yahoo-inc/cve-impacts huggingface dataset:
CVE-2018-11048: Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.
Key phrases: xml external entity (xxe) injection, denial of service
CVE-2018-11049: RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scripts set an environment variable in an unintended manner. A local authenticated malicious user could trick the root user to run malicious code on the targeted system.
Key phrases: uncontrolled search, targeted system
CVE-2018-11050: Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing Protocol (AMQP) component. User credentials are sent unencrypted to the remote AMQP service. An unauthenticated attacker in the same network collision domain, could potentially sniff the password from the network and use it to access the component using the privileges of the compromised user.
Key phrases: clear-text authentication over network
CVE-2018-11051: RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the application to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Key phrases: gain unauthorized read access, path traversal
CVE-2018-11052: Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.
Key phrases: authentication bypass
CVE-2018-11053: Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.
Key phrases: world writable
CVE-2018-11054: RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
Key phrases: integer overflow, denial of service
CVE-2018-11055: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.
Key phrases: gain access, improper clearing of heap memory before release
CVE-2018-11056: RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.
Key phrases: uncontrolled resource consumption (resource exhaustion), denial of service
CVE-2018-11057: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Key phrases: covert timing channel, bleichenbacher
CVE-2018-11058: RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
Key phrases: buffer over-read
CVE-2018-11059: RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. A remote authenticated malicious Archer user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When application users access the corrupted data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application.
Key phrases: stored cross-site scripting
CVE-2018-1106: An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.
Key phrases: bypass flaw has been found in PackageKit before 1.1.10, authentication bypass, install signed packages, authentication bypass flaw, compromise
CVE-2018-11060: RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges.
Key phrases: authorization bypass, elevate their privileges, elevate privileges
CVE-2018-11061: RSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side template injection vulnerability due to insecure configuration of the template engine used in the product. A remote authenticated malicious RSA NetWitness Server user with an Admin or Operator role could exploit this vulnerability to execute arbitrary commands on the server with root privileges.
Key phrases: execute arbitrary commands, server-side template injection, server side template injection, root privilege
CVE-2018-11062: Integrated Data Protection Appliance versions 2.0, 2.1, and 2.2 contain undocumented accounts named 'support' and 'admin' that are protected with default passwords. These accounts have limited privileges and can access certain system files only. A malicious user with the knowledge of the default passwords may potentially log in to the system and gain read and write access to certain system files.
Key phrases: gain read and write access, default passwords
CVE-2018-11063: Dell WMS versions 1.1 and prior are impacted by multiple unquoted service path vulnerabilities. Affected software installs multiple services incorrectly by specifying the paths to the service executables without quotes. This could potentially allow a low-privileged local user to execute arbitrary executables with elevated privileges.
Key phrases: execute arbitrary executables, execute arbitrary executables with elevated privileges, unquoted service path
CVE-2018-11064: Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.
Key phrases: incorrect file permissions, arbitrary code, arbitrary code execution
CVE-2018-11065: The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read certain data. Embedded WorkPoint is upgraded to version 4.10.16, which contains a fix for the vulnerability.
Key phrases: sql injection
CVE-2018-11066: Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.
Key phrases: execute arbitrary commands, remote code execution
CVE-2018-11067: Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain an open redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.
Key phrases: open redirection, phishing, unknowingly visit malicious sites
CVE-2018-11068: RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material.
Key phrases: the system to recover sensitive key material, heap inspection, physical access
CVE-2018-11069: RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Key phrases: covert timing channel, bleichenbacher
CVE-2018-1107: It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated.
Key phrases: excessive amount of cpu time
CVE-2018-11070: RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key.
Key phrases: covert timing channel
CVE-2018-11071: Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.
Key phrases: remote process crash
CVE-2018-11072: Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges.
Key phrases: dll injection
CVE-2018-11073: RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface. When other Operations Console administrators open the affected page, the injected scripts could potentially be executed in their browser.
Key phrases: store arbitrary HTML or JavaScript, cross-site scripting
CVE-2018-11074: RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to the browser DOM, which code is then executed by the web browser in the context of the vulnerable web application.
