deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19318
Published: 2018-11-16
Description: SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=manager&a=update to change the username and password of the super administrator account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/martinzhou2015/SRCMS-dev/issues/1; https://github.com/martinzhou2015/SRCMS-dev/issues/1
CVE: CVE-2018-19319
Published: 2018-11-16
Description: SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/martinzhou2015/SRCMS-dev/issues/1; https://github.com/martinzhou2015/SRCMS-dev/issues/1
CVE: CVE-2018-18955
Published: 2018-11-16
Description: In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.
CVSS Score: 7.0 (HIGH)
CWE: CWE-863
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d2f007dbe7e4c9583eea6eb04d60001e85c6f1bd; http://www.securityfocus.com/bid/105941; https://bugs.chromium.org/p/project-zero/issues/detail?id=1712
CVE: CVE-2018-15769
Published: 2018-11-16
Description: RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105929; http://www.securitytracker.com/id/1042057; https://seclists.org/fulldisclosure/2018/Nov/37
CVE: CVE-2018-19274
Published: 2018-11-17
Description: Passing an absolute path to a file_exists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization when an attacker has access to the Admin Control Panel with founder permissions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502, CWE-1321
References: https://blog.ripstech.com/2018/phpbb3-phar-deserialization-to-remote-code-execution/; https://lists.debian.org/debian-lts-announce/2018/11/msg00029.html; https://www.phpbb.com/community/viewtopic.php?f=14&t=2492206
CVE: CVE-2018-19324
Published: 2018-11-17
Description: kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/laolisafe/Kimsq/blob/master/README.md; https://github.com/laolisafe/Kimsq/blob/master/README.md
CVE: CVE-2018-19326
Published: 2018-11-17
Description: Zyxel VMG1312-B10D devices before 5.13(AAXA.8)C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://gist.github.com/numanturle/4988b5583e5ebe501059bd368636de33; https://gist.github.com/numanturle/4988b5583e5ebe501059bd368636de33
CVE: CVE-2018-19327
Published: 2018-11-17
Description: An issue was discovered in JTBC(PHP) 3.0.1.7. aboutus/manage.php?type=action&action=add allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/toiron/setest/blob/master/jtbcpublisharticle.html; https://github.com/toiron/setest/blob/master/jtbcpublisharticle.html
CVE: CVE-2018-19328
Published: 2018-11-17
Description: LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/onkyoworm/poc/blob/master/laobancms/poc.md; https://github.com/onkyoworm/poc/blob/master/laobancms/poc.md
CVE: CVE-2018-19329
Published: 2018-11-17
Description: GreenCMS v2.3.0603 allows remote authenticated administrators to delete arbitrary files by modifying a base64-encoded pathname in an m=admin&c=media&a=delfilehandle&id= call, related to the m=admin&c=media&a=restorefile delete button.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/GreenCMS/GreenCMS/issues/113; https://github.com/GreenCMS/GreenCMS/issues/113
CVE: CVE-2018-19331
Published: 2018-11-17
Description: An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmssql-injection.html; https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmssql-injection.html
CVE: CVE-2018-19332
Published: 2018-11-17
Description: An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmscsrf.html; https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmscsrf.html
CVE: CVE-2018-19333
Published: 2018-11-17
Description: pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the sandbox) via vectors involving IPC_RMID shmctl calls, because reference counting is mishandled.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/google/gvisor/commit/0e277a39c8b6f905e289b75e8ad0594e6b3562ca; https://justi.cz/security/2018/11/14/gvisor-lpe.html; https://github.com/google/gvisor/commit/0e277a39c8b6f905e289b75e8ad0594e6b3562ca
CVE: CVE-2018-19340
Published: 2018-11-17
Description: Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xUhaw/CVE-Bins/tree/master/Guriddo%20Form%20PHP; https://github.com/0xUhaw/CVE-Bins/tree/master/Guriddo%20Form%20PHP
CVE: CVE-2018-19341
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at FoxitReader!std::basic_ostream >::operator<<+0x[PII_REDACTED]087906" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19342
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x[PII_REDACTED]00347a" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://github.com/Yan-1-20/Yan-1-20.github.io/tree/master/2018/11/08/2018/11/2018-11-08-2/index.html; https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08-2/
CVE: CVE-2018-19343
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read), obtain sensitive information, or possibly have unspecified other impact via a U3D sample because of a "Data from Faulting Address controls Code Flow starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]0f43ff" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19344
