deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6190
Published: 2018-01-24
Description: Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/146032/Netis-WF2419-3.2.41381-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/43981/; https://packetstormsecurity.com/files/146032/Netis-WF2419-3.2.41381-Cross-Site-Scripting.html
CVE: CVE-2018-6191
Published: 2018-01-24
Description: The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://git.ghostscript.com/?p=mujs.git%3Ba=commit%3Bh=25821e6d74fab5fcc200fe5e818362e03e114428; http://www.securityfocus.com/bid/102840; https://bugs.ghostscript.com/show_bug.cgi?id=698920
CVE: CVE-2018-6192
Published: 2018-01-24
Description: In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a crafted pdf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102822; https://bugs.ghostscript.com/show_bug.cgi?id=698916; https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=5e411a99604ff6be5db9e273ee[PII_REDACTED]3299
CVE: CVE-2018-6193
Published: 2018-01-24
Description: A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/sshipway/routers2/issues/1; https://www.exploit-db.com/exploits/44216/; https://github.com/sshipway/routers2/issues/1
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manage_employee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Stored XSS vulnerability, which leads to remote code executing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://singsip.wixsite.com/singsip/vuln; https://www.exploit-db.com/exploits/44318/; http://singsip.wixsite.com/singsip/vuln
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2 trailer could mess up future trailers since the stored size was one byte less than required. The problem is that the code that creates HTTP/1-like headers from the HTTP/2 trailer data once appended a string like `:` to the target buffer, while this was recently changed to `: ` (a space was added after the colon) but the following math wasn't updated correspondingly. When accessed, the data is read out of bounds and causes either a crash or that the (too large) data gets passed to client write. This could lead to a denial-of-service situation or an information disclosure if someone has a service that echoes back or uses the trailers for something.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: http://www.securitytracker.com/id/1040273; https://access.redhat.com/errata/RHSA-2019:1543; https://curl.haxx.se/docs/adv_2018-824a.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2022/04/27/4; http://www.securitytracker.com/id/1040274; https://access.redhat.com/errata/RHBA-2019:0327
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of these agents now requires the 'Run Scripts' permission typically only granted to administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jenkins.io/security/advisory/2017-12-06/; https://jenkins.io/security/advisory/2017-12-06/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related settings not being set to their usual strict default.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://jenkins.io/security/advisory/2017-12-14/; https://jenkins.io/security/advisory/2017-12-14/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please wait while Jenkins is getting ready to work' message but Cross-Site Request Forgery (CSRF) protection may not yet be effective.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2017-12-14/; https://jenkins.io/security/advisory/2017-12-14/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-24
Description: GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/102796; https://electronjs.org/blog/protocol-handler-fix; https://github.com/electron/electron/releases/tag/v1.8.2-beta.4
CVE: CVE-2018-1047
Published: 2018-01-24
Description: A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-22
References: https://access.redhat.com/errata/RHSA-2018:1247; https://access.redhat.com/errata/RHSA-2018:1248; https://access.redhat.com/errata/RHSA-2018:1249
CVE: CVE-2018-1048
Published: 2018-01-24
Description: It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22, CWE-116
References: https://access.redhat.com/errata/RHSA-2018:0478; https://access.redhat.com/errata/RHSA-2018:0479; https://access.redhat.com/errata/RHSA-2018:0480
CVE: CVE-2017-15546
Published: 2018-01-25
Description: The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerability to read any unencrypted data from the database.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Jan/81; http://www.securityfocus.com/bid/102838; http://www.securitytracker.com/id/1040268
CVE: CVE-2018-5443
Published: 2018-01-25
Description: A SQL Injection issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. WebAccess/SCADA does not properly sanitize its inputs for SQL commands.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://www.securityfocus.com/bid/102781; https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01; http://www.securityfocus.com/bid/102781
CVE: CVE-2018-5445
Published: 2018-01-25
Description: A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.2_20170817. An attacker has read access to files within the directory structure of the target device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/102781; https://ics-cert.us-cert.gov/advisories/ICSA-18-023-01; http://www.securityfocus.com/bid/102781
CVE: CVE-2018-6196
Published: 2018-01-25
Description: w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feed_table_block_tag function in table.c does not prevent a negative indent value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html; https://github.com/tats/w3m/commit/8354763b90490d4105695df52674d0fcef823e92; https://github.com/tats/w3m/issues/88
CVE: CVE-2018-6197
Published: 2018-01-25
Description: w3m through 0.5.3 is prone to a NULL pointer dereference flaw in formUpdateBuffer in form.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html; http://www.securityfocus.com/bid/102846; https://github.com/tats/w3m/commit/7fdc83b0364005a0b5ed869230dd81752ba022e8
CVE: CVE-2018-6198
Published: 2018-01-25
Description: w3m through 0.5.3 does not properly handle temporary files when the ~/.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00028.html; http://www.securityfocus.com/bid/102855; https://bugs.debian.org/888097
CVE: CVE-2018-6200
Published: 2018-01-25
Description: vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-6201
Published: 2018-01-25
Description: In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020E0 or 0x830020E4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x830020E0_0x830020E4; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x830020E0_0x830020E4
CVE: CVE-2018-6202
Published: 2018-01-25
Description: In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x830020F8.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x830020F8; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x830020F8