Key phrases: dom-based cross-site scripting
CVE-2018-11075: RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim Security Console user to supply malicious HTML or JavaScript code to the vulnerable web application, which code is then executed by the victim's web browser in the context of the vulnerable web application.
Key phrases: cross-site scripting
CVE-2018-11076: Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client package. The private key could potentially be used by an unauthenticated attacker on the same data-link layer to initiate a MITM attack on management console users.
Key phrases: information exposure, mitm
CVE-2018-11077: 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.
Key phrases: execute arbitrary commands, os command injection, root privilege
CVE-2018-11078: Dell EMC VPlex GeoSynchrony, versions prior to 6.1, contains an Insecure File Permissions vulnerability. A remote authenticated malicious user could read from VPN configuration files on and potentially author a MITM attack on the VPN traffic.
Key phrases: insecure file permissions, mitm
CVE-2018-11079: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains a Plaintext Password Storage vulnerability. Database credentials are stored in plaintext in a configuration file. An authenticated malicious user with access to the configuration file may obtain the exposed password to gain access to the application database.
Key phrases: obtain the exposed password, gain access, plaintext password storage
CVE-2018-1108: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.
Key phrases: weakness
CVE-2018-11080: Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.
Key phrases: utilize the file contents to potentially elevate their, file permission, elevate their privileges, elevate privileges
CVE-2018-11081: Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config onto the temp RAM disk, thus exposing the configs directly onto disk. A remote user that has gained access to the Operations Manager VM, can now file search and find the UAA credentials for Operations Manager on the system disk..
CVE-2018-11082: Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of a valid username and password can brute force MFA to login as the targeted user.
Key phrases: login as the targeted user
CVE-2018-11083: Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for authentication. A remote attacker with an admin refresh token given by UAA can be used to access BOSH resources without obtaining an access token, even if their user no longer has access to those resources.
Key phrases: be as access tokens when using UAA for
CVE-2018-11084: Cloud Foundry Garden-runC release, versions prior to 1.16.1, prevents deletion of some app environments based on file attributes. A remote authenticated malicious user may create and delete apps with crafted file attributes to cause a denial of service for new app instances or scaling up of existing apps.
Key phrases: denial of service
CVE-2018-11086: Pivotal Usage Service in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Key phrases: the system org may be able to access, escalate to an admin role, escalation of privileges, escalation privilege
CVE-2018-11087: Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.
Key phrases: man-in-the-middle, intercept traffic, man in the middle
CVE-2018-11088: Pivotal Applications Manager in Pivotal Application Service, versions 2.0 prior to 2.0.21 and 2.1 prior to 2.1.13 and 2.2 prior to 2.2.5, contains a bug which may allow escalation of privileges. A space developer with access to the system org may be able to access an artifact which contains the CF admin credential, allowing them to escalate to an admin role.
Key phrases: the system org may be able to access, escalate to an admin role, escalation of privileges, escalation privilege
CVE-2018-1109: A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.
Key phrases: Denial of Service (ReDoS)
CVE-2018-11090: An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site.
Key phrases: inject malicious client side scripting which will be, xss, manipulated site
CVE-2018-11091: An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the "HiddenFieldControlCustomWhiteListedExtensions" parameter and add arbitrary extensions to the whitelist during the upload. For instance, if the extension .asp is added to the "HiddenFieldControlCustomWhiteListedExtensions" parameter, the server accepts "secctest.asp" as a legitimate file. Hence malicious files can be uploaded in order to execute arbitrary commands to take over the server.
Key phrases: add arbitrary extensions, malicious file, file upload, execute arbitrary, arbitrary commands
CVE-2018-11092: An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.
Key phrases: remotely delete all admin notes via an admin, csrf
CVE-2018-11093: Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element.
Key phrases: inject arbitrary web script, inject arbitrary web script through a crafted href, cross-site scripting (xss)
CVE-2018-11094: An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.
CVE-2018-11095: The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Key phrases: denial of service (Segmentation fault and application crash), cause a denial of service (Segmentation fault, unspecified other impact, unspecified impact
CVE-2018-11096: Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vulnerability through which an attacker can change all of the target's account information remotely.
Key phrases: csrf
CVE-2018-11097: An issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak vulnerability that could lead to a program crash.
