deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-15123
Published: 2018-08-13
Description: Insecure configuration storage in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows remote attacker perform new attack vectors and take under control device and smart home.
CVSS Score: 9.8 (CRITICAL)
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-003-zipato-zipabox-insecure-configuration-storage/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-003-zipato-zipabox-insecure-configuration-storage/
CVE: CVE-2018-15124
Published: 2018-08-13
Description: Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-004-zipato-zipabox-weak-hash-algorithm/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-004-zipato-zipabox-weak-hash-algorithm/
CVE: CVE-2018-15125
Published: 2018-08-13
Description: Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-005-zipato-zipabox-sensitive-information-disclosure/; https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/08/klcert-18-005-zipato-zipabox-sensitive-information-disclosure/
CVE: CVE-2018-6970
Published: 2018-08-13
Description: VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds read vulnerability in the Message Framework library. Successfully exploiting this issue may allow a less-privileged user to leak information from a privileged process running on a system where Horizon Connection Server, Horizon Agent or Horizon Client are installed. Note: This issue doesn't apply to Horizon 6, 7 Agents installed on Linux systems or Horizon Clients installed on non-Windows systems.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105031; http://www.securitytracker.com/id/1041430; https://www.vmware.com/security/advisories/VMSA-2018-0019.html
CVE: CVE-2016-4975
Published: 2018-08-14
Description: Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://www.securityfocus.com/bid/105093; https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975; https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975
CVE: CVE-2018-7077
Published: 2018-08-14
Description: A security vulnerability in HPE XP P9000 Command View Advanced Edition (CVAE) Device Manager (DevMgr 8.5.0-00 and prior to 8.6.0-00), Configuration Manager (CM 8.5.0-00 and prior to 8.6.0-00) could be exploited to allow local and remote unauthorized access to sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03860en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03860en_us
CVE: CVE-2018-7093
Published: 2018-08-14
Description: A security vulnerability in HPE Integrated Lights-Out 3 prior to v1.90, iLO 4 prior to v2.60, iLO 5 prior to v1.30, Moonshot Chassis Manager firmware prior to v1.58, and Moonshot Component Pack prior to v2.55 could be remotely exploited to create a denial of service.
CVSS Score: 8.6 (HIGH)
References: http://www.securitytracker.com/id/1041435; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03835en_us; http://www.securitytracker.com/id/1041435
CVE: CVE-2018-7094
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-5.0.0.0-22913(GA). The vulnerability may be exploited locally to allow disclosure of privileged information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03870en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03870en_us
CVE: CVE-2018-7095
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow access restriction bypass.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE: CVE-2018-7096
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE: CVE-2018-7097
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE: CVE-2018-7098
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow directory traversal.
CVSS Score: 8.4 (HIGH)
CWE: CWE-22
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE: CVE-2018-7099
Published: 2018-08-14
Description: A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03884en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03861en_us
CVE: CVE-2018-7100
Published: 2018-08-14
Description: A potential security vulnerability has been identified in HPE OfficeConnect 1810 Switch Series (HP 1810-24G - P.2.22 and previous versions, HP 1810-48G PK.1.34 and previous versions, HP 1810-8 v2 P.2.22 and previous versions). The vulnerability could allow local disclosure of sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securitytracker.com/id/1041445; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03858en_us; http://www.securitytracker.com/id/1041445
CVE: CVE-2018-0131
Published: 2018-08-14
Description: A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces. A successful exploit could allow the attacker to obtain the encrypted nonces. Cisco Bug IDs: CSCve77140.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326, CWE-326
References: http://www.securityfocus.com/bid/105074; http://www.securitytracker.com/id/1041539; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180813-rsa-nonce
CVE: CVE-2018-2441
Published: 2018-08-14
Description: Under certain conditions the SAP Change and Transport System (ABAP), SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49, 7.53 and 7.73, allows an attacker to transport information which would otherwise be restricted.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105090; https://launchpad.support.sap.com/#/notes/2671160; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2442
Published: 2018-08-14
Description: In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105078; https://launchpad.support.sap.com/#/notes/2407193; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2444
Published: 2018-08-14
Description: SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105087; https://launchpad.support.sap.com/#/notes/2621395; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2445
Published: 2018-08-14
Description: AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-918
References: http://www.securityfocus.com/bid/105064; https://launchpad.support.sap.com/#/notes/2630018; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2446
Published: 2018-08-14
Description: Admin tools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allow an unauthenticated user to read sensitive information (server name), hence leading to an information disclosure.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105089; https://launchpad.support.sap.com/#/notes/2633846; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2447
Published: 2018-08-14
Description: SAP BusinessObjects Business Intelligence (Launchpad Web Intelligence), version 4.2, allows an attacker to execute crafted InfoObject queries, exposing the CMS InfoObjects database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/105075; https://launchpad.support.sap.com/#/notes/2644154; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2448
Published: 2018-08-14
Description: Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105077; https://launchpad.support.sap.com/#/notes/2653846; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2449
Published: 2018-08-14
Description: SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying.
