yahoo-inc/cve-impacts huggingface dataset:
CVE-2018-16603: An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an attacker.
Key phrases: out of bounds access
CVE-2018-16604: An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary PHP code by changing the username because the username is surrounded by double quotes (e.g., "${phpinfo()}").
Key phrases: execute arbitrary PHP code
CVE-2018-16605: D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
Key phrases: XSS via the Hostname and Username fields in, xss
CVE-2018-16606: In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of Paper ID (the pid parameter).
Key phrases: view and grab all submitted papers (Title, insecure direct object reference (idor)
CVE-2018-16607: Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.
Key phrases: inject arbitrary web script, inject arbitrary web script via the Orgs name, cross-site scripting (xss)
CVE-2018-16608: In Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the administrator via an admin/index.php?id=users&action=edit&user_id=1, Insecure Direct Object Reference (IDOR).
Key phrases: insecure direct object reference (idor)
CVE-2018-1661: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144887.
Key phrases: execute malicious and unauthorized actions transmitted from a, cross-site request forgery, cross site request forgery
CVE-2018-16613: An issue was discovered in the update function in the wpForo Forum plugin before 1.5.2 for WordPress. A registered forum is able to escalate privilege to the forum administrator without any form of user interaction.
Key phrases: escalate privilege
CVE-2018-16618: VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters followed by the name of an Android activity to start. Activities are started by inserting their name into a string that is executed in a shell command. By inserting metacharacters this can be exploited to run arbitrary commands as root. The requests also match those of the HTTP protocol and can be triggered on any web page rendered on the device by requesting resources stored at an http://127.0.0.1:1668/ URI, as demonstrated by the http://127.0.0.1:1668/dacdb70556479813fab2d92896596eef?';{ping,example.org}' URL.
Key phrases: run arbitrary commands, this service are checked for a string of, remote command execution, shell metacharacters
CVE-2018-16619: Sonatype Nexus Repository Manager before 3.14 allows XSS.
Key phrases: XSS, xss
CVE-2018-16620: Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control.
Key phrases: incorrect access control
CVE-2018-16621: Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.
Key phrases: Java Expression Language Injection, java expression language injection
CVE-2018-16622: Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2018-16623: Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown.
Key phrases: persistent xss
CVE-2018-16624: panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page.
Key phrases: XSS via the title of a new page, xss
CVE-2018-16625: index.php/Admin/Uploaded in Typesetter 5.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.
Key phrases: XSS via an SVG file with JavaScript in, xss
CVE-2018-16626: index.php/Admin/Classes in Typesetter 5.1 allows XSS via the description of a new class name.
Key phrases: XSS via the description of a new class, xss
CVE-2018-16627: panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.
Key phrases: Host header injection via the "forget password, host header injection
CVE-2018-16628: panel/login in Kirby v2.5.12 allows XSS via a blog name.
Key phrases: XSS via a blog name, xss
CVE-2018-16629: panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.
Key phrases: XSS via an SVG file with JavaScript in, xss
CVE-2018-1663: IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 144889.
Key phrases: obtain sensitive information, man in the middle techniques
CVE-2018-16630: Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
Key phrases: upload an SVG file, xss
CVE-2018-16631: Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter.
Key phrases: XSS via the panel/configuration/general/, xss
CVE-2018-16632: Mezzanine CMS v4.3.1 allows XSS via the /admin/blog/blogcategory/add/?_to_field=id&_popup=1 title parameter at admin/blog/blogpost/add/.
Key phrases: XSS via the /admin/blog/blogcategory, xss
CVE-2018-16633: Pluck v4.7.7 allows XSS via the admin.php?action=editpage&page= page title.
Key phrases: XSS via the admin.php?action=editpage&page= page title, xss
CVE-2018-16634: Pluck v4.7.7 allows CSRF via admin.php?action=settings.
Key phrases: CSRF via admin.php?action=settings, csrf
CVE-2018-16635: Blackcat CMS 1.3.2 allows XSS via the willkommen.php?lang=DE page title at backend/pages/modify.php.
