deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6480
Published: 2018-01-31
Description: A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature (which, for example, helped with loop prevention). ccnl_fwd_handleInterest assumes that the union member s is of type ccnl_pktdetail_ndntlv_s. However, if the type is in fact struct ccnl_pktdetail_ccntlv_s or struct ccnl_pktdetail_iottlv_s, the memory at that point is either uninitialised or points to data that is not a nonce, which renders the code using the local variable nonce pointless. A later nonce check is insufficient.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: https://github.com/cn-uofbasel/ccn-lite/issues/159; https://github.com/cn-uofbasel/ccn-lite/issues/159
CVE: CVE-2018-6374
Published: 2018-01-31
Description: The GUI component (aka PulseUI) in Pulse Secure Desktop Linux clients before PULSE5.2R9.2 and 5.3.x before PULSE5.3R4.2 does not perform strict SSL Certificate Validation. This can lead to the manipulation of the Pulse Connection set.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620; http://www.securityfocus.com/bid/102908; http://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43620
CVE: CVE-2017-16911
Published: 2018-01-31
Description: The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102156; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114
CVE: CVE-2017-16912
Published: 2018-01-31
Description: The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102150; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114
CVE: CVE-2017-16913
Published: 2018-01-31
Description: The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102150; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114
CVE: CVE-2017-16914
Published: 2018-01-31
Description: The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/102150; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-01
Description: A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2[PII_REDACTED].
CVSS Score: 7.8 (HIGH)
CWE: CWE-772
References: http://seclists.org/oss-sec/2017/q4/385; http://www.openwall.com/lists/oss-security/2019/06/27/7; http://www.openwall.com/lists/oss-security/2019/06/28/1
CVE: CVE-2[PII_REDACTED]
Published: 2018-02-01
Description: A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environment variable. Please note that many versions of glibc are not vulnerable to this issue if patched for CVE-2[PII_REDACTED].
CVSS Score: 7.0 (HIGH)
CWE: CWE-119
References: http://seclists.org/oss-sec/2017/q4/385; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.exploit-db.com/exploits/43331/
CVE: CVE-2017-16861
Published: 2018-02-01
Description: It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur. An attacker who can access the web interface of Fisheye or Crucible or who hosts a website that a user who can access the web interface of Fisheye or Crucible visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Fisheye or Crucible. All versions of Fisheye and Crucible before 4.4.5 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.2 (the fixed version for 4.5.x) are affected by this vulnerability.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102971; https://confluence.atlassian.com/x/h-QyO; https://confluence.atlassian.com/x/iPQyO
CVE: CVE-2018-6484
Published: 2018-02-01
Description: In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/gdraheim/zziplib/issues/14; https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html; https://usn.ubuntu.com/3699-1/
CVE: CVE-2018-6470
Published: 2018-02-01
Description: Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/dignajar/nibbleblog/issues/120; https://github.com/dignajar/nibbleblog/issues/120
CVE: CVE-2018-0508
Published: 2018-02-01
Description: Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://dbit.web.fc2.com/; https://jvn.jp/en/jp/JVN91393903/index.html; http://dbit.web.fc2.com/
CVE: CVE-2018-0509
Published: 2018-02-01
Description: Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://dbit.web.fc2.com/; https://jvn.jp/en/jp/JVN91393903/index.html; http://dbit.web.fc2.com/
CVE: CVE-2018-0510
Published: 2018-02-01
Description: Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of service) attacks via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://dbit.web.fc2.com/; https://jvn.jp/en/jp/JVN91393903/index.html; http://dbit.web.fc2.com/
CVE: CVE-2018-0511
Published: 2018-02-01
Description: Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN30636823/index.html; https://plugins.trac.wordpress.org/changeset/1802137/#file1; https://jvn.jp/en/jp/JVN30636823/index.html
CVE: CVE-2018-6186
Published: 2018-02-01
Description: Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/102915; http://www.securitytracker.com/id/1040440; https://gist.github.com/buxu/04ce809eb8b32ef57e232eab5e61f023
CVE: CVE-2018-6485
Published: 2018-02-01
