deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4891
Published: 2017-04-12
Description: Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000196.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4892
Published: 2017-04-12
Description: Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000197.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4893
Published: 2017-04-12
Description: SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000198.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4894
Published: 2017-04-12
Description: SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000199.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4895
Published: 2017-04-12
Description: SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000200.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4896
Published: 2017-04-12
Description: SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN80157683/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000201.html; http://www.securityfocus.com/bid/93475
CVE: CVE-2016-4897
Published: 2017-04-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN32504719/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000202.html; http://www.securityfocus.com/bid/93477
CVE: CVE-2016-5313
Published: 2017-04-12
Description: Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/139006/Symantec-Web-Gateway-5.2.2-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2016/Oct/24; http://www.securityfocus.com/bid/93284
CVE: CVE-2016-5856
Published: 2017-04-12
Description: Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01; https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=0c0622914ba53cdcb6e79e85f64bfdf7762c0368
CVE: CVE-2016-6348
Published: 2017-04-12
Description: JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1372129; https://bugzilla.redhat.com/show_bug.cgi?id=1372129
CVE: CVE-2017-5936
Published: 2017-04-12
Description: OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2017/02/09/3; http://www.securityfocus.com/bid/96182; http://www.ubuntu.com/usn/USN-3195-1
CVE: CVE-2017-7279
Published: 2017-04-12
Description: An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-565
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
CVE: CVE-2017-7280
Published: 2017-04-12
Description: An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a popen function. This allows for remote code execution by sending a specially crafted user variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
CVE: CVE-2017-7281
Published: 2017-04-12
Description: An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension, contents, and path, leading to remote code execution, aka Unrestricted File Upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
CVE: CVE-2017-7284
Published: 2017-04-12
Description: An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/; https://rhinosecuritylabs.com/research/remote-code-execution-bug-hunting-chapter-1/
CVE: CVE-2017-7700
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by ensuring a nonzero record size.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97631; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13478
CVE: CVE-2017-7701
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97632; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13557
CVE: CVE-2017-7702
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding length validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97633; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13477
CVE: CVE-2017-7703
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/97636; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13466
CVE: CVE-2017-7704
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97634; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13453
CVE: CVE-2017-7705
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rpcrdma.c by correctly checking for going beyond the maximum offset.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97630; http://www.securitytracker.com/id/1038262; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13558
CVE: CVE-2017-7745
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97627; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13578; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=acd8e1a9b17ad274bea1e01e10e4481508a1cbf0
CVE: CVE-2017-7746
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97635; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13576; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=58e69cc769dea24b721abd8a29f9eedc11024b7e
CVE: CVE-2017-7747
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-packetbb.c by restricting additions to the protocol tree.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97638; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13559; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=5cfd52d6629cf8a7ab67c6bacd3431a964f43584
CVE: CVE-2017-7748
Published: 2017-04-12
Description: In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by adding a length check.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/97628; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13581; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f55cbcde2c8f74b652add4450b0592082eb6acff
CVE: CVE-2017-7626
Published: 2017-04-13
Description: The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://extensions.joomla.org/extension/smart-related-articles/; https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f; https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection
CVE: CVE-2017-7627
Published: 2017-04-13
Description: The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).
