deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18529
Published: 2018-10-19
Description: ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.kingkk.com/2018/10/Thinkphp-%E8%81%9A%E5%90%88%E6%9F%A5%E8%AF%A2%E6%BC%8F%E6%B4%9E/#ThinkPHP3-lt-3-2-4; https://www.kingkk.com/2018/10/Thinkphp-%E8%81%9A%E5%90%88%E6%9F%A5%E8%AF%A2%E6%BC%8F%E6%B4%9E/#ThinkPHP3-lt-3-2-4
CVE: CVE-2018-18530
Published: 2018-10-19
Description: ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.kingkk.com/2018/10/Thinkphp-%E8%81%9A%E5%90%88%E6%9F%A5%E8%AF%A2%E6%BC%8F%E6%B4%9E/#ThinkPHP5-lt-5-1-25; https://www.kingkk.com/2018/10/Thinkphp-%E8%81%9A%E5%90%88%E6%9F%A5%E8%AF%A2%E6%BC%8F%E6%B4%9E/#ThinkPHP5-lt-5-1-25
CVE: CVE-2018-18531
Published: 2018-10-19
Description: text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://github.com/penggle/kaptcha/issues/3; https://github.com/penggle/kaptcha/issues/3
CVE: CVE-2018-12666
Published: 2018-10-19
Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B devices improperly identifies users only by the authentication level sent in the cookies, which allow remote attackers to bypass authentication and gain administrator access by setting the authLevel cookie to 255.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12667
Published: 2018-10-19
Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the configuration. The vulnerability affects all versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12668
Published: 2018-10-19
Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices have a Hard-coded Password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12669
Published: 2018-10-19
Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow remote authenticated users to reset arbitrary accounts via a request to web/cgi-bin/hi3510/param.cgi.
CVSS Score: 8.8 (HIGH)
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12670
Published: 2018-10-19
Description: SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices allow OS Command Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12671
Published: 2018-10-19
Description: An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including all password sets set within the camera. This information can then be used to gain access to the web interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12672
Published: 2018-10-19
Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B) does not perform proper validation on user-supplied input and is vulnerable to cross-site scripting attacks. If proper authorization was implemented, this vulnerability could be leveraged to perform actions on behalf of another user or the administrator.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12673
Published: 2018-10-19
Description: An attacker with remote access to the SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) web interface can disclose information about the camera including camera hardware, wireless network, and local area network information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12674
Published: 2018-10-19
Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) stores the username and password within the cookies of a session. If an attacker gained access to these session cookies, it would be possible to gain access to the username and password of the logged-in account.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-319
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-12675
Published: 2018-10-19
Description: The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that the camera's web interface redirects a user to. This can be leveraged to send a user to an unexpected endpoint.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/10/sv3c-l-series-hd-camera-multiple-vulnerabilities/
CVE: CVE-2018-18026
Published: 2018-10-19
Description: IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/151849; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-18223
Published: 2018-10-19
Description: Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/105603; https://www.opendesign.com/security-advisories; https://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2018-18224
Published: 2018-10-19
Description: A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105603; https://www.opendesign.com/security-advisories; https://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html
CVE: CVE-2018-18284
Published: 2018-10-19
Description: Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
CVSS Score: 8.6 (HIGH)
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8d19fdf63f91f50466b08f23e2d93d37a4c5ea0b; http://www.openwall.com/lists/oss-security/2018/10/16/2; http://www.securityfocus.com/bid/107451
CVE: CVE-2018-18398
Published: 2018-10-19
Description: Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the IBus-Unikey input method for file searches within File Manager, leading to an out-of-bounds read and SEGV. This could potentially be exploited by an arbitrary local user who creates files in /tmp before the victim uses this input method.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125
References: https://0xd0ff9.wordpress.com/2018/10/18/cve-2018-18398/; https://0xd0ff9.wordpress.com/2018/10/18/cve-2018-18398/
CVE: CVE-2018-18416
Published: 2018-10-19
Description: LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name parameter to the admin/settings/update URI.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149841/LANGO-Codeigniter-Multilingual-Script-1.0-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45672/; http://packetstormsecurity.com/files/149841/LANGO-Codeigniter-Multilingual-Script-1.0-Cross-Site-Scripting.html
CVE: CVE-2018-18417
Published: 2018-10-19
Description: In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name parameter to the index.php/admin/client/create URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149842/Ekushey-Project-Manager-CRM-3.1-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45681/; http://packetstormsecurity.com/files/149842/Ekushey-Project-Manager-CRM-3.1-Cross-Site-Scripting.html
CVE: CVE-2018-18419
Published: 2018-10-19
Description: Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149850/User-Management-1.1-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45686/; http://packetstormsecurity.com/files/149850/User-Management-1.1-Cross-Site-Scripting.html
CVE: CVE-2018-18420
Published: 2018-10-19
Description: Cross-Site Request Forgery (CSRF) vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenario__content%2Fpanels%2Fcontent URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/149851/Zenar-Content-Management-System-8.3-Cross-Site-Request-Forgery.html; http://packetstormsecurity.com/files/149851/Zenar-Content-Management-System-8.3-Cross-Site-Request-Forgery.html
CVE: CVE-2018-18428
Published: 2018-10-19
Description: TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://packetstormsecurity.com/files/149843; https://www.exploit-db.com/exploits/45632/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5497.php
CVE: CVE-2018-18438
Published: 2018-10-19
Description: Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2018/10/17/3; http://www.securityfocus.com/bid/105953; https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg02396.html
CVE: CVE-2018-18540
Published: 2018-10-20
Description: TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Teakki/issue/issues/24; https://github.com/Teakki/issue/issues/24
CVE: CVE-2018-18541
Published: 2018-10-20
Description: In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00046.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00077.html; https://bugs.debian.org/911487
CVE: CVE-2018-18544
Published: 2018-10-21
Description: There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://hg.code.sf.net/p/graphicsmagick/code/file/233618f8fe82/ChangeLog; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.html; https://github.com/ImageMagick/ImageMagick/issues/1360
CVE: CVE-2018-18545
Published: 2018-10-21
Description: Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/FiyoCMS/FiyoCMS/issues/14; https://github.com/FiyoCMS/FiyoCMS/issues/14
CVE: CVE-2018-18546
Published: 2018-10-21
Description: ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the key variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://98587329.github.io/2018/10/09/thinkphp%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90/; https://github.com/top-think/thinkphp/commit/9748cb80d2f24c89218f358ca2f5ab88ee33396f; https://98587329.github.io/2018/10/09/thinkphp%E6%B3%A8%E5%85%A5%E5%88%86%E6%9E%90/
CVE: CVE-2018-18550
Published: 2018-10-21
Description: ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://serverscheck.com/monitoring-software/release.asp; https://serverscheck.com/monitoring-software/release.asp
CVE: CVE-2018-18553
Published: 2018-10-22
Description: Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/leanote/leanote/issues/822; https://github.com/leanote/leanote/issues/822
CVE: CVE-2018-1850
Published: 2018-10-22
Description: IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running. IBM X-Force ID: 150998.
