deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14039
Published: 2017-08-30
Description: A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-4013; http://www.securityfocus.com/bid/100550; https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
CVE: CVE-2017-14040
Published: 2017-08-30
Description: An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-4013; http://www.securityfocus.com/bid/100553; https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/
CVE: CVE-2017-14041
Published: 2017-08-30
Description: A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-4013; http://www.securityfocus.com/bid/100555; https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/
CVE: CVE-2017-14042
Published: 2017-08-30
Description: A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d; http://www.securityfocus.com/bid/100556; https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/
CVE: CVE-2017-13670
Published: 2017-08-31
Description: In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajax_upload.php, as demonstrated by a ZIP archive that contains a .php file.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE/blackcat_cms_RCE.md; https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE/blackcat_cms_RCE.md
CVE: CVE-2017-14048
Published: 2017-08-31
Description: BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted new_modulename parameter to backend/addons/ajax_create.php. NOTE: this can be exploited via CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE2/blackcat_cms_RCE2.md; https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE2/blackcat_cms_RCE2.md
CVE: CVE-2017-14049
Published: 2017-08-31
Description: In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_xss/blackcat_cms_xss.md; https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_xss/blackcat_cms_xss.md
CVE: CVE-2017-14050
Published: 2017-08-31
Description: In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE3/blackcat_cms_RCE3.md; https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE3/blackcat_cms_RCE3.md
CVE: CVE-2017-14051
Published: 2017-08-31
Description: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-190
References: http://www.securityfocus.com/bid/100571; https://bugzilla.kernel.org/show_bug.cgi?id=194061; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
CVE: CVE-2017-11158
Published: 2017-08-31
Description: Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-426
References: https://www.synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive; https://www.synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive
CVE: CVE-2016-0713
Published: 2017-08-31
Description: Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229; https://lists.cloudfoundry.org/archives/list/cf-dev%40lists.cloudfoundry.org/thread/VWDLUNTDKW5CW5JWEM5BOHLJ3J32TAFF/; https://bosh.io/releases/github.com/cloudfoundry/cf-release?version=229
CVE: CVE-2017-13708
Published: 2017-08-31
Description: Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/143949/VX-Search-Enterprise-10.0.14-Buffer-Overflow.html; http://packetstormsecurity.com/files/143949/VX-Search-Enterprise-10.0.14-Buffer-Overflow.html
CVE: CVE-2017-1444
Published: 2017-08-31
Description: IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128110.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg22005834; https://exchange.xforce.ibmcloud.com/vulnerabilities/128110; http://www-01.ibm.com/support/docview.wss?uid=swg22005834
CVE: CVE-2017-1447
Published: 2017-08-31
Description: IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg22005834; https://exchange.xforce.ibmcloud.com/vulnerabilities/128172; http://www-01.ibm.com/support/docview.wss?uid=swg22005834
CVE: CVE-2017-1449
Published: 2017-08-31
Description: IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128174.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://www-01.ibm.com/support/docview.wss?uid=swg22005834; https://exchange.xforce.ibmcloud.com/vulnerabilities/128174; http://www-01.ibm.com/support/docview.wss?uid=swg22005834
CVE: CVE-2017-1450
Published: 2017-08-31
Description: IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128177.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www-01.ibm.com/support/docview.wss?uid=swg22005834; https://exchange.xforce.ibmcloud.com/vulnerabilities/128177; http://www-01.ibm.com/support/docview.wss?uid=swg22005834
CVE: CVE-2017-14054
Published: 2017-08-31
Description: In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100627; https://github.com/FFmpeg/FFmpeg/commit/124eb202e[PII_REDACTED]4f6268efc98131f19fa49
CVE: CVE-2017-14055
Published: 2017-08-31
Description: In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100626; https://github.com/FFmpeg/FFmpeg/commit/4f05e2e2dc1a89f38cd9f0960a6561083d714f1e
CVE: CVE-2017-14056
Published: 2017-08-31
Description: In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100628; https://github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de
CVE: CVE-2017-14057
Published: 2017-08-31
Description: In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100630; https://github.com/FFmpeg/FFmpeg/commit/7f9ec5593e04827249e7aeb466da06a98a0d7329
CVE: CVE-2017-14058
Published: 2017-08-31
Description: In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100629; https://github.com/FFmpeg/FFmpeg/commit/7ba100d3e6e8b1e5d5342feb960a7f081d6e15af
CVE: CVE-2017-14059
Published: 2017-08-31
Description: In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: http://www.debian.org/security/2017/dsa-3996; http://www.securityfocus.com/bid/100631; https://github.com/FFmpeg/FFmpeg/commit/7e80b63ecd259d69d383623e75b318bf2bd491f6
CVE: CVE-2017-14060
Published: 2017-08-31
Description: In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ImageMagick/ImageMagick/issues/710; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-14061
Published: 2017-08-31
Description: Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://gitlab.com/libidn/libidn2/blob/master/NEWS; https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305; https://gitlab.com/libidn/libidn2/blob/master/NEWS