CVSS Score: 5.3 (MEDIUM)
References: https://extensions.joomla.org/extension/smart-related-articles/; https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f; https://extensions.joomla.org/extension/smart-related-articles/
CVE: CVE-2017-7628
Published: 2017-04-13
Description: The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://extensions.joomla.org/extension/smart-related-articles/; https://gist.github.com/anonymous/14576258b0e66bb25ca4b7ca1638e51f; https://vel.joomla.org/live-vel/1952-smart-related-articles-1-1-sql-injection
CVE: CVE-2012-6697
Published: 2017-04-13
Description: InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.debian.org/security/2015/dsa-3226; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880; https://github.com/inspircd/inspircd/commit/58c893e834ff20495d00770922
CVE: CVE-2014-2710
Published: 2017-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the (1) login page (index.php) or (2) login form (loginform-inc.php).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/136731/Oliver-1.3.0-1.3.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Apr/66; http://www.securityfocus.com/archive/1/538132/100/0/threaded
CVE: CVE-2015-1838
Published: 2017-04-13
Description: modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html; https://bugzilla.redhat.com/show_bug.cgi?id=1212784; https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html
CVE: CVE-2015-1839
Published: 2017-04-13
Description: modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-19
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175568.html; https://bugzilla.redhat.com/show_bug.cgi?id=1212788; https://docs.saltstack.com/en/latest/topics/releases/2014.7.4.html
CVE: CVE-2015-6674
Published: 2017-04-13
Description: Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplete fix of CVE-2012-1836.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2015/dsa-3226; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780880; https://security.gentoo.org/glsa/201512-13
CVE: CVE-2015-7565
Published: 2017-04-13
Description: Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://emberjs.com/blog/2016/01/14/security-releases-ember-1-11-4-1-12-2-1-13-12-2-0-3-2-1-2-2-2-1.html; https://groups.google.com/forum/#%21topic/ember-security/OfyQkoSuppY; http://emberjs.com/blog/2016/01/14/security-releases-ember-1-11-4-1-12-2-1-13-12-2-0-3-2-1-2-2-2-1.html
CVE: CVE-2015-7740
Published: 2017-04-13
Description: Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460486.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460486.htm
CVE: CVE-2015-8107
Published: 2017-04-13
Description: Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: http://seclists.org/oss-sec/2015/q4/284; http://www.securityfocus.com/bid/77595; http://seclists.org/oss-sec/2015/q4/284
CVE: CVE-2015-8223
Published: 2017-04-13
Description: Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to the camera driver.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-275
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460489.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460489.htm
CVE: CVE-2015-8270
Published: 2017-04-13
Description: The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3850; http://www.securityfocus.com/bid/95126; http://www.talosintelligence.com/reports/TALOS-2016-0066/
CVE: CVE-2015-8271
Published: 2017-04-13
Description: The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-123
References: http://www.debian.org/security/2017/dsa-3850; http://www.securityfocus.com/bid/95125; http://www.talosintelligence.com/reports/TALOS-2016-0067/
CVE: CVE-2015-8272
Published: 2017-04-13
Description: RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3850; http://www.securityfocus.com/bid/95123; http://www.talosintelligence.com/reports/TALOS-2016-0068/
CVE: CVE-2015-8282
Published: 2017-04-13
Description: SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2016/Jan/58; https://www.exploit-db.com/exploits/39266/
CVE: CVE-2015-8283
Published: 2017-04-13
Description: Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2016/Jan/58; https://www.exploit-db.com/exploits/39266/
CVE: CVE-2015-8284
Published: 2017-04-13
Description: SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2016/Jan/58; https://www.exploit-db.com/exploits/39266/
CVE: CVE-2015-8864
Published: 2017-04-13
Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG, a different vulnerability than CVE-2016-4068.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-updates/2016-08/msg00078.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html; http://lists.opensuse.org/opensuse-updates/2016-08/msg00095.html
CVE: CVE-2016-10117
Published: 2017-04-13
Description: Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10118
Published: 2017-04-13
Description: Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10119
Published: 2017-04-13
Description: Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10120
Published: 2017-04-13
Description: Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10121
Published: 2017-04-13
Description: Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10122
Published: 2017-04-13
Description: Firejail does not properly clean environment variables, which allows local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-10123
Published: 2017-04-13
Description: Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/05/4; http://www.openwall.com/lists/oss-security/2017/01/06/2; http://www.openwall.com/lists/oss-security/2017/01/05/4
CVE: CVE-2016-1132
Published: 2017-04-13
Description: Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN47951769/index.html; http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000004.html; http://jvn.jp/en/jp/JVN47951769/index.html
CVE: CVE-2016-1914
Published: 2017-04-13
Description: Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName parameter to (1) mydevice/client/image, (2) admin/client/image, (3) myapps/client/image, (4) ssam/client/image, or (5) all/client/image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2016/Feb/95; http://security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf; http://support.blackberry.com/kb/articleDetail?articleNumber=000038033