deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-3858
Published: 2018-07-19
Description: An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3857.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0542; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0542
CVE: CVE-2018-3859
Published: 2018-07-19
Description: An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3860.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0543; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0543
CVE: CVE-2018-3860
Published: 2018-07-19
Description: An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain the ability to execute code. A different vulnerability than CVE-2018-3859.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0544; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0544
CVE: CVE-2018-3870
Published: 2018-07-19
Description: An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3871.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0552; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0552
CVE: CVE-2018-3871
Published: 2018-07-19
Description: An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3870.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0553; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0553
CVE: CVE-2018-9062
Published: 2018-07-19
Description: In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74
References: http://www.securityfocus.com/bid/105387; https://support.lenovo.com/us/en/solutions/LEN-20527; http://www.securityfocus.com/bid/105387
CVE: CVE-2018-12959
Published: 2018-07-19
Description: The approveAndCall function of a smart contract implementation for Aditus (ADI), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all contract balances into their account).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/rootclay/Audit-of-smart-contracts/tree/master/0x8810C63470d38639954c6B41AaC545848C46484a; https://github.com/rootclay/Audit-of-smart-contracts/tree/master/0x8810C63470d38639954c6B41AaC545848C46484a
CVE: CVE-2018-14336
Published: 2018-07-19
Description: TP-Link WR840N devices allow remote attackers to cause a denial of service (connectivity loss) via a series of packets with random MAC addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://hackingvila.wordpress.com/2018/07/17/cve-2018-14336-tp-link-wireless-n-router-wr840n-vulnerability/; https://www.exploit-db.com/exploits/45064/; https://hackingvila.wordpress.com/2018/07/17/cve-2018-14336-tp-link-wireless-n-router-wr840n-vulnerability/
CVE: CVE-2018-10869
Published: 2018-07-19
Description: redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-732
References: http://www.securityfocus.com/bid/105061; https://access.redhat.com/errata/RHSA-2018:2373; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10869
CVE: CVE-2018-10870
Published: 2018-07-19
Description: redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-20
References: http://www.securityfocus.com/bid/104857; https://access.redhat.com/errata/RHSA-2018:2373; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10870
CVE: CVE-2017-18343
Published: 2018-07-20
Description: The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key during exception pretty printing in ExceptionHandler.php, as demonstrated by a /_debugbar/open?op=get URI. NOTE: the vendor's position is that this is not a vulnerability because the debug tools are not intended for production use. NOTE: the Symfony Debug component is used by Laravel Debugbar
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/barryvdh/laravel-debugbar/issues/850; https://github.com/symfony/debug/pull/7/commits/e48bda29143bd1a83001780b4a78e483822d985c; https://github.com/symfony/symfony/issues/27987
CVE: CVE-2018-14434
Published: 2018-07-20
Description: ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1192; https://usn.ubuntu.com/3785-1/; https://usn.ubuntu.com/4034-1/
CVE: CVE-2018-14435
Published: 2018-07-20
Description: ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1193; https://usn.ubuntu.com/3785-1/; https://github.com/ImageMagick/ImageMagick/issues/1193
CVE: CVE-2018-14436
Published: 2018-07-20
Description: ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1191; https://usn.ubuntu.com/3785-1/; https://github.com/ImageMagick/ImageMagick/issues/1191
CVE: CVE-2018-14437
Published: 2018-07-20
Description: ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/1190; https://usn.ubuntu.com/3785-1/; https://github.com/ImageMagick/ImageMagick/issues/1190
CVE: CVE-2018-14438
Published: 2018-07-20
Description: In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104876; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14921; http://www.securityfocus.com/bid/104876
CVE: CVE-2018-14439
Published: 2018-07-20
Description: espritblock eos4j, an unofficial SDK for EOS, through 2018-07-12 mishandles floating-point numbers with more than four digits after the decimal point, which might allow attackers to trigger currency transfers of unintended amounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: http://www.bishijie.com/kuaixun_80841; https://github.com/espritblock/eos4j/issues/6; http://www.bishijie.com/kuaixun_80841
