deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9153
Published: 2018-04-16
Description: The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The component must be accessed directly by an administrator, or through CSRF.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://xz.aliyun.com/t/2277; https://xz.aliyun.com/t/2277
CVE: CVE-2018-9169
Published: 2018-04-16
Description: Z-BlogPHP 1.5.1 has XSS via the zb_users/plugin/AppCentre/plugin_edit.php app_id parameter. The component must be accessed directly by an administrator, or through CSRF.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://xz.aliyun.com/t/2277; https://xz.aliyun.com/t/2277
CVE: CVE-2018-0530
Published: 2018-04-16
Description: SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/9326; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0531
Published: 2018-04-16
Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/9349; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0532
Published: 2018-04-16
Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
CVSS Score: 2.7 (LOW)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/9378; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0533
Published: 2018-04-16
Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/9375; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0548
Published: 2018-04-16
Description: Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/9886; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0549
Published: 2018-04-16
Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/10058; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0550
Published: 2018-04-16
Description: Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/10056; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0551
Published: 2018-04-16
Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN65268217/index.html; https://support.cybozu.com/ja-jp/article/10211; http://jvn.jp/en/jp/JVN65268217/index.html
CVE: CVE-2018-0560
Published: 2018-04-16
Description: Hatena Bookmark App for iOS Version 3.0 to 3.70 allows remote attackers to spoof the address bar via vectors related to URL display.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://bookmark.hatenastaff.com/entry/2018/04/09/170000; http://jvn.jp/en/jp/JVN77753476/index.html; http://bookmark.hatenastaff.com/entry/2018/04/09/170000
CVE: CVE-2018-0561
Published: 2018-04-16
Description: Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN92220486/index.html; https://www.securebrain.co.jp/about/news/2018/04/180411.html; http://jvn.jp/en/jp/JVN92220486/index.html
CVE: CVE-2018-0562
Published: 2018-04-16
Description: Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN85056623/index.html; https://soundengine.jp/wordpress/penguin_press/press_release/4187/; http://jvn.jp/en/jp/JVN85056623/index.html
CVE: CVE-2018-10124
Published: 2018-04-16
Description: The kill_something_info function in kernel/signal.c in the Linux kernel before 4.13, when an unspecified architecture and compiler is used, might allow local users to cause a denial of service via an INT_MIN argument.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ea77014af0d6205b05503d1c7aac6eace11d473; http://www.securitytracker.com/id/1040684; https://github.com/torvalds/linux/commit/4ea77014af0d6205b05503d1c7aac6eace11d473
CVE: CVE-2018-5382
Published: 2018-04-16
Description: The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. This applies to any BKS keystore generated prior to BC 1.47. For situations where people need to create the files for legacy reasons a specific keystore type "BKS-V1" was introduced in 1.49. It should be noted that the use of "BKS-V1" is discouraged by the library authors and should only be used where it is otherwise safe to do so, as in where the use of a 16 bit checksum for the file integrity check is not going to cause a security issue in itself.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-327, CWE-354
References: http://www.securityfocus.com/bid/103453; https://access.redhat.com/errata/RHSA-2018:2927; https://www.bouncycastle.org/releasenotes.html
CVE: CVE-2016-9592
Published: 2018-04-16
Description: openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-460, CWE-399
References: http://www.securityfocus.com/bid/94991; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9592; http://www.securityfocus.com/bid/94991
CVE: CVE-2016-9593
Published: 2018-04-16
Description: foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-522, CWE-255
References: http://www.securityfocus.com/bid/94985; https://access.redhat.com/errata/RHSA-2018:0336; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9593
CVE: CVE-2018-10127
Published: 2018-04-16
Description: An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/gosea/xyhcms/issues/1; https://github.com/gosea/xyhcms/issues/1
CVE: CVE-2018-10128
Published: 2018-04-16
Description: An issue was discovered in XYHCMS 3.5. It has XSS via the test parameter to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gosea/xyhcms/issues/2; https://github.com/gosea/xyhcms/issues/2
