0 and 9.0.1 could allow an attacker to execute commands on the system by triggering a buffer overflow in the parsing of command line arguments passed to nsd.exe. IBM X-force ID: 148687.
CVSS Score: 8.4 (HIGH)
CWE: CWE-119
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/148687; https://www.ibm.com/support/docview.wss?uid=ibm10743405; https://exchange.xforce.ibmcloud.com/vulnerabilities/148687
CVE: CVE-2018-1778
Published: 2018-12-20
Description: IBM LoopBack (IBM API Connect 2018.1, 2018.4.1, 5.0.8.0, and 5.0.8.4) could allow an attacker to bypass authentication if the AccessToken Model is exposed over a REST API, it is then possible for anyone to create an AccessToken for any User provided they know the userId and can hence get access to the other user&#195;&#162;&#194;&#128;&#194;&#153;s data / access to their privileges (if the user happens to be an Admin for example). IBM X-Force ID: 148801.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287
References: http://www.ibm.com/support/docview.wss?uid=ibm10733883; http://www.securityfocus.com/bid/106313; https://exchange.xforce.ibmcloud.com/vulnerabilities/148801
CVE: CVE-2018-1784
Published: 2018-12-20
Description: IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807.
CVSS Score: 7.1 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=ibm10737883; http://www.securityfocus.com/bid/106316; https://exchange.xforce.ibmcloud.com/vulnerabilities/148807
CVE: CVE-2018-1973
Published: 2018-12-20
Description: IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through the members functionality. IBM X-Force ID: 153914.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/106281; https://exchange.xforce.ibmcloud.com/vulnerabilities/153914; https://www.ibm.com/support/docview.wss?uid=ibm10788339
CVE: CVE-2018-5198
Published: 2018-12-20
Description: In Veraport G3 ALL on MacOS, a race condition when calling the Veraport API allow remote attacker to cause arbitrary file download and execution. This results in remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112
CVE: CVE-2018-5199
Published: 2018-12-20
Description: In Veraport G3 ALL on MacOS, due to insufficient domain validation, It is possible to overwrite installation file to malicious file. A remote unauthenticated attacker may use this vulnerability to execute arbitrary file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30112
CVE: CVE-2018-5200
Published: 2018-12-20
Description: KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted FLV format file. The problem is that more frame data is copied to heap memory than the size specified in the frame header. This results in a memory corruption and remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30113; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=30113
CVE: CVE-2018-7365
Published: 2018-12-20
Description: All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthorized operations.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-426, CWE-426
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010005; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010005
CVE: CVE-2017-9704
Published: 2018-12-20
Description: In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, There is no synchronization between msm_vb2 buffer operations which can lead to use after free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin; https://www.codeaurora.org/security-bulletin/2018/12/03/december-2018-code-aurora-security-bulletin
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bludit/bludit/issues/812; https://www.exploit-db.com/exploits/46060/; https://github.com/bludit/bludit/issues/812
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password_recovery.php that can result in IntegriaIMS web app user accounts can be taken over. This attack appear to be exploitable via Network access to IntegriaIMS web interface . This vulnerability appears to have been fixed in fixed in versions released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047.
CVSS Score: 8.1 (HIGH)
CWE: CWE-640
References: https://cp270.wordpress.com/2018/05/14/war-story-password-resets/; https://github.com/articaST/integriaims/commit/f2ff0ba821644acecb893483c86a9c4d3bb75047; https://github.com/fleetcaptain/integria-takeover
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Backdrop CMS version 1.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Sanitization of custom class names used on blocks and layouts. that can result in Execution of JavaScript from an unexpected source.. This attack appear to be exploitable via A user must be directed to an affected page while logged in.. This vulnerability appears to have been fixed in 1.11.1 and later.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-core-2018-005; https://backdropcms.org/security/backdrop-sa-core-2018-005
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability in EncryptedCookieStorage and NaClCookieStorage that can result in Non-expiring sessions / Infinite lifespan. This attack appear to be exploitable via Recreation of a cookie post-expiry with the same value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-613
References: https://github.com/aio-libs/aiohttp-session/issues/325; https://github.com/aio-libs/aiohttp-session/pull/331; https://github.com/aio-libs/aiohttp-session/issues/325
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript() in content_settings_observer.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track users. This attack appear to be exploitable via the victim must visit a specially crafted website. This vulnerability appears to have been fixed in 0.25.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/brave/browser-laptop/issues/15232; https://github.com/brave/muon/commit/c18663aa171c6cdf03da3e8c70df8663645b97c4; https://github.com/brave/muon/pull/651
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting (XSS) vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where the payload was previously inserted..
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/grafana/grafana/issues/13667; https://github.com/grafana/grafana/issues/13667
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files and any arbitrary file. This attack appear to be exploitable via Specially crafted GET request containing directory traversal from assets-pipeline context. This vulnerability appears to have been fixed in 2.14.1.1 (for Grails 2.x), 2.15.1 (for Grails 3 and Java 7) and 3.0.6 (for Grails 3 and Java 8).
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://grailsblog.objectcomputing.com/posts/2018/09/23/security-vulnerability-in-asset-pipeline-and-jetty.html; https://github.com/grails/grails-core/issues/11068; http://grailsblog.objectcomputing.com/posts/2018/09/23/security-vulnerability-in-asset-pipeline-and-jetty.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-20
Description: neo4j-contrib neo4j-apoc-procedures version before commit 45bc09c contains a XML External Entity (XXE) vulnerability in XML Parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This vulnerability appears to have been fixed in after commit 45bc09c.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-611
References: https://0dd.zone/2018/10/27/neo4f-apoc-procedures-XXE/; https://github.com/neo4j-contrib/neo4j-apoc-procedures/issues/931; https://0dd.zone/2018/10/27/neo4f-apoc-procedures-XXE/