CVE: CVE-2018-6203
Published: 2018-01-25
Description: In eScan Antivirus 14.0.1400.2029, the driver file (econceal.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x8300210C; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/EscanAV_POC/tree/master/0x8300210C
CVE: CVE-2018-6204
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (SDActMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/SDActMon; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/SDActMon
CVE: CVE-2018-6205
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x220009; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x220009
CVE: CVE-2018-6206
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x220011; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x220011
CVE: CVE-2018-6207
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_220019; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_220019
CVE: CVE-2018-6208
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22000d.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x22000d; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxProtector32_0x22000d
CVE: CVE-2018-6209
Published: 2018-01-25
Description: In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxCryptMon.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxCryptMon; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/MaxSecureAntivirus_POC/tree/master/MaxCryptMon
CVE: CVE-2018-5967
Published: 2018-01-25
Description: Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html; https://packetstormsecurity.com/files/145513/Netis-WF2419-HTML-Injection.html
CVE: CVE-2018-6217
Published: 2018-01-25
Description: The WStr::_alloc_iostr_data() function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 allows remote attackers to cause a denial of service (application crash) via a crafted (a) web page, (b) office document, or (c) .rtf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180122; https://github.com/Khwarezmia/WPS_POC/tree/master/wps_20180122
CVE: CVE-2018-6308
Published: 2018-01-25
Description: Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the default_currency_name parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate parameter to modules\Contacts\ShowDuplicates.php, the mergecur parameter to modules\Currencies\index.php and modules\Opportunities\Opportunity.php, and the load_signed_id parameter to modules\Documents\Document.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.defensecode.com/advisories/DC-2018-01-011_SugarCRM_Community_Edition_Advisory.pdf; http://www.defensecode.com/advisories/DC-2018-01-011_SugarCRM_Community_Edition_Advisory.pdf
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2018-4835
Published: 2018-01-25
Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with network access to the TeleControl Server Basic's port 8000/tcp could bypass the authentication mechanism and read limited information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-200
References: http://www.securityfocus.com/bid/102894; http://www.securityfocus.com/bid/102904; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf
CVE: CVE-2018-4836
Published: 2018-01-25
Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/102897; http://www.securityfocus.com/bid/102904; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf
CVE: CVE-2018-4837
Published: 2018-01-25
Description: A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102819; http://www.securityfocus.com/bid/102904; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-651454.pdf
CVE: CVE-2017-4962
Published: 2018-01-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-25
Description: ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a division by zero in the JFIF decode handling resulting denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65; https://www.impulseadventure.com/photo/jpeg-snoop-history.html; https://github.com/ImpulseAdventure/JPEGsnoop/commit/b4e458612d4294e0cfe01dbf1c0b09a07a8133a4#diff-cf9182aecc9d630e8db2e0e35f1eec65
CVE: CVE-2017-15365
Published: 2018-01-25
Description: sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and replicate data definition language (DDL) statements to cluster nodes by leveraging incorrect ordering of DDL replication and ACL checking.
CVSS Score: 8.8 (HIGH)
References: https://access.redhat.com/errata/RHSA-2019:1258; https://bugzilla.redhat.com/show_bug.cgi?id=1524234; https://github.com/MariaDB/server/commit/0b5a5258abbeaf8a0c3a18c7e753699787fdf46e
CVE: CVE-2018-5748
Published: 2018-01-25
Description: qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/102825; https://access.redhat.com/errata/RHSA-2018:1396; https://access.redhat.com/errata/RHSA-2018:1929
CVE: CVE-2018-5954
Published: 2018-01-25
Description: phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://packetstormsecurity.com/files/146037/PHPFreeChat-1.7-Denial-Of-Service.html; https://www.exploit-db.com/exploits/43852/; http://packetstormsecurity.com/files/146037/PHPFreeChat-1.7-Denial-Of-Service.html
CVE: CVE-2018-5963
Published: 2018-01-25
Description: CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/146033/CMS-Made-Simple-2.2.5-Persistent-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Jan/80; https://kyawminthein901497298.wordpress.com/2018/01/22/the-journey-begins/
CVE: CVE-2018-5964
Published: 2018-01-25
Description: CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/146034/CMS-Made-Simple-2.2.5-moduleinterface.php-title-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Jan/82; https://kyawminthein901497298.wordpress.com/2018/01/22/cms-made-simple-2-2-5-reflected-cross-site-scripting/
CVE: CVE-2018-5965
Published: 2018-01-25
Description: CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/146035/CMS-Made-Simple-2.2.5-moduleinterface.php-m1_errors-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Jan/83; https://kyawminthein901497298.wordpress.com/2018/01/22/cms-made-simple-2-2-5-reflected-cross-site-scripting/
CVE: CVE-2018-5973
Published: 2018-01-25
Description: SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43870/; http://packetstormsecurity.com/files/146071/Professional-Local-Directory-Script-1.0-SQL-Injection.html
CVE: CVE-2018-5997
Published: 2018-01-25
Description: An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-434
References: https://www.exploit-db.com/exploits/43871/; https://www.exploit-db.com/exploits/43871/
CVE: CVE-2[PII_REDACTED]
Published: 2018-01-25
Description: In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new `File` objects from strings. This allowed reading arbitrary files on the Jenkins master file system. Such a type coercion is now subject to sandbox protection and considered to be a call to the `new File(String)` constructor for the purpose of in-process script approval.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2017-12-11/; https://jenkins.io/security/advisory/2017-12-11/