CVE: CVE-2018-14440
Published: 2018-07-20
Description: An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. SQL injection exists via the admin/noticeManageAction_queryNotice.action noticeInfo parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cckevincyh/CompanyWebsite/issues/3; https://github.com/cckevincyh/CompanyWebsite/issues/3
CVE: CVE-2018-14441
Published: 2018-07-20
Description: An issue was discovered in cckevincyh SSH CompanyWebsite through 2018-05-03. admin/admin/fileUploadAction_fileUpload.action allows arbitrary file upload, as demonstrated by a .jsp file with the image/jpeg content type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/cckevincyh/CompanyWebsite/issues/4; https://github.com/cckevincyh/CompanyWebsite/issues/4
CVE: CVE-2018-14415
Published: 2018-07-20
Description: An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/idreamsoft/iCMS/issues/28; https://github.com/idreamsoft/iCMS/issues/28
CVE: CVE-2018-14418
Published: 2018-07-20
Description: In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/45062/; https://www.wtfsec.org/2583/msvod-v10-sql-injection/; https://www.exploit-db.com/exploits/45062/
CVE: CVE-2018-14419
Published: 2018-07-20
Description: MetInfo 6.0.0 allows XSS via a modified name of the navigation bar on the home page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/Metinfo---XSS/blob/master/test; https://github.com/AvaterXXX/Metinfo---XSS/blob/master/test
CVE: CVE-2018-14420
Published: 2018-07-20
Description: MetInfo 6.0.0 allows a CSRF attack to add a user account via a doaddsave action to admin/index.php, as demonstrated by an admin/index.php?anyid=47&n=admin&c=admin_admin&a=doaddsave URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/Metinfo---XSS/blob/master/CSRF; https://github.com/AvaterXXX/Metinfo---XSS/blob/master/CSRF
CVE: CVE-2018-14421
Published: 2018-07-20
Description: SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v&#95;pic) to /admin/admin_video.php (aka /backend/admin_video.php). The code is executed by visiting /details/index.php. This can also be exploited through CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-352
References: http://hexo.imagemlt.xyz/post/seacms-backend-getshell/index.html; http://hexo.imagemlt.xyz/post/seacms-backend-getshell/index.html
CVE: CVE-2018-14422
Published: 2018-07-20
Description: blog/index.php in SansCMS 0.7 has XSS via the q parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/thm/SansCMS/issues/7; https://github.com/thm/SansCMS/issues/7
CVE: CVE-2018-8018
Published: 2018-07-20
Description: In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to GridClientJdkMarshaller deserialization endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/104911; https://access.redhat.com/errata/RHSA-2018:3768; https://lists.apache.org/thread.html/e0fdf53114a321142ecfa5cfa17658090f0b4e1677de431e329b37ab%40%3Cdev.ignite.apache.org%3E
CVE: CVE-2016-10727
Published: 2018-07-20
Description: camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS but the server will not use STARTTLS, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. The server code was intended to report an error and not proceed, but the code was written incorrectly.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1334842; https://github.com/GNOME/evolution-data-server/releases/tag/EVOLUTION_DATA_SERVER_3_21_2; https://gitlab.gnome.org/GNOME/evolution-data-server/blob/master/NEWS#L1022
CVE: CVE-2018-14442
Published: 2018-07-20
Description: Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2018-14443
Published: 2018-07-20
Description: get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://hac425.unaux.com/index.php/archives/53/; https://github.com/ArchimedesCAD/libredwg/issues/6; http://hac425.unaux.com/index.php/archives/53/
CVE: CVE-2018-14444
Published: 2018-07-20
Description: libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-190
References: http://hac425.unaux.com/index.php/archives/59/; https://github.com/codelibs/libdxfrw/issues/2; http://hac425.unaux.com/index.php/archives/59/
CVE: CVE-2018-14445
Published: 2018-07-20
Description: In Bento4 v1.5.1-624, AP4_File::ParseStream in Ap4File.cpp allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://hac425.unaux.com/index.php/archives/62/; https://github.com/axiomatic-systems/Bento4/issues/289; http://hac425.unaux.com/index.php/archives/62/
CVE: CVE-2018-14446
Published: 2018-07-20
Description: MP4Integer32Property::Read in atom_avcC.cpp in MP4v2 2.1.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted MP4 file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://hac425.unaux.com/index.php/archives/63/; https://github.com/TechSmith/mp4v2/issues/20; https://github.com/enzo1982/mp4v2/releases/tag/v2.1.0
CVE: CVE-2018-14447
Published: 2018-07-20
