deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5566
Published: 2017-03-21
Description: Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: http://cybellum.com/doubleagent-taking-full-control-antivirus/; http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/; http://www.securityfocus.com/bid/97022
CVE: CVE-2017-5567
Published: 2017-03-21
Description: Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: http://cybellum.com/doubleagent-taking-full-control-antivirus/; http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/; http://www.securityfocus.com/bid/97017
CVE: CVE-2017-6186
Published: 2017-03-21
Description: Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94
References: http://cybellum.com/doubleagent-taking-full-control-antivirus/; http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/; http://www.securityfocus.com/bid/97024
CVE: CVE-2017-6417
Published: 2017-03-21
Description: Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avira process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: http://cybellum.com/doubleagent-taking-full-control-antivirus/; http://cybellum.com/doubleagentzero-day-code-injection-and-persistence-technique/; http://www.securityfocus.com/bid/97021
CVE: CVE-2017-7214
Published: 2017-03-21
Description: An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: http://www.securityfocus.com/bid/96998; https://access.redhat.com/errata/RHSA-2017:1508; https://access.redhat.com/errata/RHSA-2017:1595
CVE: CVE-2017-7215
Published: 2017-03-21
Description: Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.fortiguard.com/advisory/FG-VD-17-021; http://www.securityfocus.com/bid/96997; https://github.com/MISP/MISP/commit/3630a8b1e1cd99862867fe72ffa1ff51e4d9c09f
CVE: CVE-2017-5874
Published: 2017-03-22
Description: CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072; http://www.securityfocus.com/bid/96999; http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10072
CVE: CVE-2017-7222
Published: 2017-03-22
Description: A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by modifying 'window_title' in the application configuration. This requires privileged access to MantisBT configuration management pages (i.e., administrator access rights) or altering the system configuration file (config_inc.php).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://github.com/mantisbt/mantisbt/commit/a85b0b96c8ebe3e010d0d016cf88ab3c8bfc196a; https://mantisbt.org/bugs/view.php?id=22266; http://github.com/mantisbt/mantisbt/commit/a85b0b96c8ebe3e010d0d016cf88ab3c8bfc196a
CVE: CVE-2014-9832
Published: 2017-03-22
Description: Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9833
Published: 2017-03-22
Description: Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9834
Published: 2017-03-22
Description: Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9835
Published: 2017-03-22
Description: Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9836
Published: 2017-03-22
Description: ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9838
Published: 2017-03-22
Description: magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2016/06/02/13
CVE: CVE-2014-9839
Published: 2017-03-22
Description: magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2014-9840
Published: 2017-03-22
Description: ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/12/24/1; http://www.openwall.com/lists/oss-security/2016/06/02/13; http://www.openwall.com/lists/oss-security/2014/12/24/1
CVE: CVE-2017-6970
Published: 2017-03-22
Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78
References: https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/; https://www.alienvault.com/forums/discussion/8325/; https://www.alienvault.com/forums/discussion/8698
CVE: CVE-2017-6971
Published: 2017-03-22
Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/; https://www.alienvault.com/forums/discussion/8325/; https://www.alienvault.com/forums/discussion/8698
CVE: CVE-2017-7223
Published: 2017-03-22
Description: GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=20898; https://security.gentoo.org/glsa/201801-01
CVE: CVE-2017-7224
Published: 2017-03-22
Description: The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://www.securityfocus.com/bid/97277; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=20892
CVE: CVE-2017-7225
Published: 2017-03-22
Description: The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/97275; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=20891
CVE: CVE-2017-7226
Published: 2017-03-22
Description: The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://sourceware.org/bugzilla/show_bug.cgi?id=20905; https://sourceware.org/bugzilla/show_bug.cgi?id=20905
CVE: CVE-2017-7227
Published: 2017-03-22
Description: GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97209; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=20906
CVE: CVE-2017-5673
Published: 2017-03-22
Description: In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php, crypsisb3/layouts/message/item/default.php, crypsisb3/layouts/message/item/top/default.php, and crypsisb3/layouts/message/item/bottom/default.php. This is fixed in 5.0.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html; http://www.securityfocus.com/bid/101677; http://www.fox.ra.it/technical-articles/kunena-vulnerability-2017-01.html
CVE: CVE-2017-7230
Published: 2017-03-22
Description: A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97195; https://www.exploit-db.com/exploits/41666/; http://www.securityfocus.com/bid/97195
CVE: CVE-2017-7231
Published: 2017-03-22
Description: pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issue affects the 'process()' function of the 'pngdefry.c' source file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97037; https://github.com/Tatsh/pngdefry/issues/1; http://www.securityfocus.com/bid/97037
CVE: CVE-2017-3851
Published: 2017-03-22
