stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2018-20818 (severity: CRITICAL, weakness: CWE-119)
A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other impact.
CVE-2018-20819 (severity: HIGH, weakness: CWE-787)
io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size.
CVE-2018-20820 (severity: MEDIUM, weakness: CWE-190)
read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.
CVE-2018-20821 (severity: MEDIUM, weakness: CWE-674)
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp).
CVE-2018-20822 (severity: MEDIUM, weakness: CWE-674)
LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp).
CVE-2018-20823 (severity: HIGH, weakness: CWE-20)
The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack.
CVE-2018-20824 (severity: MEDIUM, weakness: CWE-79)
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.
CVE-2018-20826 (severity: MEDIUM, weakness: CWE-863)
The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check.
CVE-2018-20827 (severity: MEDIUM, weakness: CWE-79)
The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the country parameter.
CVE-2018-20834 (severity: HIGH, weakness: CWE-59)
A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content. A patch has been applied to node-tar v2.2.2).
CVE-2018-20835 (severity: HIGH, weakness: CWE-20)
A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.
CVE-2018-20836 (severity: HIGH, weakness: CWE-362)
An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
CVE-2018-20837 (severity: MEDIUM, weakness: CWE-79)
include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.
CVE-2018-20838 (severity: MEDIUM, weakness: CWE-79)
ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.
CVE-2018-20839 (severity: MEDIUM, weakness: NVD-CWE-Other)
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
CVE-2018-20840 (severity: HIGH, weakness: CWE-754)
An unhandled exception vulnerability exists during Google Sign-In with Google API C++ Client before 2019-04-10. It potentially causes an outage of third-party services that were not designed to recover from exceptions. On the client, ID token handling can cause an unhandled exception because of misinterpretation of an integer as a string, resulting in denial-of-service and then other users can no longer login/sign-in to the affected third-party service. Once this third-party service uses Google Sign-In with google-api-cpp-client, a malicious user can trigger this client/auth/oauth2_authorization.cc vulnerability by requesting the client to receive the ID token from a Google authentication server.
CVE-2018-20841 (severity: CRITICAL, weakness: CWE-78)
HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&fname=security&opt=mac_table request.
CVE-2018-20843 (severity: HIGH, weakness: CWE-611)
In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).
CVE-2018-20845 (severity: MEDIUM, weakness: CWE-369)
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVE-2018-20846 (severity: MEDIUM, weakness: CWE-20)
Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVE-2018-20847 (severity: HIGH, weakness: CWE-190)
An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.
CVE-2018-20848 (severity: HIGH, weakness: CWE-79)
Advisto PEEL SHOPPING 9.0.0 has CSRF via en/achat/caddie_ajout.php and en/achat/caddie_affichage.php, as demonstrated by an XSS payload in the couleurId[0] parameter to the latter.
CVE-2018-20849 (severity: MEDIUM, weakness: CWE-79)
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.
CVE-2018-20850 (severity: HIGH, weakness: CWE-79)
Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server.
CVE-2018-20851 (severity: HIGH, weakness: NVD-CWE-Other)
Helpy before 2.2.0 allows agents to edit admins.
CVE-2018-20852 (severity: MEDIUM, weakness: CWE-20)
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
CVE-2018-20853 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue was discovered in the MailPoet Newsletters (aka wysija-newsletters) plugin before 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
CVE-2018-20854 (severity: HIGH, weakness: CWE-125)
An issue was discovered in the Linux kernel before 4.20. drivers/phy/mscc/phy-ocelot-serdes.c has an off-by-one error with a resultant ctrl->phys out-of-bounds read.
CVE-2018-20855 (severity: LOW, weakness: CWE-119)
An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.
CVE-2018-20856 (severity: HIGH, weakness: CWE-416)
An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled.
CVE-2018-20857 (severity: HIGH, weakness: CWE-20)
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.
CVE-2018-20858 (severity: MEDIUM, weakness: CWE-79)
Recommender before 2018-07-18 allows XSS.