Description: trim_whitespace in lexer.l in libConfuse v3.2.1 has an out-of-bounds read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hac425.unaux.com/index.php/archives/64/; https://github.com/martinh/libconfuse/issues/109; https://lists.debian.org/debian-lts-announce/2018/08/msg00017.html
CVE: CVE-2018-14448
Published: 2018-07-20
Description: Codec::parse in track.cpp in Untrunc through 2018-06-07 has a NULL pointer dereference via a crafted MP4 file because of improper interaction with libav.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://hac425.unaux.com/index.php/archives/66/; https://github.com/ponchio/untrunc/issues/131; http://hac425.unaux.com/index.php/archives/66/
CVE: CVE-2018-14449
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out of bounds read in gig::File::UpdateChunks in gig.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14450
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "update dimension region's chunks" feature of the function gig::Region::UpdateChunks in gig.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14451
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in the function RIFF::Chunk::Read in RIFF.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14452
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the "always assign the sample of the first dimension region of this region" feature of the function gig::Region::UpdateChunks in gig.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14453
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store16 in helper.h.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14454
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14455
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store32 in helper.h.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14456
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::SaveString in DLS.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14457
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14458
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData[1] access in the function store32 in helper.h.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14459
Published: 2018-07-20
Description: An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData[0] access in the function store16 in helper.h.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md; https://github.com/TeamSeri0us/pocs/blob/master/libgig/README.md
CVE: CVE-2018-14460
Published: 2018-07-20
Description: An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README3.md; https://github.com/TeamSeri0us/pocs/blob/master/hdf5/README3.md
CVE: CVE-2017-1544
Published: 2018-07-20
Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716997; http://www.securityfocus.com/bid/104885; https://exchange.xforce.ibmcloud.com/vulnerabilities/130812
CVE: CVE-2017-1575
Published: 2018-07-20
Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) uses weaker than expected cryptographic algorithms that could allow a local attacker to decrypt highly sensitive information. IBM X-Force ID: 132032.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-327
References: http://www.ibm.com/support/docview.wss?uid=ibm10716997; http://www.securityfocus.com/bid/104885; https://exchange.xforce.ibmcloud.com/vulnerabilities/132032
CVE: CVE-2017-1633
Published: 2018-07-20
Description: IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716747; http://www.securityfocus.com/bid/104927; https://exchange.xforce.ibmcloud.com/vulnerabilities/133180
CVE: CVE-2018-1398
Published: 2018-07-20
Description: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information. IBM X-Force ID: 138434.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10717025; http://www.securityfocus.com/bid/104919; https://exchange.xforce.ibmcloud.com/vulnerabilities/138434
CVE: CVE-2018-14471
Published: 2018-07-20
Description: dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/LibreDWG/libredwg/issues/32; https://github.com/LibreDWG/libredwg/issues/32
CVE: CVE-2018-14472
Published: 2018-07-20
Description: An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/144; https://github.com/wuzhicms/wuzhicms/issues/144
CVE: CVE-2018-1470
Published: 2018-07-20
Description: IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks against the system. IBM X-Force ID: 140688.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716997; http://www.securityfocus.com/bid/104885; https://exchange.xforce.ibmcloud.com/vulnerabilities/140688
CVE: CVE-2018-1563
Published: 2018-07-20
Description: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142967.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10717031; http://www.securityfocus.com/bid/104910; https://exchange.xforce.ibmcloud.com/vulnerabilities/142967
CVE: CVE-2018-1564
Published: 2018-07-20
Description: IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716747; http://www.securityfocus.com/bid/104927; https://exchange.xforce.ibmcloud.com/vulnerabilities/142968