Security Vulnerabilities - CVEs Published In 2018
PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST parameter 'proxyport_' is mishandled. The attacker can craft an HTTP request and override the 'writeresult' command-line parameter for HttpAdvancedSensor.exe to store arbitrary data in an arbitrary place on the file system. For example, the attacker can create an executable file in the \Custom Sensors\EXE directory and execute it by creating EXE/Script Sensor.
CVSS Score
8.8
EPSS Score
0.016
Published
2018-11-12
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '&' character is mishandled in certain contexts.
CVSS Score
9.8
EPSS Score
0.007
Published
2018-11-12
An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.
CVSS Score
9.8
EPSS Score
0.007
Published
2018-11-12
An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.
CVSS Score
7.5
EPSS Score
0.011
Published
2018-11-12
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector.
CVSS Score
9.8
EPSS Score
0.005
Published
2018-11-12
An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the data[content] parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2018-11-12
An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-11-12
An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message.
CVSS Score
5.3
EPSS Score
0.002
Published
2018-11-12
An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\show_product.html file.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-11-12
An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types (jpg, jpeg, bmp, png, gif), as demonstrated by an admin/index.php?c=uploadfile&a=uploadify_upload&type=php URI.
CVSS Score
9.8
EPSS Score
0.006
Published
2018-11-12