Key phrases: memory leak, program crash
CVE-2018-11098: An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912.
Key phrases: file upload
CVE-2018-11099: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted vcf file.
Key phrases: cause information disclosure (heap-based buffer, heap-based buffer over-read, buffer over read
CVE-2018-1110: A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.
Key phrases: denial of service
CVE-2018-11100: The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.
Key phrases: denial of service (Segmentation fault and application crash), cause a denial of service (Segmentation fault, unspecified other impact, unspecified impact
CVE-2018-11101: Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allows XSS via a resource location specified in an attribute of a SCRIPT, IFRAME, or IMG element, leading to JavaScript execution after a reply, a different vulnerability than CVE-2018-10994. The attacker needs to send HTML code directly as a message, and then reply to that message to trigger this vulnerability. The Signal-Desktop software fails to sanitize specific HTML elements that can be used to inject HTML code into remote chat windows when replying to an HTML message. Specifically the IMG and IFRAME elements can be used to include remote or local resources. For example, the use of an IFRAME element enables full code execution, allowing an attacker to download/upload files, information, etc. The SCRIPT element was also found to be injectable. On the Windows operating system, the CSP fails to prevent remote inclusion of resources via the SMB protocol. In this case, remote execution of JavaScript can be achieved by referencing the script on an SMB share within an IFRAME element, for example: <IFRAME src=\\\\\\\\DESKTOP-XXXXX\\\\Temp\\\\test.html> and then replying to it. The included JavaScript code is then executed automatically, without any interaction needed from the user. The vulnerability can be triggered in the Signal-Desktop client by sending a specially crafted message and then replying to it with any text or content in the reply (it doesn't matter).
Key phrases: JavaScript execution after a reply, download/upload files, xss, code execution
CVE-2018-11102: An issue was discovered in Libav 12.3. A read access violation in the mov_probe function in libavformat/mov.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv.
Key phrases: denial of service (application crash), cause a denial of service (application crash, read access violation
CVE-2018-11105: There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat whenever a malicious attacker would initiate a new chat with an administrator. NOTE: this issue exists because of an incomplete fix for CVE-2018-9864.
Key phrases: cross site scripting
CVE-2018-11106: NETGEAR has released fixes for a pre-authentication command injection in request_handler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to 6.5.3.5; WC7600v2, running firmware versions prior to 6.5.3.5; and WC9500, running firmware versions prior to 6.5.3.5.
Key phrases: pre-authentication command injection
CVE-2018-1111: DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.
Key phrases: execute arbitrary commands, obtain network configuration using the DHCP protocol., command injection flaw, arbitrary commands with root privileges, spoofing
CVE-2018-11116: OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that were only supposed to be accessible to a specific user, as demonstrated by the file, log, and service namespaces, potentially leading to remote Information Disclosure or Code Execution. NOTE: The developer disputes this as a vulnerability, indicating that rpcd functions appropriately
Key phrases: call arbitrary methods, call arbitrary methods (i.e., information disclosure, code execution
CVE-2018-11117: Services/Feeds/classes/class.ilExternalFeedItem.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a link attribute.
Key phrases: xss
CVE-2018-11118: The RSS subsystem in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS via a URI to Services/Feeds/classes/class.ilExternalFeedItem.php.
Key phrases: xss
CVE-2018-11119: ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 redirects a logged-in user to a third-party site via the return_to_url parameter.
Key phrases: return_to_url parameter
CVE-2018-1112: glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.
Key phrases: connect from any network to mount gluster storage, regression
CVE-2018-11120: Services/COPage/classes/class.ilPCSourceCode.php in ILIAS 5.1.x, 5.2.x, and 5.3.x before 5.3.5 has XSS.
Key phrases: xss
CVE-2018-11124: Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via a, cross-site scripting (xss)
CVE-2018-11126: dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
Key phrases: csrf
CVE-2018-11127: e107 2.1.7 has CSRF resulting in arbitrary user deletion.
Key phrases: csrf, arbitrary user deletion
CVE-2018-11128: The ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly execute arbitrary code via a crafted pdf file.