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address may be used as a return value starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]031a75" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19345
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation near NULL starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]053f8b" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19346
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]0d11ea" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19347
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]0d11bb" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/10/2018/11/2018-11-10/; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-19348
Published: 2018-11-17
Description: The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x[PII_REDACTED]12dff5" issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/08/2018/11/2018-11-08/index.html; https://github.com/Yan-1-20/Yan-1-20.github.io/blob/master/2018/11/10/2018/11/2018-11-10/index.html; https://yan-1-20.github.io/2018/11/08/2018/11/2018-11-08/
CVE: CVE-2018-19349
Published: 2018-11-17
Description: In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/Xmansec/seacms_vul/blob/master/SQL/README.md; https://github.com/Xmansec/seacms_vul/blob/master/SQL/README.md
CVE: CVE-2018-19350
Published: 2018-11-17
Description: In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Xmansec/seacms_vul/tree/master/XSS; https://github.com/Xmansec/seacms_vul/tree/master/XSS
CVE: CVE-2018-19351
Published: 2018-11-18
Description: Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconvert endpoints can execute JavaScript with access to the server API. In notebook/nbconvert/handlers.py, NbconvertFileHandler and NbconvertPostHandler do not set a Content Security Policy to prevent this.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rst; https://github.com/jupyter/notebook/commit/107a89fce5f413fb5728c1c5d2c7788e1fb17491; https://groups.google.com/forum/#%21topic/jupyter/hWzu2BSsplY
CVE: CVE-2018-19352
Published: 2018-11-18
Description: Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rst; https://github.com/jupyter/notebook/commit/288b73e1edbf527740e273fcc69b[PII_REDACTED]48; https://pypi.org/project/notebook/#history
CVE: CVE-2018-19353
Published: 2018-11-18
Description: The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-libansilove-1.0.0; https://github.com/ansilove/libansilove/issues/4; https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-libansilove-1.0.0
CVE: CVE-2008-7320
Published: 2018-11-18
Description: GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-255
References: https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774; https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/189774/comments/13; https://bugzilla.gnome.org/show_bug.cgi?id=551036
CVE: CVE-2018-19358
Published: 2018-11-18
Description: GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, a similar issue to CVE-2008-7320. One perspective is that this occurs because available D-Bus protection mechanisms (involving the busconfig and policy XML elements) are not used. NOTE: the vendor disputes this because, according to the security model, untrusted applications must not be allowed to access the user's session bus socket.
CVSS Score: 7.8 (HIGH)
References: https://bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1780365; https://bugzilla.redhat.com/show_bug.cgi?id=1652194#c8; https://github.com/sungjungk/keyring_crack
CVE: CVE-2018-19355
Published: 2018-11-19
Description: modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a php file via modules/orderfiles/upload.php with auptype equal to product (for upload destinations under modules/productfiles), order (for upload destinations under modules/files), or cart (for upload destinations under modules/cartfiles).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://ia-informatica.com/it/CVE-2018-19355; https://ia-informatica.com/it/CVE-2018-19355
CVE: CVE-2018-18519
Published: 2018-11-19
Description: BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://github.com/ilsani/rd/tree/master/security-advisories/bestxsoftware/cve-2018-18519; https://github.com/ilsani/rd/tree/master/security-advisories/bestxsoftware/cve-2018-18519
CVE: CVE-2018-15759
Published: 2018-11-19
Description: Pivotal Cloud Foundry On Demand Services SDK, versions prior to 0.24 contain an insecure method of verifying credentials. A remote unauthenticated malicious user may make many requests to the service broker with different credentials, allowing them to infer valid credentials and gain access to perform broker operations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-307
References: http://www.securityfocus.com/bid/106019; https://pivotal.io/security/cve-2018-15759; http://www.securityfocus.com/bid/106019
CVE: CVE-2018-15761
Published: 2018-11-19
Description: Cloud Foundry UAA release, versions prior to v64.0, and UAA, versions prior to 4.23.0, contains a validation error which allows for privilege escalation. A remote authenticated user may modify the url and content of a consent page to gain a token with arbitrary scopes that escalates their privileges.