Key phrases: XSS via the willkommen.php?lang=DE page title at backend, xss
CVE-2018-16636: Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.
Key phrases: HTML Injection via the index.php body parameter, html injection
CVE-2018-16637: Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
Key phrases: the manager/ URI, xss
CVE-2018-16638: Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
Key phrases: XSS via the manager/ search parameter, xss
CVE-2018-16639: Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation.
Key phrases: XSS via the index.php/Admin LABEL parameter during new, xss
CVE-2018-1664: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890.
Key phrases: amp management interface authorization headers, browser cache
CVE-2018-16640: ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
Key phrases: memory leak
CVE-2018-16641: ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c.
Key phrases: memory leak
CVE-2018-16642: The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write.
Key phrases: cause a denial of service via a crafted, out-of-bounds write, out of bounds write
CVE-2018-16643: The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file.
Key phrases: cause a denial of service via a crafted
CVE-2018-16644: There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
Key phrases: cause a denial of service via a crafted
CVE-2018-16645: There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image file.
Key phrases: cause a denial of service via a crafted, memory allocation issue
CVE-2018-16646: In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
Key phrases: infinite recursion, dos
CVE-2018-16647: In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.
Key phrases: denial of service (segmentation fault in fz_write_data in fitz/output.c), cause a denial of service (segmentation fault
CVE-2018-16648: In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-device.c pdf_dev_alpha array-index underflow.
Key phrases: denial of service (segmentation fault), cause a denial of service (segmentation fault, array-index underflow
CVE-2018-1665: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891.
Key phrases: decrypt highly sensitive information, weaker than expected cryptographic algorithms
CVE-2018-16650: phpMyFAQ before 2.9.11 allows CSRF.
Key phrases: CSRF, csrf
CVE-2018-16651: The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
Key phrases: CSV injection in reports, csv injection
CVE-2018-16653: rejucms 2.1 has XSS via the ucenter/cms_user_add.php u_name parameter.
Key phrases: xss
CVE-2018-16654: Zurmo 3.2.4 Stable allows XSS via app/index.php/accounts/default/details?id=2&kanbanBoard=1&openToTaskId=1.
Key phrases: XSS via app/index.php/accounts/, xss
CVE-2018-16655: Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php.
Key phrases: xss
CVE-2018-16656: DoBox_CstmBox_Info.model.htm on Kyocera TASKalfa 4002i and 6002i devices allows remote attackers to read the documents of arbitrary users via a modified HTTP request.
Key phrases: read the documents of arbitrary users via a, modified http request
CVE-2018-16657: In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with an invalid Via header causes a segmentation fault and crashes Kamailio. The reason is missing input validation in the crcitt_string_array core function for calculating a CRC hash for To tags. (An additional error is present in the check_via_address core function: this function also misses input validation.) This could result in denial of service and potentially the execution of arbitrary code.
Key phrases: denial of service, arbitrary code, segmentation fault, crash
CVE-2018-16658: An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.
Key phrases: information leak
CVE-2018-16659: An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.
Key phrases: SQL injection via Microsoft SQL Server stacked queries, sql injection, privilege elevation
CVE-2018-1666: IBM DataPower Gateway 2018.4.1.0, 7.6.0.0 through 7.6.0.11, 7.5.2.0 through 7.5.2.18, 7.5.1.0 through 7.5.1.18, 7.5.0.0 through 7.5.0.19, and 7.7.0.0 through 7.7.1.3 could allow an authenticated user to inject arbitrary messages that would be displayed on the UI. IBM X-Force ID: 144892.
Key phrases: inject arbitrary messages, inject arbitrary messages that would be displayed on
CVE-2018-16660: A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands on a vulnerable installation, command injection, arbitrary os command
CVE-2018-16663: An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parse_relations in os/storage/antelope/aql-parser.c while parsing AQL (storage of relations).
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2018-16664: An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvm_set_type in os/storage/antelope/lvm.c while parsing AQL (lvm_set_op, lvm_set_relation, lvm_set_operand).
Key phrases: buffer overflow
CVE-2018-16665: An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c.
Key phrases: buffer overflow
CVE-2018-16666: An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (parsing next string).