Key phrases: execute arbitrary code, denial of service (stack-based buffer overflow), cause a denial of service (stack-, stack based buffer overflow
CVE-2018-11129: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
Key phrases: denial of service (use-after-free), cause a denial of service (use-, unspecified other impact, use after free, unspecified impact
CVE-2018-1113: setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /etc/shells. This violates security assumptions made by pam_shells and some daemons which allow access based on a user's shell being listed in /etc/shells. Under some circumstances, users which had their shell changed to /sbin/nologin could still access the system.
Key phrases: /sbin/nologin could still access the system, sbin nologin
CVE-2018-11130: The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file.
Key phrases: denial of service (use-after-free), cause a denial of service (use-, unspecified other impact, use after free, unspecified impact
CVE-2018-11132: In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges and only allows a set of commands to be executed. A command injection vulnerability exists within this message queue which allows low-privilege users to append arbitrary commands that will be run as root.
Key phrases: append arbitrary commands, be executed, append arbitrary commands that will be run as, command injection, root privilege, execute commands
CVE-2018-11133: The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.
Key phrases: cross-site scripting
CVE-2018-11134: In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kace_support' account, which comes disabled by default but has full sudo privileges.
Key phrases: a set of commands, changing any user's password (including root, root privilege
CVE-2018-11135: The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks.
Key phrases: conduct PHP object injection attacks, php object injection
CVE-2018-11136: The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
Key phrases: sql injection
CVE-2018-11137: The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.
Key phrases: read arbitrary files, directory traversal
CVE-2018-11138: The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.
Key phrases: execute arbitrary commands
CVE-2018-11139: The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TEST_SERVER' sent to the script via the POST method.
Key phrases: execute arbitrary commands, command injection
CVE-2018-1114: It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
Key phrases: file handler leak
CVE-2018-11140: The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type).
Key phrases: sql injection, error-based type
CVE-2018-11141: The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to write and delete files respectively via Directory Traversal. Files can be at any location where the 'www' user has write permissions.
Key phrases: directory traversal
CVE-2018-11142: The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.
Key phrases: critical functions
CVE-2018-11143: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).
Key phrases: command injection (issue 1 of 46)
CVE-2018-11144: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).
Key phrases: command injection (issue 2 of 46)
CVE-2018-11145: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).
Key phrases: command injection (issue 3 of 46)
CVE-2018-11146: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).
Key phrases: command injection (issue 4 of 46)
CVE-2018-11147: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).
Key phrases: command injection (issue 5 of 46)
CVE-2018-11148: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).
Key phrases: command injection (issue 6 of 46)
CVE-2018-11149: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).
Key phrases: command injection (issue 7 of 46)
CVE-2018-1115: postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
CVE-2018-11150: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46).
Key phrases: command injection (issue 8 of 46)
CVE-2018-11151: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46).
Key phrases: command injection (issue 9 of 46)
CVE-2018-11152: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46).
Key phrases: command injection (issue 10 of 46)
CVE-2018-11153: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46).
Key phrases: command injection (issue 11 of 46)
CVE-2018-11154: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46).
Key phrases: command injection (issue 12 of 46)
CVE-2018-11155: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46).
Key phrases: command injection (issue 13 of 46)
CVE-2018-11156: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46).
Key phrases: command injection (issue 14 of 46)
CVE-2018-11157: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46).
Key phrases: command injection (issue 15 of 46)
CVE-2018-11158: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46).
Key phrases: command injection (issue 16 of 46)
CVE-2018-11159: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46).
Key phrases: command injection (issue 17 of 46)
CVE-2018-1116: A flaw was found in polkit before version 0.116. The implementation of the polkit_backend_interactive_authority_check_authorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and information disclosure.
Key phrases: test for authentication and trigger authentication of unrelated, local dos, information disclosure
CVE-2018-11160: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46).
Key phrases: command injection (issue 18 of 46)
CVE-2018-11161: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46).
Key phrases: command injection (issue 19 of 46)
CVE-2018-11162: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46).
Key phrases: command injection (issue 20 of 46)
CVE-2018-11163: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46).
Key phrases: command injection (issue 21 of 46)
CVE-2018-11164: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46).
Key phrases: command injection (issue 22 of 46)
CVE-2018-11165: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46).
Key phrases: command injection (issue 23 of 46)
CVE-2018-11166: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46).