CVSS Score: 9.9 (CRITICAL)
References: https://www.cloudfoundry.org/blog/cve-2018-15761/; https://www.cloudfoundry.org/blog/cve-2018-15761/
CVE: CVE-2018-17190
Published: 2018-11-19
Description: In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute code too. Note that this does not affect standalone clusters with authentication enabled. While the master host typically has less outbound access to other resources than a worker, the execution of code on the master is nevertheless unexpected.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105976; https://lists.apache.org/thread.html/341c3187f15cdb0d353261d2bfecf2324d56cb7db1339bfc7b30f6e5%40%3Cdev.spark.apache.org%3E; https://security.gentoo.org/glsa/201903-21
CVE: CVE-2018-1841
Published: 2018-11-19
Description: IBM Cloud Private 2.1.0 could allow a local user to obtain the CA Private Key due to it being world readable in boot/master node. IBM X-Force ID: 150901.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105980; https://exchange.xforce.ibmcloud.com/vulnerabilities/150901; https://www.ibm.com/support/docview.wss?uid=ibm10739851
CVE: CVE-2018-9207
Published: 2018-11-19
Description: Arbitrary file upload in jQuery Upload File <= 4.0.2
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.vapidlabs.com/advisory.php?v=206; http://www.vapidlabs.com/advisory.php?v=206
CVE: CVE-2018-9209
Published: 2018-11-19
Description: Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.vapidlabs.com/advisory.php?v=208; http://www.vapidlabs.com/advisory.php?v=208
CVE: CVE-2018-17906
Published: 2018-11-19
Description: Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials and no authentication within third party software may allow an attacker to compromise a component of the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-521, CWE-306, CWE-1188
References: http://www.securityfocus.com/bid/105875; https://ics-cert.us-cert.gov/advisories/ICSMA-18-312-01; http://www.securityfocus.com/bid/105875
CVE: CVE-2018-10099
Published: 2018-11-20
Description: Google Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with duplicated columns) can be used to obtain sensitive information about the content of bug reports.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://chromium.googlesource.com/infra/infra/+/0ff6b6453b6192987bd9240c1e872a7de5fb1313; https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549; https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/
CVE: CVE-2018-19334
Published: 2018-11-20
Description: Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with an unsupported axis) can be used to obtain sensitive information about the content of bug reports.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://chromium.googlesource.com/infra/infra/+/77ef00cb53d90c9d1f984eca434d828de5c167a5; https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549; https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/
CVE: CVE-2018-19335
Published: 2018-11-20
Description: Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected by CSRF, and calculations of download times (for requests with a crafted groupby value) can be used to obtain sensitive information about the content of bug reports.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://chromium.googlesource.com/infra/infra/+/e27936ef82d33a5f286e1f2f22817aa682f79e90; https://medium.com/%40luanherrera/xs-searching-googles-bug-tracker-to-find-out-vulnerable-source-code-50d8135b7549; https://www.reddit.com/r/netsec/comments/9yiidf/xssearching_googles_bug_tracker_to_find_out/ea2i7wz/
CVE: CVE-2018-19367
Published: 2018-11-20
Description: Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not created and 204 if it was already created. Attackers can set an admin password in the 404 case.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/lichti/shodan-portainer/; https://github.com/portainer/portainer/issues/2475; https://github.com/lichti/shodan-portainer/
CVE: CVE-2018-1779
Published: 2018-11-20
Description: IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not setting limits on JSON payload size. IBM X-Force ID: 148802.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.securityfocus.com/bid/105991; https://exchange.xforce.ibmcloud.com/vulnerabilities/148802; https://www.ibm.com/support/docview.wss?uid=ibm10733851
CVE: CVE-2018-17948
Published: 2018-11-20
Description: An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://support.microfocus.com/kb/doc.php?id=7023530; https://support.microfocus.com/kb/doc.php?id=7023530
CVE: CVE-2018-12037
Published: 2018-11-20
Description: An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "ATA max" mode), Samsung T3 and T5 portable drives, and Crucial MX100, MX200 and MX300 devices. Absence of a cryptographic link between the password and the Disk Encryption Key allows attackers with privileged access to SSD firmware full access to encrypted data.
CVSS Score: 4.0 (MEDIUM)
References: http://www.securityfocus.com/bid/105840; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2018-12038
Published: 2018-11-20
Description: An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption key.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-522
References: http://www.kb.cert.org/vuls/id/395981; http://www.securityfocus.com/bid/105841; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180028