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2018-16667: An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable, lvm_set_variable_value, create_intersection, create_union).
Key phrases: buffer over-read, buffer over read
CVE-2018-16668: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository.
Key phrases: internal installation path disclosure
CVE-2018-16669: An issue was discovered in CIRCONTROL Open Charge Point Protocol (OCPP) before 1.5.0, as used in CirCarLife, PowerStudio, and other products. Due to storage of credentials in XML files, an unprivileged user can look at /services/config/config.xml for the admin credentials of the ocpp and circarlife panels.
CVE-2018-1667: IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 144893.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2018-16670: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html.
Key phrases: plc status disclosure
CVE-2018-16671: An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system software information disclosure due to lack of authentication for /html/device-id.
Key phrases: system software information disclosure
CVE-2018-16672: An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unprivileged user can exfiltrate critical setup information.
Key phrases: sensitive information
CVE-2018-1668: IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.
Key phrases: obtain sensitive information, IPMI data to obtain sensitive information, null logins
CVE-2018-1669: IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 144950.
Key phrases: xml external entity injection (xxe), consume memory resources, sensitive information
CVE-2018-1670: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive product configuration information from log files. IBM X-Force ID: 144946.
Key phrases: obtain sensitive product configuration information, obtain sensitive product configuration information from log files
CVE-2018-16703: A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform multiple user enumerations, which can further help an attacker to perform login attempts in excess of the configured login attempt limit. The vulnerability is due to insufficient server-side access control and login attempt limit enforcement. An attacker could exploit this vulnerability by sending modified login attempts to the Portal login page. An exploit could allow the attacker to identify existing users and perform brute-force password attacks on the Portal, as demonstrated by navigating to the user/4 URI.
Key phrases: perform multiple user enumerations, identify existing users and perform brute-force, modified login attempts, brute-force password
CVE-2018-16704: An issue was discovered in Gleez CMS v1.2.0. Because of an Insecure Direct Object Reference vulnerability, it is possible for attackers (logged in users) to view profile page of other users, as demonstrated by navigating to user/3 on demo.gleezcms.org.
Key phrases: insecure direct object reference
CVE-2018-16705: FURUNO FELCOM 250 and 500 devices allow unauthenticated access to the xml/permission.xml file containing all of the system's usernames and passwords. This includes the Admin and Service user accounts and their unsalted MD5 hashes, as well as the SMS server password in cleartext.
Key phrases: the xml/permission.xml file containing all of, unauthenticated access, cleartext
CVE-2018-16706: LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.
Key phrases: be rebooted remotely without authentication via a direct
CVE-2018-16709: Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-V C4475, ApeosPort-V C3375, DocuCentre-VI C2271, ApeosPort-V C5576, DocuCentre-IV C2263, DocuCentre-V C2263, and ApeosPort-V 5070 devices allow remote attackers to read or write to files via crafted PJL commands.
Key phrases: read or write to files via crafted PJL, pjl commands, to write files
CVE-2018-1671: IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951.
Key phrases: html injection
CVE-2018-16710: OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the public internet is a terrible idea, and I really can't emphasize that enough.
Key phrases: obtain sensitive information, obtain sensitive information or cause a denial of, denial of service, blind port forwarding
CVE-2018-16711: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input.
Key phrases: send an IOCTL (0x9C402088) with a
CVE-2018-16712: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory.
Key phrases: send a specially crafted IOCTL 0x9C406104 to read, ioctl
CVE-2018-16713: IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402084) with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for input, and provide output from the instruction.
Key phrases: send an IOCTL (0x9C402084) with a
CVE-2018-16715: An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\\\\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable (EXE) or dynamically loadable library (DLL) files, causing elevated (SYSTEM) user access. Configuration control files or data files under this folder could also be similarly modified to affect service process behavior.
Key phrases: low-privileged user accounts, affect service process behavior, unauthorized replacement
CVE-2018-16716: A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.
Key phrases: path traversal, significant information disclosure, arbitrary file
CVE-2018-16717: A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2018-16718: An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.
Key phrases: xss
CVE-2018-16719: In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x00221482.