CVE: CVE-2017-14062
Published: 2017-08-31
Description: Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3988; https://gitlab.com/libidn/libidn2/blob/master/NEWS; https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd
CVE: CVE-2017-14063
Published: 2017-08-31
Description: Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://openwall.com/lists/oss-security/2017/08/31/4; https://access.redhat.com/errata/RHSA-2018:2669; https://github.com/AsyncHttpClient/async-http-client/issues/1455
CVE: CVE-2017-14064
Published: 2017-08-31
Description: Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100890; http://www.securitytracker.com/id/1039363; http://www.securitytracker.com/id/1042004
CVE: CVE-2017-14069
Published: 2017-08-31
Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.sstrunk.com/cve/nowarn.html; https://raw.githubusercontent.com/zhangyuhang2017/cve/master/1.txt; http://www.sstrunk.com/cve/nowarn.html
CVE: CVE-2017-14070
Published: 2017-08-31
Description: Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/zhangyuhang2017/cve/blob/master/4.txt; https://github.com/zhangyuhang2017/cve/blob/master/4.txt
CVE: CVE-2017-14076
Published: 2017-08-31
Description: SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.sstrunk.com/cve/linksmanage.html; http://www.sstrunk.com/cve/linksmanage.html
CVE: CVE-2016-10508
Published: 2017-08-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/JamesHeinrich/phpThumb/commit/162ae709162be3e6c4d942313a278ca5cbdb8e92; https://github.com/JamesHeinrich/phpThumb/commit/162ae709162be3e6c4d942313a278ca5cbdb8e92
CVE: CVE-2016-10509
Published: 2017-08-31
Description: SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/opencart/opencart/commit/b95044da6ac608e7239f7949ff21d3b65be68f82; https://github.com/opencart/opencart/issues/4114; https://github.com/opencart/opencart/commit/b95044da6ac608e7239f7949ff21d3b65be68f82
CVE: CVE-2016-10510
Published: 2017-08-31
Description: Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows remote attackers to inject arbitrary web script or HTML by bypassing the strip_image_tags protection mechanism in system/classes/Kohana/Security.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://advisory.checkmarx.net/advisory/CX-2016-4451; https://github.com/kohana/kohana/issues/107; https://github.com/kohana/kohana/releases/tag/v3.3.6
CVE: CVE-2017-0899
Published: 2017-08-31
Description: RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-150, CWE-94
References: http://blog.rubygems.org/2017/08/27/2.6.13-released.html; http://www.securityfocus.com/bid/100576; http://www.securitytracker.com/id/1039249
CVE: CVE-2017-0900
Published: 2017-08-31
Description: RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://blog.rubygems.org/2017/08/27/2.6.13-released.html; http://www.securityfocus.com/bid/100579; http://www.securitytracker.com/id/1039249
CVE: CVE-2017-0901
Published: 2017-08-31
Description: RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-20
References: http://blog.rubygems.org/2017/08/27/2.6.13-released.html; http://www.securityfocus.com/bid/100580; http://www.securitytracker.com/id/1039249
CVE: CVE-2017-0902
Published: 2017-08-31
Description: RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.
CVSS Score: 8.1 (HIGH)
CWE: CWE-350, CWE-346
References: http://blog.rubygems.org/2017/08/27/2.6.13-released.html; http://www.securityfocus.com/bid/100586; http://www.securitytracker.com/id/1039249
CVE: CVE-2016-5795
Published: 2017-08-31
Description: An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.
CVSS Score: 7.3 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/100558; https://ics-cert.us-cert.gov/advisories/ICSA-17-150-01; http://www.securityfocus.com/bid/100558
CVE: CVE-2017-7855
Published: 2017-08-31
Description: In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious; https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious
CVE: CVE-2014-8675
Published: 2017-08-31
Description: Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html; http://seclists.org/fulldisclosure/2015/Jul/44; http://www.securityfocus.com/bid/75726
CVE: CVE-2014-8676
Published: 2017-08-31
Description: Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in a URL path parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html; http://seclists.org/fulldisclosure/2015/Jul/44; http://www.securityfocus.com/bid/75726
CVE: CVE-2014-8677
Published: 2017-08-31
Description: The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and smarty/templates_c is not writable to execute arbitrary php code via a crafted database name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94, CWE-284
References: http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html; http://seclists.org/fulldisclosure/2015/Jul/44; http://www.securityfocus.com/bid/75726
CVE: CVE-2015-5695
Published: 2017-08-31
Description: Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.openstack.org/pipermail/openstack/2015-July/013548.html; http://www.openwall.com/lists/oss-security/2015/07/28/11; http://www.openwall.com/lists/oss-security/2015/07/29/6
CVE: CVE-2015-5958
Published: 2017-08-31
Description: phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/132865/phpFileManager-0.9.8-Remote-Command-Execution.html; http://packetstormsecurity.com/files/132865/phpFileManager-0.9.8-Remote-Command-Execution.html
CVE: CVE-2015-7700
Published: 2017-08-31
Description: Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://pmt.sourceforge.net/pngcrush/changelog.html; https://sourceforge.net/p/pmt/news/2015/10/pngcrush-1787-released/; http://pmt.sourceforge.net/pngcrush/changelog.html
CVE: CVE-2015-7711
Published: 2017-08-31
Description: Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the h parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://karmainsecurity.com/KIS-2015-07; http://packetstormsecurity.com/files/134217/ATutor-2.2-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2015/Nov/12