deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9557
Published: 2018-12-06
Description: In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2. Android ID: A-35385357.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763, CWE-908
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9558
Published: 2018-12-06
Description: In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112161557.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9559
Published: 2018-12-06
Description: In persist_set_key and other functions of cryptfs.cpp, there is a possible out-of-bounds write due to an uncaught error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-112731440.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9560
Published: 2018-12-06
Description: In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-79946737.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9562
Published: 2018-12-06
Description: In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-113164621.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9565
Published: 2018-12-06
Description: In readBytes of xltdecwbxml.c, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-16680558.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-190
References: http://www.securityfocus.com/bid/106065; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106065
CVE: CVE-2018-9566
Published: 2018-12-06
Description: In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-74249842.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/106147; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106147
CVE: CVE-2018-9567
Published: 2018-12-06
Description: On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different signing keys. This may lead to local escalation of privilege if people are relying on those fingerprints to determine what version of the OS the device is running, with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65543936.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/106064; https://source.android.com/security/bulletin/2018-12-01; http://www.securityfocus.com/bid/106064
CVE: CVE-2018-9568
Published: 2018-12-06
Description: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: https://access.redhat.com/errata/RHSA-2019:0512; https://access.redhat.com/errata/RHSA-2019:0514; https://access.redhat.com/errata/RHSA-2019:2696
CVE: CVE-2018-19908
Published: 2018-12-06
Description: An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped filename string is used to construct a shell command. This vulnerability can be abused by a malicious authenticated user to execute arbitrary commands by tweaking the original filename of the STIX import.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/MISP/MISP/commit/211ac0737281b65e7da160f0aac52f401a94e1a3; https://github.com/MISP/MISP/releases/tag/v2.4.99; https://www.exploit-db.com/exploits/46401/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-18925.  Reason: This candidate is a reservation duplicate of CVE-2018-18925.  Notes: All CVE users should reference CVE-2018-18925 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-19518.  Reason: This candidate is a reservation duplicate of CVE-2018-19518.  Notes: All CVE users should reference CVE-2018-19518 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-19911
Published: 2018-12-06
Description: FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or txtapi/system (or api/bg_system or txtapi/bg_system) query string on TCP port 8080, as demonstrated by an api/system?calc URI. This can also be exploited via CSRF. Alternatively, the default password of works for the freeswitch account can sometimes be used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77, CWE-352
References: https://github.com/iSafeBlue/freeswitch_rce/blob/master/README-en.md; https://github.com/iSafeBlue/freeswitch_rce/blob/master/freeswitch_rce.py; https://github.com/iSafeBlue/freeswitch_rce/blob/master/README-en.md
CVE: CVE-2018-18362
Published: 2018-12-06
Description: Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) exploit, which is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/106055; https://support.symantec.com/en_US/article.SYMSA1470.html; http://www.securityfocus.com/bid/106055
CVE: CVE-2018-19913
Published: 2018-12-06
Description: DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/86; https://www.exploit-db.com/exploits/45967/; https://github.com/domainmod/domainmod/issues/86
CVE: CVE-2018-19914
Published: 2018-12-06
Description: DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/87; https://www.exploit-db.com/exploits/46375/; https://github.com/domainmod/domainmod/issues/87
CVE: CVE-2018-19915
Published: 2018-12-06
Description: DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/domainmod/domainmod/issues/87; https://www.exploit-db.com/exploits/46376/; https://github.com/domainmod/domainmod/issues/87
CVE: CVE-2018-19919
Published: 2018-12-06
Description: Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pixelimity/pixelimity/issues/19; https://github.com/pixelimity/pixelimity/issues/19
CVE: CVE-2018-19921
Published: 2018-12-06
Description: Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/network-monitoring/help/read-me.html; https://www.manageengine.com/network-monitoring/help/read-me.html
CVE: CVE-2018-19922
Published: 2018-12-06
Description: Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd' URL parameter in a /urlfilter.cmd POST request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/logern5/c1000a_xss/blob/master/README.md; https://github.com/logern5/c1000a_xss/blob/master/README.md
CVE: CVE-2018-16522
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.
CVSS Score: 8.1 (HIGH)
CWE: CWE-824
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16523
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow division by zero in prvCheckOptions.
CVSS Score: 7.4 (HIGH)
CWE: CWE-369
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16524
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16525
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.
CVSS Score: 8.1 (HIGH)
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16526
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.
CVSS Score: 8.1 (HIGH)
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16527
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16528
Published: 2018-12-06
Description: Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_SecureConnect_Connect in AWS TLS connectivity modules.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16598
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-441
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16599
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of NBNS packets in prvTreatNBNS can be used for information disclosure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16600
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16601
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-191
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16602
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-16603
Published: 2018-12-06
Description: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-details/; https://blog.zimperium.com/freertos-tcpip-stack-vulnerabilities-put-wide-range-devices-risk-compromise-smart-homes-critical-infrastructure-systems/; https://github.com/aws/amazon-freertos/blob/v1.3.2/CHANGELOG.md
CVE: CVE-2018-19659
Published: 2018-12-06
Description: An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2018/Nov/64; http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html
CVE: CVE-2018-19660
Published: 2018-12-06
Description: An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2018/Nov/64; http://packetstormsecurity.com/files/150535/Moxa-NPort-W2x50A-2.1-OS-Command-Injection.html
CVE: CVE-2018-19665
Published: 2018-12-06
Description: The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html; http://www.openwall.com/lists/oss-security/2018/11/29/1; http://www.securityfocus.com/bid/106050
CVE: CVE-2018-19923
Published: 2018-12-06
Description: An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is member/member_email.php?action=edit CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Venan24/SCMS/issues/2; https://github.com/Venan24/SCMS/issues/2
CVE: CVE-2018-19924
Published: 2018-12-06
Description: An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Venan24/SCMS/issues/2; https://github.com/Venan24/SCMS/issues/2
CVE: CVE-2018-19925
Published: 2018-12-06
Description: An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. It has SQL injection via the member/member_order.php type parameter, related to the O_state parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Venan24/SCMS/issues/3; https://github.com/Venan24/SCMS/issues/3
CVE: CVE-2018-19926
Published: 2018-12-06
Description: Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://misteralfa-hack.blogspot.com/2018/12/zenitel-ip-stationweb-cross-site-script.html; https://misteralfa-hack.blogspot.com/2018/12/zenitel-ip-stationweb-cross-site-script.html
CVE: CVE-2018-19927
Published: 2018-12-06
Description: Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm_save_changes sip_nick parameter. The password of alphaadmin for the admin account may be used for authentication in some cases.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://misteralfa-hack.blogspot.com/2018/12/zenitel-ip-stationweb-cross-site-script.html; https://misteralfa-hack.blogspot.com/2018/12/zenitel-ip-stationweb-cross-site-script.html
CVE: CVE-2018-6755
Published: 2018-12-06
Description: Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
CVSS Score: 7.2 (HIGH)
CWE: CWE-732
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS102872; https://www.exploit-db.com/exploits/45961/; http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
CVE: CVE-2018-6756
Published: 2018-12-06
Description: Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.
CVSS Score: 7.8 (HIGH)
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS102872; https://www.exploit-db.com/exploits/45961/; http://service.mcafee.com/FAQDocument.aspx?&id=TS102872
CVE: CVE-2018-6757
Published: 2018-12-06
Description: Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
CVSS Score: 7.5 (HIGH)
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS102872; https://www.exploit-db.com/exploits/45961/; http://service.mcafee.com/FAQDocument.aspx?&id=TS102872