Description: An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: http://bugs.debian.org/878159; http://www.securityfocus.com/bid/102912; https://access.redhat.com/errata/RHBA-2019:0327
CVE: CVE-2011-4068
Published: 2018-02-01
Description: The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://packetfence.org/bugs/changelog_page.php?version_id=35; https://packetfence.org/bugs/view.php?id=1293; https://packetfence.org/bugs/changelog_page.php?version_id=35
CVE: CVE-2011-4069
Published: 2018-02-01
Description: html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-90
References: https://packetfence.org/bugs/changelog_page.php?version_id=35; https://packetfence.org/bugs/view.php?id=1293; https://packetfence.org/bugs/changelog_page.php?version_id=35
CVE: CVE-2013-7435
Published: 2018-02-01
Description: The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retrieval in fm_IDL.xml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://evergreen-ils.org/downloads/ChangeLog-2.5.8-2.5.9; http://evergreen-ils.org/downloads/ChangeLog-2.6.6-2.6.7; http://evergreen-ils.org/downloads/ChangeLog-2.7.3-2.7.4
CVE: CVE-2014-3005
Published: 2018-02-01
Description: XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134885.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134909.html; http://seclists.org/fulldisclosure/2014/Jun/87
CVE: CVE-2014-3244
Published: 2018-02-01
Description: XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in an XML request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://seclists.org/fulldisclosure/2014/Jun/92; http://www.securityfocus.com/bid/68102; https://web.archive.org/web/[PII_REDACTED]2132/http://www.pnigos.com/?p=294
CVE: CVE-2014-3519
Published: 2018-02-01
Description: The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAP_DAC_READ_SEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the file_handle structure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2014/06/24/16; http://www.securityfocus.com/bid/68171; https://help.virtuozzo.com/customer/en/portal/articles/2522783-parallels-cloud-server-6-0-update-6-hotfix-8-6-0-6-2004-
CVE: CVE-2014-3752
Published: 2018-02-01
Description: The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html; http://seclists.org/fulldisclosure/2014/Jun/125; http://www.securityfocus.com/archive/1/532559/100/0/threaded
CVE: CVE-2014-9502
Published: 2018-02-01
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2015/01/04/6; https://exchange.xforce.ibmcloud.com/vulnerabilities/99655; https://www.drupal.org/node/2394979
CVE: CVE-2014-9503
Published: 2018-02-01
Description: The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/01/04/6; https://exchange.xforce.ibmcloud.com/vulnerabilities/99656; https://www.drupal.org/node/2394979
CVE: CVE-2014-9504
Published: 2018-02-01
Description: The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2015/01/04/6; https://exchange.xforce.ibmcloud.com/vulnerabilities/99657; https://www.drupal.org/node/2394979
CVE: CVE-2015-2203
Published: 2018-02-01
Description: Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a controller in the IDL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://evergreen-ils.org/downloads/ChangeLog-2.5.8-2.5.9; http://evergreen-ils.org/downloads/ChangeLog-2.6.6-2.6.7; http://evergreen-ils.org/downloads/ChangeLog-2.7.3-2.7.4
CVE: CVE-2015-2204
Published: 2018-02-01
Description: Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ou_setting.ancestor_default to enforce view_perm when no auth token is provided.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://evergreen-ils.org/downloads/ChangeLog-2.5.8-2.5.9; http://evergreen-ils.org/downloads/ChangeLog-2.6.6-2.6.7; http://evergreen-ils.org/downloads/ChangeLog-2.7.3-2.7.4
CVE: CVE-2018-1192
Published: 2018-02-01
Description: In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3, the SessionID is logged in audit event logs. An attacker can use the SessionID to impersonate a logged-in user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://www.cloudfoundry.org/blog/cve-2018-1192/; https://www.cloudfoundry.org/blog/cve-2018-1192/
CVE: CVE-2017-3160
Published: 2018-02-01
Description: After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity of this issue is high due to the fact that the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue should install version 6.1.2 or higher of Cordova-Android. If developers are unable to install the latest version, this vulnerability can easily be mitigated by setting the CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL environment variable to https://services.gradle.org/distributions/gradle-2.14.1-all.zip
CVSS Score: 7.4 (HIGH)
References: http://www.securityfocus.com/bid/95838; https://cordova.apache.org/announcements/2017/01/27/android-612.html; https://www.oracle.com/security-alerts/cpuapr2020.html
CVE: CVE-2017-2293
Published: 2018-02-01
Description: Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy.