CVSS Score: 8.6 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105079; https://launchpad.support.sap.com/#/notes/2655250; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2450
Published: 2018-08-14
Description: SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/105063; https://launchpad.support.sap.com/#/notes/2660005; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-2451
Published: 2018-08-14
Description: XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-613
References: http://www.securityfocus.com/bid/105091; https://launchpad.support.sap.com/#/notes/2590705; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
CVE: CVE-2018-5392
Published: 2018-08-14
Description: mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: https://www.kb.cert.org/vuls/id/307144; https://www.kb.cert.org/vuls/id/307144
CVE: CVE-2018-14348
Published: 2018-08-14
Description: libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to disclosure of information.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2018-08/msg00023.html; https://access.redhat.com/errata/RHSA-2019:2047; https://bugzilla.suse.com/show_bug.cgi?id=1100365
CVE: CVE-2018-14424
Published: 2018-08-14
Description: The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local attacker to trigger a use-after-free via a specially crafted sequence of D-Bus method calls, resulting in a denial of service or potential code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105179; https://gitlab.gnome.org/GNOME/gdm/issues/401; https://lists.debian.org/debian-lts-announce/2018/09/msg00003.html
CVE: CVE-2018-14429
Published: 2018-08-14
Description: man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html; https://www.securityfocus.com/archive/1/542208/100/0/threaded; http://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html
CVE: CVE-2018-14888
Published: 2018-08-14
Description: inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/148871/MyBB-Thank-You-Like-3.0.0-Cross-Site-Scripting.html; https://community.mybb.com/mods.php?action=changelog&pid=360; https://github.com/mybbgroup/MyBB_Thank-you-like-plugin/pull/199
CVE: CVE-2018-14922
Published: 2018-08-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name field in the edit profile page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/148836/Monstra-Dev-3.0.4-Cross-Site-Scripting.html; https://indiancybersecuritysolutions.com/cve-2018-14922-cross-site-scripting/; https://www.exploit-db.com/exploits/45156/
CVE: CVE-2018-12537
Published: 2018-08-14
Description: In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-93, CWE-20
References: https://access.redhat.com/errata/RHSA-2018:2371; https://access.redhat.com/errata/RHSA-2018:3768; https://bugs.eclipse.org/bugs/show_bug.cgi?id=536038
CVE: CVE-2018-12539
Published: 2018-08-14
Description: In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.
CVSS Score: 7.8 (HIGH)
CWE: CWE-419, CWE-502
References: http://www.securityfocus.com/bid/105126; http://www.securitytracker.com/id/1041765; https://access.redhat.com/errata/RHSA-2018:2568
CVE: CVE-2018-3615
Published: 2018-08-14
Description: Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-203
References: http://support.lenovo.com/us/en/solutions/LEN-24163; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en; http://www.securityfocus.com/bid/105080
CVE: CVE-2018-3620
Published: 2018-08-14
Description: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-203
References: http://support.lenovo.com/us/en/solutions/LEN-24163; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en; http://www.securityfocus.com/bid/105080
CVE: CVE-2018-3646
Published: 2018-08-14
Description: Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
CVSS Score: 5.6 (MEDIUM)
References: http://support.lenovo.com/us/en/solutions/LEN-24163; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en; http://www.securityfocus.com/bid/105080
CVE: CVE-2018-3937
Published: 2018-08-14
Description: An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0604
CVE: CVE-2018-3938
Published: 2018-08-14
Description: An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0605
CVE: CVE-2018-13393
Published: 2018-08-15
Description: The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105155; https://jira.atlassian.com/browse/CONFSERVER-56282; http://www.securityfocus.com/bid/105155
CVE: CVE-2018-13394
Published: 2018-08-15
Description: The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105284; https://jira.atlassian.com/browse/CONFSERVER-56283; http://www.securityfocus.com/bid/105284
CVE: CVE-2018-6973
Published: 2018-08-15
Description: VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105094; http://www.securitytracker.com/id/1041491; https://www.vmware.com/security/advisories/VMSA-2018-0022.html
CVE: CVE-2018-1455
Published: 2018-08-15
Description: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/105135; https://exchange.xforce.ibmcloud.com/vulnerabilities/140090; https://www.ibm.com/support/docview.wss?uid=swg22016659
CVE: CVE-2018-0952
Published: 2018-08-15
Description: An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105048; http://www.securitytracker.com/id/1041466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0952
CVE: CVE-2018-10369
Published: 2018-08-15
Description: A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://medium.com/%40julianpedrobraga/router-hacking-destrinchando-o-elo-mais-fraco-de-uma-rede-4d0e7fcfbd9e; https://medium.com/%40julianpedrobraga/router-hacking-destrinchando-o-elo-mais-fraco-de-uma-rede-4d0e7fcfbd9e