CVE: CVE-2018-10132
Published: 2018-04-16
Description: PbootCMS v0.9.8 has CSRF via an admin.php/Message/mod/id/19.html?backurl=/index.php request, resulting in PHP code injection in the recontent parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/vQAQv/Request-CVE-ID-PoC/blob/master/PbootCMS/v0.9.8/CSRF.md; https://github.com/vQAQv/Request-CVE-ID-PoC/blob/master/PbootCMS/v0.9.8/CSRF.md
CVE: CVE-2018-10133
Published: 2018-04-16
Description: PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \apps\home\controller\ParserController.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/vQAQv/Request-CVE-ID-PoC/blob/master/PbootCMS/v0.9.8/Getshll.md; https://github.com/vQAQv/Request-CVE-ID-PoC/blob/master/PbootCMS/v0.9.8/Getshll.md
CVE: CVE-2018-3846
Published: 2018-04-16
Description: In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K46I2MFPCEOGC5LLDXZSWPB3EBPON3KA/; https://security.gentoo.org/glsa/202101-24; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0529
CVE: CVE-2018-3848
Published: 2018-04-16
Description: In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K46I2MFPCEOGC5LLDXZSWPB3EBPON3KA/; https://security.gentoo.org/glsa/202101-24; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0531
CVE: CVE-2018-3849
Published: 2018-04-16
Description: In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can deliver an FIT image to trigger this vulnerability and potentially gain code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K46I2MFPCEOGC5LLDXZSWPB3EBPON3KA/; https://security.gentoo.org/glsa/202101-24; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0531
CVE: CVE-2017-10140
Published: 2018-04-16
Description: Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berkeley DB 2.x and later, related to reading settings from DB_CONFIG in the current directory.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/oss-sec/2017/q3/285; http://www.postfix.org/announcements/postfix-3.2.2.html; https://access.redhat.com/errata/RHSA-2019:0366
CVE: CVE-2015-1952
Published: 2018-04-16
Description: Cross-site scripting (XSS) vulnerability in IBM AppScan Enterprise Edition 9.0.x before 9.0.2 iFix 001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 103416.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21883124; https://exchange.xforce.ibmcloud.com/vulnerabilities/103416; http://www-01.ibm.com/support/docview.wss?uid=swg21883124
CVE: CVE-2018-0737
Published: 2018-04-16
Description: The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/103766; http://www.securitytracker.com/id/1040685
CVE: CVE-2018-10135
Published: 2018-04-16
Description: iScripts eSwap v2.4 has Reflected XSS via the "catwiseproducts.php" catid parameter in the User Panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/vVN00qRh; https://pastebin.com/vVN00qRh
CVE: CVE-2018-10136
Published: 2018-04-16
Description: iScripts UberforX 2.2 has Stored XSS in the "manage_settings" section of the Admin Panel via a value field to the /cms?section=manage_settings&action=edit URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/TCEWRZEd; https://pastebin.com/TCEWRZEd
CVE: CVE-2018-10137
Published: 2018-04-16
Description: iScripts UberforX 2.2 has CSRF in the "manage_settings" section of the Admin Panel via the /cms?section=manage_settings&action=edit URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://pastebin.com/TCEWRZEd; https://pastebin.com/TCEWRZEd
CVE: CVE-2016-9093
Published: 2018-04-16
Description: A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input. SEP 14.0 and later are not impacted by this issue. A non-admin user would need to be able to save an executable file to disk and then be able to successfully run that file. If properly constructed, the file could access the driver interface and potentially manipulate certain system calls. On all 32-bit systems and in most cases on 64-bit systems, this will result in a denial of service that will crash the system. In very narrow circumstances, and on 64-bit systems only, this could allow the user to run arbitrary code on the local machine with kernel-level privileges. This could result in a non-privileged user gaining privileged access on the local machine.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96294; http://www.securitytracker.com/id/1037961; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
CVE: CVE-2016-9094
Published: 2018-04-16
Description: Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file metadata to be interpreted and evaluated as a formula. Successful exploitation of an attack of this type requires considerable direct user-interaction from the user exporting and then opening the log files on the intended target client.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96298; http://www.securitytracker.com/id/1037961; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170306_00
CVE: CVE-2017-6323
Published: 2018-04-16
Description: The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts.
