deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6158
Published: 2018-04-13
Description: In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses.
CVSS Score: 6.5 (MEDIUM)
References: https://support.f5.com/csp/article/K19361245; https://support.f5.com/csp/article/K19361245
CVE: CVE-2018-10066
Published: 2018-04-13
Description: An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network (for example, at site-to-site tunnels).
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://janis-streib.de/2018/04/11/mikrotik-openvpn-security; https://janis-streib.de/2018/04/11/mikrotik-openvpn-security
CVE: CVE-2018-10087
Published: 2018-04-13
Description: The kernel_wait4 function in kernel/exit.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service by triggering an attempted use of the -INT_MIN value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd83c161fbcc5d8be637ab159c0de015cbff5ba4; http://www.securityfocus.com/bid/103774; https://github.com/torvalds/linux/commit/dd83c161fbcc5d8be637ab159c0de015cbff5ba4
CVE: CVE-2018-5506
Published: 2018-04-13
Description: In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.
CVSS Score: 9.8 (CRITICAL)
References: https://support.f5.com/csp/article/K65355492; https://support.f5.com/csp/article/K65355492
CVE: CVE-2018-5507
Published: 2018-04-13
Description: On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K52521791; https://support.f5.com/csp/article/K52521791
CVE: CVE-2018-5508
Published: 2018-04-13
Description: On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option.
CVSS Score: 5.9 (MEDIUM)
References: https://support.f5.com/csp/article/K10329515; https://support.f5.com/csp/article/K10329515
CVE: CVE-2018-5510
Published: 2018-04-13
Description: On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K77671456; https://support.f5.com/csp/article/K77671456
CVE: CVE-2018-5511
Published: 2018-04-13
Description: On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
CVSS Score: 7.2 (HIGH)
CWE: CWE-470
References: http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.html; https://support.f5.com/csp/article/K30500703; https://www.exploit-db.com/exploits/46600/
CVE: CVE-2018-6958
Published: 2018-04-13
Description: VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site scripting (XSS) attack. Exploitation of this issue may lead to the compromise of the vRA user's workstation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103752; http://www.securitytracker.com/id/1040676; http://www.vmware.com/security/advisories/VMSA-2018-0009.html
CVE: CVE-2018-6959
Published: 2018-04-13
Description: VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: http://www.securityfocus.com/bid/103752; http://www.securitytracker.com/id/1040676; http://www.vmware.com/security/advisories/VMSA-2018-0009.html
CVE: CVE-2016-9646
Published: 2018-04-13
Description: ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://ikiwiki.info/security/#cve-2016-9646; https://marc.info/?l=oss-security&m=[PII_REDACTED]1854&w=2; https://security-tracker.debian.org/tracker/CVE-2016-9646
CVE: CVE-2017-0356
Published: 2018-04-13
Description: A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/95420; https://ikiwiki.info/security/#cve-2017-0356; https://marc.info/?l=oss-security&m=[PII_REDACTED]4276&w=2
CVE: CVE-2017-0357
Published: 2018-04-13
Description: A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95432; https://gitlab.com/iucode-tool/iucode-tool/issues/3; https://security-tracker.debian.org/tracker/CVE-2017-0357
CVE: CVE-2017-0358
Published: 2018-04-13
Description: Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: http://www.openwall.com/lists/oss-security/2017/02/04/1; http://www.securityfocus.com/bid/95987; https://marc.info/?l=oss-security&m=[PII_REDACTED]9354&w=2
CVE: CVE-2017-0359
Published: 2018-04-13
Description: diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.
CVSS Score: 9.8 (CRITICAL)
References: https://bugs.debian.org/854723; https://security-tracker.debian.org/tracker/CVE-2017-0359; https://bugs.debian.org/854723
CVE: CVE-2017-0361
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039812; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T125177
CVE: CVE-2017-0362
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T150044; https://security-tracker.debian.org/tracker/CVE-2017-0362
CVE: CVE-2017-0363
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T109140; https://security-tracker.debian.org/tracker/CVE-2017-0363
CVE: CVE-2017-0364
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T122209; https://security-tracker.debian.org/tracker/CVE-2017-0364
CVE: CVE-2017-0365
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T144845; https://security-tracker.debian.org/tracker/CVE-2017-0365
CVE: CVE-2017-0366
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T151735; https://security-tracker.debian.org/tracker/CVE-2017-0366
CVE: CVE-2017-0367
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T161453; https://security-tracker.debian.org/tracker/CVE-2017-0367
CVE: CVE-2017-0368
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T156184; https://security-tracker.debian.org/tracker/CVE-2017-0368
CVE: CVE-2017-0369
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T108138; https://security-tracker.debian.org/tracker/CVE-2017-0369
CVE: CVE-2017-0370
Published: 2018-04-13
Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://phabricator.wikimedia.org/T48143; https://security-tracker.debian.org/tracker/CVE-2017-0370
CVE: CVE-2017-0372
Published: 2018-04-13
Description: Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://bugs.debian.org/861585; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html; https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html
CVE: CVE-2018-10096
Published: 2018-04-13
Description: joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/joyplus/joyplus-cms/issues/424; https://github.com/joyplus/joyplus-cms/issues/424
CVE: CVE-2018-6546
Published: 2018-04-13
Description: plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/securifera/CVE-2018-6546-Exploit/; https://www.exploit-db.com/exploits/44476/; https://www.securifera.com/advisories/CVE-2018-6546/
CVE: CVE-2018-6547
Published: 2018-04-13
Description: plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, contains an HTTP message parsing function that takes a user-defined path and writes non-user controlled data as SYSTEM to the file when the extract_files parameter is used. This occurs without properly authenticating the user.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-287