Key phrases: denial of service (BSOD), cause a denial of service (BSOD), denial of service (bsod), unspecified other impact, ioctl, unspecified impact
CVE-2018-1672: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.
Key phrases: act with the identity of a different user, impersonation scenarios
CVE-2018-16720: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304.
Key phrases: denial of service (BSOD), cause a denial of service (BSOD), unspecified other impact, unspecified impact
CVE-2018-16721: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360090, a related issue to CVE-2018-16306.
Key phrases: denial of service (BSOD), cause a denial of service (BSOD), unspecified other impact, unspecified impact
CVE-2018-16722: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12360094, a related issue to CVE-2018-16305.
Key phrases: denial of service (BSOD), cause a denial of service (BSOD), unspecified other impact, unspecified impact
CVE-2018-16723: In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x12364020.
Key phrases: denial of service (BSOD), cause a denial of service (BSOD), denial of service (bsod), unspecified other impact, unspecified impact
CVE-2018-16724: An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request.
Key phrases: sql injection
CVE-2018-16725: An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka "Non-standard use of the flash component."
Key phrases: xss
CVE-2018-16726: razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.
Key phrases: HTML injection via the description of the homepage, html injection
CVE-2018-16727: razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
Key phrases: Stored XSS via the keywords of the homepage, stored xss
CVE-2018-16728: feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.
Key phrases: XSS via the tags field of a new, xss
CVE-2018-16729: Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.
Key phrases: XSS via an SVG file that contains Javascript, xss
CVE-2018-1673: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145108.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2018-16730: \\\\upload\\\\plugins\\\\sys\\\\Install.php in CScms 4.1 has XSS via the site name.
Key phrases: xss
CVE-2018-16731: CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data.
Key phrases: allows arbitrary file upload, the default filetype list (gif
CVE-2018-16732: \\\\upload\\\\plugins\\\\sys\\\\admin\\\\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save.
Key phrases: CSRF via admin.php/setting/ftp_save, csrf
CVE-2018-16733: In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
CVE-2018-16736: In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters section of the settings).
Key phrases: xss
CVE-2018-16737: tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation.
Key phrases: broken authentication protocol
CVE-2018-16738: tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial mitigation. This is fixed in 1.1.
Key phrases: broken authentication protocol
CVE-2018-16739: An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker can write to files, and thus execute code arbitrarily with root privileges.
Key phrases: path traversal, to write files, execute code, root privilege
CVE-2018-1674: IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109.
Key phrases: view, sql injection
CVE-2018-16741: An issue was discovered in mgetty before 1.2.1. In fax/faxq-helper.c, the function do_activate() does not properly sanitize shell metacharacters to prevent command injection. It is possible to use the ||, &&, or > characters within a file created by the "faxq-helper activate <jobid>" command.
Key phrases: command injection, shell metacharacters
CVE-2018-16742: An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2018-16743: An issue was discovered in mgetty before 1.2.1. In contrib/next-login/login.c, the command-line parameter username is passed unsanitized to strcpy(), which can cause a stack-based buffer overflow.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2018-16744: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow for command injection if untrusted input can reach it, because popen is used.
Key phrases: for command injection if untrusted input can reach
CVE-2018-16745: An issue was discovered in mgetty before 1.2.1. In fax_notify_mail() in faxrec.c, the mail_to parameter is not sanitized. It could allow a buffer overflow if long untrusted input can reach it.
Key phrases: a buffer overflow if long untrusted input can
CVE-2018-16749: In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.
Key phrases: denial of service (WriteBlob assertion failure and application exit), cause a denial of service (WriteBlob assertion, null check
CVE-2018-1675: IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems that are configured to use TADDM. IBM X-Force ID: 145110.
Key phrases: password hashes
CVE-2018-16750: In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found.
Key phrases: memory leak
CVE-2018-16752: LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.
Key phrases: Remote Code Execution via shell metacharacters in the, remote code execution, default password
CVE-2018-16758: Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows a man-in-the-middle attack to disable the encryption of VPN packets.