Description: A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by submitting crafted requests to the CAF web interface. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52302.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.securityfocus.com/bid/97013; http://www.securitytracker.com/id/1038106; http://www.securitytracker.com/id/1038107
CVE: CVE-2017-3852
Published: 2017-03-22
Description: A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. The vulnerability is due to insufficient input validation of user-supplied application packages. An attacker who can upload a malicious package within Cisco IOx could exploit the vulnerability to modify arbitrary files. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52317.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/97014; http://www.securitytracker.com/id/1038108; http://www.securitytracker.com/id/1038109
CVE: CVE-2017-3853
Published: 2017-03-22
Description: A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cause a stack overflow that could allow remote code execution with root privileges in the virtual instance running on an affected device. The vulnerability is due to insufficient bounds checking in the DMo process. An attacker could exploit this vulnerability by sending crafted packets that are forwarded to the DMo process for evaluation. The impacts of a successful exploit are limited to the scope of the virtual instance and do not impact the router that is hosting Cisco IOx. This vulnerability affects the following Cisco 800 Series Industrial Integrated Services Routers: Cisco IR809 and Cisco IR829. Cisco IOx Releases 1.0.0.0 and 1.1.0.0 are vulnerable. Cisco Bug IDs: CSCuy52330.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/97011; http://www.securitytracker.com/id/1038105; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-iox
CVE: CVE-2017-3856
Published: 2017-03-22
Description: A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. An attacker could exploit this vulnerability by sending a high number of requests to the web user interface of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have access to the management interface of the affected software, which is typically connected to a restricted management network. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, if the web user interface of the software is enabled. By default, the web user interface is not enabled. Cisco Bug IDs: CSCup70353.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-400
References: http://www.securityfocus.com/bid/97007; http://www.securitytracker.com/id/1038101; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-webui
CVE: CVE-2017-3857
Published: 2017-03-22
Description: A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation of L2TP packets. An attacker could exploit this vulnerability by sending a crafted L2TP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or Cisco IOS XE Software if the L2TP feature is enabled for the device and the device is configured as an L2TP Version 2 (L2TPv2) or L2TP Version 3 (L2TPv3) endpoint. By default, the L2TP feature is not enabled. Cisco Bug IDs: CSCuy82078.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-400
References: http://www.securityfocus.com/bid/97010; http://www.securitytracker.com/id/1038100; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-l2tp
CVE: CVE-2017-3858
Published: 2017-03-22
Description: A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the affected web page parameter. The user must be authenticated to access the affected parameter. A successful exploit could allow the attacker to execute commands with root privileges. This vulnerability affects Cisco devices running Cisco IOS XE Software Release 16.2.1, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration interface was introduced in the Denali 16.2 Release of Cisco IOS XE Software. The web-based administration interface in earlier releases of Cisco IOS XE Software is not affected by this vulnerability. Cisco Bug IDs: CSCuy83069.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/97009; http://www.securitytracker.com/id/1038102; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-xeci
CVE: CVE-2017-3859
Published: 2017-03-22
Description: A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted DHCP packet for Zero Touch Provisioning. An attacker could exploit this vulnerability by sending a specially crafted DHCP packet to an affected device. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco ASR 920 Series Aggregation Services Routers that are running an affected release of Cisco IOS XE Software (3.13 through 3.18) and are listening on the DHCP server port. By default, the devices do not listen on the DHCP server port. Cisco Bug IDs: CSCuy56385.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134, CWE-134
References: http://www.securityfocus.com/bid/97008; http://www.securitytracker.com/id/1038104; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-ztp
CVE: CVE-2017-3864
Published: 2017-03-22
Description: A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An attacker could exploit this vulnerability by sending crafted DHCP packets to an affected device that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affected device, resulting in a DoS condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or IOS XE Software and using a specific DHCP client configuration. Cisco Bug IDs: CSCuu43892.
CVSS Score: 8.6 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/97012; http://www.securitytracker.com/id/1038103; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc
CVE: CVE-2017-6972
Published: 2017-03-22
Description: AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-273
References: http://www.securityfocus.com/bid/97016; https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/; https://www.alienvault.com/forums/discussion/8698