CVE-2018-20859 (severity: MEDIUM, weakness: CWE-79)
edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
CVE-2018-20860 (severity: MEDIUM, weakness: CWE-20)
libopenmpt before 0.3.13 allows a crash with malformed MED files.
CVE-2018-20861 (severity: MEDIUM, weakness: CWE-20)
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
CVE-2018-20862 (severity: HIGH, weakness: NVD-CWE-Other)
cPanel before 76.0.8 unsafely performs PostgreSQL password changes (SEC-366).
CVE-2018-20863 (severity: CRITICAL, weakness: CWE-20)
cPanel before 76.0.8 allows remote attackers to execute arbitrary code via mailing-list attachments (SEC-452).
CVE-2018-20864 (severity: MEDIUM, weakness: CWE-20)
cPanel before 76.0.8 allows a persistent Virtual FTP accounts after removal of its associated domain (SEC-454).
CVE-2018-20865 (severity: MEDIUM, weakness: CWE-79)
cPanel before 76.0.8 has Self XSS in the WHM Additional Backup Destination field (SEC-459).
CVE-2018-20866 (severity: MEDIUM, weakness: CWE-79)
cPanel before 76.0.8 has Stored XSS in the WHM "Reset a DNS Zone" feature (SEC-461).
CVE-2018-20867 (severity: MEDIUM, weakness: CWE-601)
cPanel before 76.0.8 has an open redirect when resetting connections (SEC-462).
CVE-2018-20868 (severity: MEDIUM, weakness: CWE-79)
cPanel before 76.0.8 has Stored XSS in the WHM MultiPHP Manager interface (SEC-464).
CVE-2018-20869 (severity: HIGH, weakness: CWE-20)
cPanel before 76.0.8 allows arbitrary code execution in the context of the root account via dnssec adminbin (SEC-465).
CVE-2018-20870 (severity: MEDIUM, weakness: CWE-200)
The WebDAV transport feature in cPanel before 76.0.8 enables debug logging (SEC-467).
CVE-2018-20871 (severity: CRITICAL, weakness: CWE-732)
In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
CVE-2018-20872 (severity: MEDIUM, weakness: CWE-352)
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.
CVE-2018-20873 (severity: LOW, weakness: CWE-20)
cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).
CVE-2018-20874 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows self XSS in the WHM "Create a New Account" interface (SEC-428).
CVE-2018-20875 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows self XSS in the WHM Security Questions interface (SEC-433).
CVE-2018-20876 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows self XSS in the Site Software Moderation interface (SEC-434).
CVE-2018-20877 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows self XSS in WHM Style Upload interface (SEC-437).
CVE-2018-20878 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows stored XSS in WHM "File and Directory Restoration" interface (SEC-441).
CVE-2018-20879 (severity: MEDIUM, weakness: CWE-20)
cPanel before 74.0.8 allows demo accounts to execute arbitrary code via the Fileman::viewfile API (SEC-444).
CVE-2018-20880 (severity: LOW, weakness: NVD-CWE-Other)
cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
CVE-2018-20881 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.8 allows self stored XSS on the Security Questions login page (SEC-446).
CVE-2018-20882 (severity: MEDIUM, weakness: CWE-20)
cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).
CVE-2018-20883 (severity: MEDIUM, weakness: CWE-20)
cPanel before 74.0.8 allows FTP access during account suspension (SEC-449).
CVE-2018-20884 (severity: MEDIUM, weakness: CWE-79)
cPanel before 74.0.0 allows stored XSS in the WHM File Restoration interface (SEC-367).
CVE-2018-20885 (severity: MEDIUM, weakness: CWE-74)
cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation (SEC-416).
CVE-2018-20886 (severity: MEDIUM, weakness: CWE-922)
cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).
CVE-2018-20887 (severity: CRITICAL, weakness: CWE-89)
cPanel before 74.0.0 allows SQL injection during database backups (SEC-420).