Key phrases: disable the encryption of VPN packets, missing message authentication, man in the middle
CVE-2018-16759: The removeXSS function in App/Common/common.php (called from App/Modules/Index/Action/SearchAction.class.php) in EasyCMS v1.4 allows XSS via an onhashchange event.
Key phrases: XSS via an onhashchange event, xss
CVE-2018-1676: IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145118.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2018-16761: Eventum before 3.4.0 has an open redirect vulnerability.
Key phrases: open redirect
CVE-2018-16762: FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.
Key phrases: pages/items, sql injection
CVE-2018-16763: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.
Key phrases: Pre-Auth Remote Code Execution, pre-auth remote code execution
CVE-2018-16764: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an IR::FunctionValidationContext::catch_all heap-based buffer over-read.
Key phrases: denial of service (application crash), unspecified other impact, ir::functionvalidationcontext::catch_all heap-based buffer over-read, unspecified impact, buffer over read
CVE-2018-16765: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.
Key phrases: denial of service (application crash), unspecified other impact, heap-buffer-overflow, unspecified impact, heap buffer overflow
CVE-2018-16766: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because Errors::unreachable() is reached.
Key phrases: denial of service (application crash), unspecified other impact, unspecified impact
CVE-2018-16767: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::popAndValidateOperand.
Key phrases: denial of service (application crash), unspecified other impact, heap-buffer-overflow, unspecified impact, heap buffer overflow
CVE-2018-16768: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::end.
Key phrases: denial of service (application crash), unspecified other impact, heap-buffer-overflow, unspecified impact, heap buffer overflow
CVE-2018-16769: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because libRuntime.so!llvm::InstructionCombiningPass::runOnFunction is mishandled.
Key phrases: denial of service (application crash), unspecified other impact, unspecified impact
CVE-2018-1677: IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.
Key phrases: denial of service
CVE-2018-16770: In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because a certain new_allocator allocate call fails.
Key phrases: denial of service (application crash), unspecified other impact, unspecified impact
CVE-2018-16771: Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.
Key phrases: PHP code execution via a SiteUrl that is, php code execution, siteurl
CVE-2018-16772: Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.
Key phrases: XSS via the Navigation Title of a new, xss
CVE-2018-16773: EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
Key phrases: XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field, xss
CVE-2018-16774: HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.
Key phrases: allows arbitrary file deletion, admin/index.php/language/ajax?action=
CVE-2018-16775: An issue was discovered in Victor CMS through 2018-05-10. There is XSS via the site name in the "Categories" menu.
Key phrases: xss
CVE-2018-16776: wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
Key phrases: xss
CVE-2018-16778: Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2018-16779: BlogCMS through 2016-10-25 has XSS via a comment.
Key phrases: xss
CVE-2018-16780: Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.
Key phrases: xss
CVE-2018-16781: ffjpeg.dll in ffjpeg before 2018-08-22 allows remote attackers to cause a denial of service (FPE signal) via a progressive JPEG file that lacks an AC Huffman table.
Key phrases: denial of service (FPE signal), cause a denial of service (FPE signal, ac huffman table
CVE-2018-16782: libimageworsener.a in ImageWorsener 1.3.2 has a buffer overflow in the bmpr_read_rle_internal function in imagew-bmp.c.
Key phrases: buffer overflow
CVE-2018-16784: DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring.
Key phrases: XML injection, xml injection, remote code execution
CVE-2018-16785: XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell
Key phrases: obtain webshell, xml injection
CVE-2018-16786: DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedback_ajax.php.
Key phrases: /plus/feedback_ajax.php, xss
CVE-2018-16789: libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic. By sending a crafted multipart/form-data HTTP request, an attacker could exploit this to force shellinaboxd into an infinite loop, exhausting available CPU resources and taking the service down.
Key phrases: implementation flaw, taking the service down, infinite loop
CVE-2018-1679: IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow an unauthenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 145180.
Key phrases: obtain sensitive information, obtain sensitive information that could be used in
CVE-2018-16790: _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2018-16791: In SolarWinds SFTP/SCP Server through 2018-09-10, the configuration file is world readable and writable, and stores user passwords in an insecure manner, allowing an attacker to determine passwords for potentially privileged accounts. This also grants the attacker an ability to backdoor the server.
