Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2017-0848
An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0849
An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62688399.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0850
An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0851
An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0852
A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0853
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0854
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0855
In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2018-01-01'}, {'name': '1040106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040106'}, {'name': '102414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102414'}]
CVE State: PUBLISHED
Explain CVE-2017-0857
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0858
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0859
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0860
An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0861
Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
Affected Products: Android
References: [{'name': 'RHSA-2018:3083', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3083'}, {'name': 'DSA-4187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4187'}, {'name': 'USN-3617-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-1/'}, {'name': 'USN-3619-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3619-2/'}, {'name': 'USN-3617-3', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-3/'}, {'name': 'USN-3583-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3583-2/'}, {'name': 'USN-3632-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3632-1/'}, {'name': 'RHSA-2018:2390', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2390'}, {'name': 'USN-3583-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3583-1/'}, {'name': '[secure-testing-commits] 20171206 r58306 - data/CVE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html'}, {'name': '[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html'}, {'name': 'USN-3617-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-2/'}, {'name': 'RHSA-2018:3096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3096'}, {'name': 'USN-3619-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3619-1/'}, {'name': '102329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102329'}, {'name': 'RHSA-2020:0036', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0036'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2020.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0861'}]
CVE State: PUBLISHED
Explain CVE-2017-0863
An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0864
An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0865
An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0866
An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01#announcements'}]
CVE State: PUBLISHED
Explain CVE-2017-0869
NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2018-01-01'}, {'name': '102374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102374'}, {'name': '1040106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040106'}]
CVE State: PUBLISHED
Explain CVE-2017-0870
An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807.
Affected Products: Android
References: [{'name': '102131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102131'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0871
An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159.
Affected Products: Android
References: [{'name': '102131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102131'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0872
A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0873
A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63316255.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0874
A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0876
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0877
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0878
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0879
An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-12-01'}]
CVE State: PUBLISHED
Explain CVE-2017-0880
A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012.
Affected Products: Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}]
CVE State: PUBLISHED
Explain CVE-2017-0881
An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server.
Affected Products: Zulip Server Versions 1.4.2 and below
References: [{'name': '97159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97159'}, {'tags': ['x_refsource_MISC'], 'url': 'https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f'}]
CVE State: PUBLISHED
Explain CVE-2017-0882
Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
Affected Products: GitLab Community Edition and GitLab Enterprise Edition 8.7.0 through 8.15.7, 8.16.0 through 8.16.7, 8.17.0 through 8.17.3
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/a70346fc6530aa28a98e4aa4cf0f40e2c3bcef6b'}, {'name': '97157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97157'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/issues/29661'}, {'tags': ['x_refsource_MISC'], 'url': 'https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/'}]
CVE State: PUBLISHED
Explain CVE-2017-0883
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-001'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/169680'}]
CVE State: PUBLISHED
Explain CVE-2017-0884
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-002'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/169680'}]
CVE State: PUBLISHED
Explain CVE-2017-0885
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-003'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/174524'}]
CVE State: PUBLISHED
Explain CVE-2017-0886
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-004'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/174524'}]
CVE State: PUBLISHED
Explain CVE-2017-0887
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-005'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/173622'}]
CVE State: PUBLISHED
Explain CVE-2017-0888
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/179073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-006'}, {'name': '97491', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97491'}]
CVE State: PUBLISHED
Explain CVE-2017-0889
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.
Affected Products: paperclip ruby gem
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/209430'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/thoughtbot/paperclip/pull/2435'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/713'}]
CVE State: PUBLISHED
Explain CVE-2017-0890
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/213227'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-007'}]
CVE State: PUBLISHED
Explain CVE-2017-0891
Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-008'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/216812'}]
CVE State: PUBLISHED
Explain CVE-2017-0892
Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/191979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-009'}]
CVE State: PUBLISHED
Explain CVE-2017-0893
Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2. Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-010'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/222838'}]
CVE State: PUBLISHED
Explain CVE-2017-0894
Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-011'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/218876'}]
CVE State: PUBLISHED
Explain CVE-2017-0895
Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.
Affected Products: Nextcloud Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/203594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-012'}]
CVE State: PUBLISHED
Explain CVE-2017-0896
Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this.
Affected Products: Zulip Server
References: [{'name': '[zulip-announce] 20170601 Zulip Server 1.5.2 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/#%21msg/zulip-announce/sUYeJv-fFmg/2TU2TLmNAwAJ'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/224210'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zulip/zulip/commit/1f48fa27672170bba3b9a97384905bb04c18761b'}]
CVE State: PUBLISHED
Explain CVE-2017-0897
ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.