CVE-2018-20888 (severity: MEDIUM, weakness: CWE-287)
cPanel before 74.0.0 allows file modification in the context of the root account because of incorrect HTTP authentication (SEC-424).
CVE-2018-20889 (severity: MEDIUM, weakness: CWE-200)
cPanel before 74.0.0 allows certain file-read operations via password file caching (SEC-425).
CVE-2018-20890 (severity: MEDIUM, weakness: CWE-284)
cPanel before 74.0.0 allows arbitrary zone file modifications during record edits (SEC-426).
CVE-2018-20891 (severity: MEDIUM, weakness: CWE-20)
cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).
CVE-2018-20892 (severity: MEDIUM, weakness: NVD-CWE-Other)
cPanel before 74.0.0 allows arbitrary zone file modifications because of incorrect CAA record handling (SEC-439).
CVE-2018-20893 (severity: LOW, weakness: CWE-20)
cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).
CVE-2018-20894 (severity: LOW, weakness: CWE-200)
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories (SEC-443).
CVE-2018-20895 (severity: HIGH, weakness: CWE-20)
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
CVE-2018-20896 (severity: LOW, weakness: CWE-94)
cPanel before 71.9980.37 allows code injection in the WHM cPAddons interface (SEC-394).
CVE-2018-20897 (severity: LOW, weakness: CWE-20)
cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).
CVE-2018-20898 (severity: MEDIUM, weakness: CWE-74)
cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).
CVE-2018-20899 (severity: MEDIUM, weakness: CWE-79)
cPanel before 71.9980.37 allows stored XSS in the WHM cPAddons installation interface (SEC-398).
CVE-2018-20900 (severity: MEDIUM, weakness: CWE-79)
cPanel before 71.9980.37 allows stored XSS in the YUM autorepair functionality (SEC-399).
CVE-2018-20901 (severity: MEDIUM, weakness: CWE-79)
cPanel before 71.9980.37 allows Remote-Stored XSS in WHM Save Theme Interface (SEC-400).
CVE-2018-20902 (severity: MEDIUM, weakness: CWE-200)
cPanel before 71.9980.37 allows attackers to read root's crontab file by leveraging ClamAV installation (SEC-408).
CVE-2018-20903 (severity: MEDIUM, weakness: CWE-79)
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface (SEC-421).
CVE-2018-20904 (severity: MEDIUM, weakness: CWE-732)
cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction (SEC-427).
CVE-2018-20905 (severity: MEDIUM, weakness: CWE-732)
cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).
CVE-2018-20906 (severity: MEDIUM, weakness: CWE-732)
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction (SEC-430).
CVE-2018-20907 (severity: MEDIUM, weakness: CWE-732)
cPanel before 71.9980.37 does not enforce the Mime::list_hotlinks API feature restriction (SEC-432).
CVE-2018-20908 (severity: MEDIUM, weakness: CWE-732)
cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
CVE-2018-20909 (severity: HIGH, weakness: CWE-732)
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups (SEC-338).
CVE-2018-20910 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows self XSS in the WHM cPAddons showsecurity Interface (SEC-357).
CVE-2018-20911 (severity: HIGH, weakness: CWE-79)
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup (SEC-359).
CVE-2018-20912 (severity: MEDIUM, weakness: CWE-20)
cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).
CVE-2018-20913 (severity: MEDIUM, weakness: CWE-200)
cPanel before 70.0.23 allows attackers to read the root accesshash via the WHM /cgi/trustclustermaster.cgi (SEC-364).
CVE-2018-20914 (severity: HIGH, weakness: CWE-74)
In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files (SEC-368).
CVE-2018-20915 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
CVE-2018-20916 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
CVE-2018-20917 (severity: MEDIUM, weakness: CWE-20)
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
CVE-2018-20918 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
CVE-2018-20919 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
CVE-2018-20920 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
CVE-2018-20921 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
CVE-2018-20922 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
CVE-2018-20923 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
CVE-2018-20924 (severity: MEDIUM, weakness: CWE-287)
cPanel before 70.0.23 allows arbitrary file-read and file-unlink operations via WHM style uploads (SEC-378).