Key phrases: command injection (issue 24 of 46)
CVE-2018-11167: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46).
Key phrases: command injection (issue 25 of 46)
CVE-2018-11168: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46).
Key phrases: command injection (issue 26 of 46)
CVE-2018-11169: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46).
Key phrases: command injection (issue 27 of 46)
CVE-2018-1117: ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin passwords in the provisioning log. In an environment where logs are shared with other parties, this could lead to privilege escalation.
Key phrases: privilege escalation
CVE-2018-11170: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
Key phrases: command injection (issue 28 of 46)
CVE-2018-11171: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46).
Key phrases: command injection (issue 29 of 46)
CVE-2018-11172: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46).
Key phrases: command injection (issue 30 of 46)
CVE-2018-11173: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46).
Key phrases: command injection (issue 31 of 46)
CVE-2018-11174: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46).
Key phrases: command injection (issue 32 of 46)
CVE-2018-11175: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).
Key phrases: command injection (issue 33 of 46)
CVE-2018-11176: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).
Key phrases: command injection (issue 34 of 46)
CVE-2018-11177: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).
Key phrases: command injection (issue 35 of 46)
CVE-2018-11178: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).
Key phrases: command injection (issue 36 of 46)
CVE-2018-11179: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).
Key phrases: command injection (issue 37 of 46)
CVE-2018-1118: Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
Key phrases: read some kernel memory contents when reading from
CVE-2018-11180: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).
Key phrases: command injection (issue 38 of 46)
CVE-2018-11181: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).
Key phrases: command injection (issue 39 of 46)
CVE-2018-11182: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).
Key phrases: command injection (issue 40 of 46)
CVE-2018-11183: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46).
Key phrases: command injection (issue 41 of 46)
CVE-2018-11184: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46).
Key phrases: command injection (issue 42 of 46)
CVE-2018-11185: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46).
Key phrases: command injection (issue 43 of 46)
CVE-2018-11186: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46).
Key phrases: command injection (issue 44 of 46)
CVE-2018-11187: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).
Key phrases: command injection (issue 45 of 46)
CVE-2018-11188: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).
Key phrases: command injection (issue 46 of 46)
CVE-2018-11189: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).
Key phrases: privilege escalation (issue 1 of 6)
CVE-2018-11190: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).
Key phrases: privilege escalation (issue 2 of 6)
CVE-2018-11191: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6).
Key phrases: privilege escalation (issue 3 of 6)
CVE-2018-11192: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).
Key phrases: privilege escalation (issue 4 of 6)
CVE-2018-11193: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).
Key phrases: privilege escalation (issue 5 of 6)
CVE-2018-11194: Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).
Key phrases: privilege escalation (issue 6 of 6)
CVE-2018-11195: Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This allows malicious users with physical access to the web browser of a Mahara user, after they have logged in, to potentially gain access to their Mahara credentials.
Key phrases: gain access, the web browser of a Mahara user, browser back and refresh, physical access
CVE-2018-11196: Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers.
Key phrases: be available for download, file upload
CVE-2018-11198: An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.
Key phrases: stored xss
CVE-2018-1120: A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which makes a read() call to the /proc/<pid>/cmdline (or /proc/<pid>/environ) files to block indefinitely (denial of service) or for some controlled time (as a synchronization primitive for other attacks).
Key phrases: denial of service
CVE-2018-11200: An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.
Key phrases: stored xss
CVE-2018-11202: A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Key phrases: a remote denial of service attack, null pointer dereference
CVE-2018-11203: A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Key phrases: a remote denial of service attack, division by zero
CVE-2018-11204: A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Key phrases: a remote denial of service attack, null pointer dereference
CVE-2018-11205: A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Key phrases: a remote denial of service or information disclosure, out of bounds read
CVE-2018-11206: An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack.
Key phrases: a remote denial of service or information disclosure, out of bounds read
CVE-2018-11207: A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack.
Key phrases: a remote denial of service attack, division by zero
CVE-2018-11208: An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type of XSS by a user with the admin privilege
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML into background, xss
CVE-2018-11209: An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue
Key phrases: bypass intended access restrictions, rainbow-table