CVSS Score: 8.0 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/98621; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170628_00; http://www.securityfocus.com/bid/98621
CVE: CVE-2018-10138
Published: 2018-04-16
Description: The CATALooK.netStore module through 7.2.8 for DNN (formerly DotNetNuke) allows XSS via the /ViewEditGoogleMaps.aspx PortalID or CATSkin parameter, or the /ImageViewer.aspx link or desc parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2018-10070
Published: 2018-04-16
Description: A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The router will reboot after 10 minutes, logging a "router was rebooted without proper shutdown" message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://packetstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of-Service.html; https://www.exploit-db.com/exploits/44450/; http://packetstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of-Service.html
CVE: CVE-2018-10169
Published: 2018-04-16
Description: ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a class instance argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection. This plugin will execute code in the context of the SYSTEM user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-017.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-017.md
CVE: CVE-2018-10170
Published: 2018-04-16
Description: NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "nordvpn-service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a class instance argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/VerSprite/research/blob/master/advisories/VS-2018-018.md; https://github.com/VerSprite/research/blob/master/advisories/VS-2018-018.md
CVE: CVE-2018-10172
Published: 2018-04-16
Description: 7-Zip through 18.01 on Windows implements the "Large memory pages" option by calling the LsaAddAccountRights function to add the SeLockMemoryPrivilege privilege to the user's account, which makes it easier for attackers to bypass intended access restrictions by using this privilege in the context of a sandboxed process. Note: This has been disputed by 3rd parties who argue this is a valid feature of Windows.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://sourceforge.net/p/sevenzip/discussion/45797/thread/e730c709/?limit=25&page=1#b240; https://sourceforge.net/p/sevenzip/discussion/45797/thread/e730c709/?limit=25&page=1#b240
CVE: CVE-2018-10177
Published: 2018-04-16
Description: In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/ImageMagick/ImageMagick/issues/1095; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html; https://usn.ubuntu.com/3681-1/
CVE: CVE-2018-10178
Published: 2018-04-17
Description: The FromDocToPDF extension before 13.611.13.2303 for Chrome allows remote attackers to discover visited web sites via vectors involving a mostVisitedSites command.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.chromium.org/p/project-zero/issues/detail?id=1557; https://bugs.chromium.org/p/project-zero/issues/detail?id=1557
CVE: CVE-2017-18102
Published: 2018-04-17
Description: The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in nested wiki markup.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-67108; https://jira.atlassian.com/browse/RNDR-153; https://jira.atlassian.com/browse/JRASERVER-67108
CVE: CVE-2018-5190
Published: 2018-04-17
Description: PicturesPro Photo Cart 6 and 7 before Security-Patch-2018-B allows remote attackers to access arbitrary customer accounts via a modified cookie, related to pc_head.php, pc_login.php, and pc_login_page.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-565
References: https://brianmccarthytech.blogspot.co.nz/2018/04/cve-2018-5190.html; https://www.picturespro.com/support-forum/photo-cart/?t=38346-security-patch-for-photo-cart-2018; https://brianmccarthytech.blogspot.co.nz/2018/04/cve-2018-5190.html
CVE: CVE-2017-12701
Published: 2018-04-17
Description: BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which may allow an authenticated attacker to crash the CPAP's Wi-Fi module resulting in a denial-of-service condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/100354; https://ics-cert.us-cert.gov/advisories/ICSMA-17-227-01; http://www.securityfocus.com/bid/100354
CVE: CVE-2017-6020
Published: 2018-04-17
Description: Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/97055; https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01; https://www.exploit-db.com/exploits/42885/
CVE: CVE-2017-9634
Published: 2018-04-17
Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/100097; https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01; http://www.securityfocus.com/bid/100097
CVE: CVE-2017-9636
Published: 2018-04-17
Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains five code sections which may be exploited to overwrite the heap. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/100097; https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01; http://www.securityfocus.com/bid/100097
CVE: CVE-2017-9638
Published: 2018-04-17
Description: Mitsubishi E-Designer, Version 7.52 Build 344 contains six code sections which may be exploited to overwrite the stack. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/100097; https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01; http://www.securityfocus.com/bid/100097