References: https://www.securifera.com/advisories/CVE-2018-6547/; https://www.securifera.com/advisories/CVE-2018-6547/
CVE: CVE-2018-4173
Published: 2018-04-13
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://support.apple.com/HT208692; https://support.apple.com/HT208693; https://support.apple.com/HT208692
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-9092.  Reason: This candidate is a reservation duplicate of CVE-2018-9092.  Notes: All CVE users should reference CVE-2018-9092 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-1686
Published: 2018-04-16
Description: MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2014/Mar/102; http://www.securityfocus.com/bid/66141; https://exchange.xforce.ibmcloud.com/vulnerabilities/91847
CVE: CVE-2014-2069
Published: 2018-04-16
Description: Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2014/Feb/219; http://www.securityfocus.com/bid/65740; https://exchange.xforce.ibmcloud.com/vulnerabilities/91463
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-16
Description: An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHBA-2018:1816; https://jenkins.io/security/advisory/2018-04-11/#SECURITY-754; https://access.redhat.com/errata/RHBA-2018:1816
CVE: CVE-2[PII_REDACTED]
Published: 2018-04-16
Description: A cross-site scripting vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in confirmationList.jelly and stopButton.jelly that allows attackers with Job/Configure and/or Job/Create permission to create an item name containing JavaScript that would be executed in another user's browser when that other user performs some UI actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-04-11/#SECURITY-759; https://jenkins.io/security/advisory/2018-04-11/#SECURITY-759
CVE: CVE-2018-10097
Published: 2018-04-16
Description: XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/146855/Domaintrader-2.5.3-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/146855/Domaintrader-2.5.3-Cross-Site-Scripting.html
CVE: CVE-2018-10100
Published: 2018-04-16
Description: Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securitytracker.com/id/1040836; https://codex.wordpress.org/Version_4.9.5; https://core.trac.wordpress.org/changeset/42892
CVE: CVE-2018-10101
Published: 2018-04-16
Description: Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/104350; http://www.securitytracker.com/id/1040836; https://codex.wordpress.org/Version_4.9.5
CVE: CVE-2018-10102
Published: 2018-04-16
Description: Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/103775; http://www.securitytracker.com/id/1040836; https://codex.wordpress.org/Version_4.9.5
CVE: CVE-2018-10106
Published: 2018-04-16
Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as demonstrated by a /getcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GROUP%3D1 request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md; https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE: CVE-2018-10107
Published: 2018-04-16
Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md; https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE: CVE-2018-10108
Published: 2018-04-16
Description: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md; https://github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.md
CVE: CVE-2018-10109
Published: 2018-04-16
Description: Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/435; https://www.exploit-db.com/exploits/44502/; https://github.com/monstra-cms/monstra/issues/435
CVE: CVE-2018-10111
Published: 2018-04-16
Description: An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/xiaoqx/pocs/tree/master/gegl; https://github.com/xiaoqx/pocs/tree/master/gegl
CVE: CVE-2018-10112
Published: 2018-04-16
Description: An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.gnome.org/show_bug.cgi?id=795249; https://github.com/xiaoqx/pocs/tree/master/gegl; https://bugzilla.gnome.org/show_bug.cgi?id=795249
CVE: CVE-2018-10113
Published: 2018-04-16
Description: An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/xiaoqx/pocs/tree/master/gegl; https://github.com/xiaoqx/pocs/tree/master/gegl
CVE: CVE-2018-10114
Published: 2018-04-16
Description: An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://bugzilla.gnome.org/show_bug.cgi?id=795248; https://github.com/xiaoqx/pocs/tree/master/gegl; https://bugzilla.gnome.org/show_bug.cgi?id=795248
CVE: CVE-2018-10117
Published: 2018-04-16
Description: An issue was discovered in idreamsoft iCMS V7.0.7. There is a CSRF vulnerability that can add an admin account via admincp.php?app=members&do=save&frame=iPHP.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/idreamsoft/iCMS/issues/20; https://github.com/idreamsoft/iCMS/issues/20
CVE: CVE-2018-10118
Published: 2018-04-16
Description: Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/436; https://www.exploit-db.com/exploits/44855/; https://github.com/monstra-cms/monstra/issues/436
CVE: CVE-2018-10119
Published: 2018-04-16
Description: sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other impact via a crafted document that uses the structured storage ole2 wrapper file format.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://access.redhat.com/errata/RHSA-2018:3054; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5747; https://gerrit.libreoffice.org/#/c/48751/
CVE: CVE-2018-10120
Published: 2018-04-16
Description: The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or possibly have unspecified other impact via a crafted document that contains a certain Microsoft Word record.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://access.redhat.com/errata/RHSA-2018:3054; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6173; https://gerrit.libreoffice.org/#/c/49486/
CVE: CVE-2018-10121
Published: 2018-04-16
Description: plugins/box/pages/pages.admin.php in Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the title section of an admin/index.php?id=pages&action=edit_page&name=error404 (aka Edit 404 page) action.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/437; https://github.com/monstra-cms/monstra/issues/437
CVE: CVE-2018-10122
Published: 2018-04-16
Description: QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/goodrain-apps/chanzhieps/issues/1; https://github.com/goodrain-apps/chanzhieps/issues/1