CVSS Score: 4.9 (MEDIUM)
References: https://puppet.com/security/cve/cve-2017-2293; https://puppet.com/security/cve/cve-2017-2293
CVE: CVE-2017-2296
Published: 2018-02-01
Description: In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://puppet.com/security/cve/cve-2017-2296; https://puppet.com/security/cve/cve-2017-2296
CVE: CVE-2017-2297
Published: 2018-02-01
Description: Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://puppet.com/security/cve/cve-2017-2297; https://puppet.com/security/cve/cve-2017-2297
CVE: CVE-2018-6519
Published: 2018-02-02
Description: The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://simplesamlphp.org/security/201801-01; https://www.debian.org/security/2018/dsa-4127; https://simplesamlphp.org/security/201801-01
CVE: CVE-2018-6520
Published: 2018-02-02
Description: SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://simplesamlphp.org/security/201801-02; https://simplesamlphp.org/security/201801-02
CVE: CVE-2018-6521
Published: 2018-02-02
Description: The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.
CVSS Score: 9.8 (CRITICAL)
References: https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html; https://simplesamlphp.org/security/201801-03; https://www.debian.org/security/2018/dsa-4127
CVE: CVE-2018-6522
Published: 2018-02-02
Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKRgFtXp_0x220408; http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE: CVE-2018-6523
Published: 2018-02-02
Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x22045c; http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE: CVE-2018-6524
Published: 2018-02-02
Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x220c20; http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE: CVE-2018-6525
Published: 2018-02-02
Description: In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf; https://github.com/ZhiyuanWang-Chengdu-Qihoo360/nProtectAntivirus_POC/tree/master/TKFsAv_0x220458; http://inca.co.kr/include_file/pdf_down/nProtect%20AVS%20V4%20Vulnerability%20Response%20Release%20Notes.pdf
CVE: CVE-2017-18120
Published: 2018-02-02
Description: A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2[PII_REDACTED].
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878739; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881120; https://github.com/kohler/gifsicle/commit/118a46090c50829dc543179019e6140e1235f909
CVE: CVE-2018-6526
Published: 2018-02-02
Description: view_all_bug_page.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filter_ensure_valid_filter call in current_user_api.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103065; https://github.com/mantisbt/mantisbt/commit/de686a9e6d8c909485b87ca09c8f912bf83082f2; https://mantisbt.org/bugs/view.php?id=23921
CVE: CVE-2018-6536
Published: 2018-02-02
Description: An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script executes a "kill `cat /pathname/icinga2.pid`" command, as demonstrated by icinga2.init.d.cmake.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://github.com/Icinga/icinga2/issues/5991; https://github.com/Icinga/icinga2/issues/5991
CVE: CVE-2018-6537
Published: 2018-02-02
Description: A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9121.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/43936/; https://www.exploit-db.com/exploits/43936/
CVE: CVE-2018-6540
Published: 2018-02-02
Description: In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/gdraheim/zziplib/issues/15; https://lists.debian.org/debian-lts-announce/2020/06/msg00029.html; https://usn.ubuntu.com/3699-1/