Key phrases: determine passwords for potentially privileged accounts, world readable, insecure manner, backdoor
CVE-2018-16792: SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data.
Key phrases: exfiltrate data, xxe
CVE-2018-16793: Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.
Key phrases: ssrf
CVE-2018-16794: Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.
Key phrases: ssrf
CVE-2018-16795: OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file.
Key phrases: upload a .php file, cross-site request forgery (csrf)
CVE-2018-16796: HiScout GRC Suite before 3.1.5 allows Unrestricted Upload of Files with Dangerous Types.
Key phrases: Unrestricted Upload of Files with Dangerous Types, unrestricted upload
CVE-2018-16797: A heap-based buffer overflow in PotPlayerMini.exe in PotPlayer 1.7.8556 allows remote attackers to execute arbitrary code via a .wav file with large BytesPerSec and SamplesPerSec values, and a small Data_Chunk_Size value.
Key phrases: execute arbitrary code, execute arbitrary code via a .wav file with, heap-based buffer overflow, heap based buffer overflow
CVE-2018-1680: IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.
Key phrases: compromise
CVE-2018-16802: An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
Key phrases: execute code
CVE-2018-16803: In CIMTechniques CIMScan 6.x through 6.2, the SOAP WSDL parser allows attackers to execute SQL code.
Key phrases: execute SQL code
CVE-2018-16804: An issue was discovered in UCMS 1.4.6. There is XSS in the title bar, as demonstrated by a do=list request.
Key phrases: xss
CVE-2018-16805: In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.
Key phrases: inject arbitrary Web scripts or HTML, inject arbitrary Web scripts or HTML via a, xss, arbitrary web script
CVE-2018-16806: A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two challenge/response operations, to clone a key fob within a few seconds.
Key phrases: obtain access
CVE-2018-16807: In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser.
Key phrases: memory leak, dos
CVE-2018-16808: An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.
Key phrases: stored xss
CVE-2018-16809: An issue was discovered in Dolibarr through 7.0.0. expensereport/card.php in the expense reports module allows SQL injection via the integer parameters qty and value_unit.
Key phrases: SQL injection via the integer parameters qty and, sql injection
CVE-2018-16819: admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests.
Key phrases: allows arbitrary file deletion, arbitrary file deletion via id=filesmanager&path=
CVE-2018-1682: IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238.
Key phrases: sensitive information
CVE-2018-16820: admin/index.php in Monstra CMS 3.0.4 allows arbitrary directory listing via id=filesmanager&path=uploads/.......//./.......//./ requests.
Key phrases: allows arbitrary directory, arbitrary directory listing via id=filesmanager&path=
CVE-2018-16821: SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
Key phrases: allows arbitrary directory listing, arbitrary directory listing via upload/admin/
CVE-2018-16822: SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
Key phrases: SQL Injection via the upload/admin/, sql injection
CVE-2018-1683: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB communication. IBM X-Force ID: 145455.
Key phrases: obtain sensitive information, failure to encrypt orb communication
CVE-2018-16831: Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement.
Key phrases: bypass the trusted_dir protection, bypass the trusted_dir protection mechanism via a file:./, file:. .. substring
CVE-2018-16832: CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
Key phrases: modify the configuration via a Flash file because, csrf
CVE-2018-16833: Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
Key phrases: xss
CVE-2018-16836: Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI.
Key phrases: execute arbitrary files, read and execute arbitrary files outside of the, directory traversal
CVE-2018-16837: Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form for every user which have access just to the process list.
Key phrases: clear text form
CVE-2018-16838: A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access.
Key phrases: login instead of denying access
CVE-2018-16839: Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
Key phrases: buffer overrun, denial of service
CVE-2018-1684: IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X-Force ID: 145456.
Key phrases: mqtt topic string publishing, denial of service
CVE-2018-16840: A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.
Key phrases: heap use-after-free flaw, use after free
CVE-2018-16841: Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
Key phrases: denial of service, double-free, double free