CVSS Score: 8.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=ibm10734555; http://www.securitytracker.com/id/1042036; https://exchange.xforce.ibmcloud.com/vulnerabilities/150998
CVE: CVE-2018-18557
Published: 2018-10-22
Description: LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:2053; https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-18557; https://gitlab.com/libtiff/libtiff/commit/681748ec2f5ce88da5f9fa6831e1653e46af8a66
CVE: CVE-2018-18559
Published: 2018-10-22
Description: In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-416
References: https://access.redhat.com/errata/RHBA-2019:0327; https://access.redhat.com/errata/RHSA-2019:0163; https://access.redhat.com/errata/RHSA-2019:0188
CVE: CVE-2018-12246
Published: 2018-10-22
Description: Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker can target end users protected by WI with social engineering attacks using crafted URLs for legitimate web sites. A successful attack allows injecting malicious JavaScript code into the website's rendered copy running inside the end user's web browser. It does not allow injecting code into the real (isolated) copy of the website running on the WI Threat Isolation Engine.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105581; https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1464.html; http://www.securityfocus.com/bid/105581
CVE: CVE-2018-15703
Published: 2018-10-22
Description: Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back to the victim and executed by the web browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/research/tra-2018-33; https://www.tenable.com/security/research/tra-2018-33
CVE: CVE-2018-15704
Published: 2018-10-22
Description: Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability by sending a crafted HTTP request to broadweb/system/opcImg.asp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.tenable.com/security/research/tra-2018-33; https://www.tenable.com/security/research/tra-2018-33
CVE: CVE-2018-13114
Published: 2018-10-22
Description: Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html; https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html
CVE: CVE-2018-13115
Published: 2018-10-22
Description: Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html; https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html
CVE: CVE-2018-18578
Published: 2018-10-22
Description: DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ky-j/dedecms/files/2500328/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.docx; https://github.com/ky-j/dedecms/issues/5; https://github.com/ky-j/dedecms/files/2500328/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.docx
CVE: CVE-2018-18579
Published: 2018-10-22
Description: Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ky-j/dedecms/files/2501671/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7sp2.docx; https://github.com/ky-j/dedecms/issues/6; https://github.com/ky-j/dedecms/files/2501671/Reflected.XSS.Vulnerability.exists.in.the.file.of.DedeCMS.V5.7sp2.docx
CVE: CVE-2018-18581
Published: 2018-10-22
Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-internalprintf; https://github.com/jansol/LuPng/issues/7; https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-internalprintf
CVE: CVE-2018-18582
Published: 2018-10-22
Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a palette.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte59837; https://github.com/jansol/LuPng/issues/9; https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte59837
CVE: CVE-2018-18583
Published: 2018-10-22
Description: An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer overflow in insertByte in miniz/lupng.c during a write operation for data obtained from a swap.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte57755; https://github.com/jansol/LuPng/issues/8; https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-insertbyte57755
CVE: CVE-2018-18584
Published: 2018-10-23
Description: In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:2049; https://bugs.debian.org/911640; https://github.com/kyz/libmspack/commit/40ef1b4093d77ad3a5cfcee1f5cb6108b3a3bcc2
CVE: CVE-2018-18585
Published: 2018-10-23
Description: chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2019:2049; https://bugs.debian.org/911637; https://github.com/kyz/libmspack/commit/8759da8db6ec9e866cb8eb143313f397f925bb4f
CVE: CVE-2018-18586
Published: 2018-10-23
Description: chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathnames in CHM files, leading to Directory Traversal. NOTE: the vendor disputes that this is a libmspack vulnerability, because chmextract.c was only intended as a source-code example, not a supported application
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://bugs.debian.org/911639; https://github.com/kyz/libmspack/commit/7cadd489698be117c47efcadd[PII_REDACTED]29e6d; https://security.gentoo.org/glsa/201903-20
CVE: CVE-2018-18587
Published: 2018-10-23
Description: BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://forums.appgini.com/phpbb/viewtopic.php?f=11&t=2592; https://forums.appgini.com/phpbb/viewtopic.php?f=11&t=2592