CVE-2018-20925 (severity: MEDIUM, weakness: CWE-434)
cPanel before 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
CVE-2018-20926 (severity: MEDIUM, weakness: CWE-434)
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380).
CVE-2018-20927 (severity: LOW, weakness: CWE-285)
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
CVE-2018-20928 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).
CVE-2018-20929 (severity: MEDIUM, weakness: CWE-601)
cPanel before 70.0.23 allows an open redirect via the /unprotected/redirect.html endpoint (SEC-392).
CVE-2018-20930 (severity: MEDIUM, weakness: CWE-284)
cPanel before 70.0.23 allows .htaccess restrictions bypass when Htaccess Optimization is enabled (SEC-401).
CVE-2018-20931 (severity: MEDIUM, weakness: CWE-94)
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
CVE-2018-20932 (severity: LOW, weakness: CWE-538)
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
CVE-2018-20933 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 has Stored XSS via an WHM Edit DNS Zone action (SEC-410).
CVE-2018-20934 (severity: MEDIUM, weakness: CWE-358)
cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
CVE-2018-20935 (severity: MEDIUM, weakness: CWE-79)
cPanel before 70.0.23 allows stored XSS in via a WHM "Reset a DNS Zone" action (SEC-412).
CVE-2018-20936 (severity: LOW, weakness: CWE-732)
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf (SEC-308).
CVE-2018-20937 (severity: MEDIUM, weakness: CWE-287)
cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).
CVE-2018-20938 (severity: LOW, weakness: CWE-284)
cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).
CVE-2018-20939 (severity: LOW, weakness: CWE-200)
cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).
CVE-2018-20940 (severity: LOW, weakness: CWE-362)
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups (SEC-342).
CVE-2018-20941 (severity: MEDIUM, weakness: CWE-200)
cPanel before 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).
CVE-2018-20942 (severity: LOW, weakness: CWE-200)
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon configuring crontab (SEC-351).
CVE-2018-20943 (severity: LOW, weakness: CWE-200)
cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon a post-update task (SEC-352).
CVE-2018-20944 (severity: LOW, weakness: CWE-200)
cPanel before 68.0.27 allows attackers to read a copy of httpd.conf that is created during a syntax test (SEC-353).
CVE-2018-20945 (severity: MEDIUM, weakness: CWE-285)
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).
CVE-2018-20946 (severity: LOW, weakness: CWE-200)
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).
CVE-2018-20947 (severity: MEDIUM, weakness: CWE-668)
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
CVE-2018-20948 (severity: MEDIUM, weakness: CWE-79)
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383).
CVE-2018-20949 (severity: MEDIUM, weakness: CWE-79)
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385).
CVE-2018-20950 (severity: MEDIUM, weakness: CWE-79)
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386).
CVE-2018-20951 (severity: MEDIUM, weakness: CWE-79)
cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387).
CVE-2018-20952 (severity: MEDIUM, weakness: CWE-200)
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388).
CVE-2018-20953 (severity: MEDIUM, weakness: CWE-79)
cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389).
CVE-2018-20954 (severity: HIGH, weakness: CWE-287)
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
CVE-2018-20955 (severity: CRITICAL, weakness: CWE-798)
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31.
CVE-2018-20956 (severity: MEDIUM, weakness: CWE-532)
Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31.
CVE-2018-20957 (severity: HIGH, weakness: CWE-284)
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks.
CVE-2018-20958 (severity: MEDIUM, weakness: CWE-200)
The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device.
CVE-2018-20959 (severity: HIGH, weakness: NVD-CWE-Other)
Jura E8 devices lack Bluetooth connection security.
CVE-2018-20960 (severity: HIGH, weakness: NVD-CWE-Other)
Nespresso Prodigio devices lack Bluetooth connection security.