Affected Products: ExpressionEngine
References: [{'name': '99242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/99242'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/215890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released'}]
CVE State: PUBLISHED
Explain CVE-2017-0898
Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.
Affected Products: Ruby
References: [{'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/212241'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': 'DSA-4031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-4031'}, {'name': '100862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100862'}, {'name': '1039363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039363'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/issues/3722'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/'}, {'name': 'GLSA-201710-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-18'}]
CVE State: PUBLISHED
Explain CVE-2017-0899
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
Affected Products: RubyGems
References: [{'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/226335'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100576'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}]
CVE State: PUBLISHED
Explain CVE-2017-0900
RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.
Affected Products: n/a
References: [{'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/243003'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': '100579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100579'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251'}]
CVE State: PUBLISHED
Explain CVE-2017-0901
RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.
Affected Products: RubyGems
References: [{'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': '42611', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/42611/'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/243156'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100580'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}]
CVE State: PUBLISHED
Explain CVE-2017-0902
RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.
Affected Products: RubyGems
References: [{'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100586'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/218088'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}]
CVE State: PUBLISHED
Explain CVE-2017-0903
RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.
Affected Products: RubyGems
References: [{'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/274990'}, {'name': 'DSA-4031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-4031'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/510b1638ac9bba3ceb7a5d73135dafff9e5bab49'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/10/09/2.6.14-released.html'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': '101275', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101275'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html'}]
CVE State: PUBLISHED
Explain CVE-2017-0904
The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.
Affected Products: private_address_check ruby gem
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/287245'}, {'tags': ['x_refsource_MISC'], 'url': 'https://edoverflow.com/2017/ruby-resolv-bug/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/issues/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/287835'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af'}]
CVE State: PUBLISHED
Explain CVE-2017-0905
The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.
Affected Products: recurly ruby gem
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/ruby-updates'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-ruby/commit/1bb0284d6e668b8b3d31167790ed6db1f6ccc4be'}]
CVE State: PUBLISHED
Explain CVE-2017-0906
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.
Affected Products: recurly python module
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-python/commit/049c74699ce93cf126feff06d632ea63fba36742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/python-updates'}]
CVE State: PUBLISHED
Explain CVE-2017-0907
The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.
Affected Products: recurly-api-client .NET library
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/net-updates'}]
CVE State: PUBLISHED
Explain CVE-2017-0909
The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.
Affected Products: private_address_check ruby gem
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288950'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/pull/3'}]
CVE State: PUBLISHED
Explain CVE-2017-0910
In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm.
Affected Products: Zulip Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0911
Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication information is passed back to the application using the registered custom URL scheme (typically twitterkit-<consumer-key>) on iOS. Because the callback handler did not verify the authenticity of the response, this step is vulnerable to forgery, potentially allowing attacker to associate a Twitter account with a third-party service.
Affected Products: Twitter Kit for iOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/290229'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71'}]
CVE State: PUBLISHED
Explain CVE-2017-0912
Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the lack sanitization, it is possible to inject arbitrary HTML code by manipulating the uploaded filename. Successful exploitation requires valid credentials to an account with "Edit" access to "Scheduling".
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814'}]
CVE State: PUBLISHED
Explain CVE-2017-0913
Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System Customization".
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301406'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814'}]
CVE State: PUBLISHED
Explain CVE-2017-0914
Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.
Affected Products: GitLab Community and Enterprise Editions
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/298176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution.
Affected Products: GitLab Community and Enterprise Editions
References: [{'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/298873'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.
Affected Products: GitLab Community and Enterprise Editions
References: [{'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/299473'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.
Affected Products: GitLab Community and Enterprise Editions
References: [{'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/299525'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.
Affected Products: GitLab Community and Enterprise Editions
References: [{'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0919
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301137'}]
CVE State: PUBLISHED
Explain CVE-2017-0920
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance.
Affected Products: GitLab Community and Enterprise Editions
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301336'}, {'name': 'DSA-4206', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4206'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0921
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://about.gitlab.com/2018/05/29/security-release-gitlab-10-dot-8-dot-2-released/'}]
CVE State: PUBLISHED
Explain CVE-2017-0922
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.
Affected Products: GitLab Community and Enterprise Editions
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301123'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}]
CVE State: PUBLISHED