deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-17854
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb7f0f989ca7de1153bd128a40a71709e339fa03; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/bb7f0f989ca7de1153bd128a40a71709e339fa03
CVE: CVE-2017-17855
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=179d1c5602997fef5a940c6ddcf31212cbfebd14; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/179d1c5602997fef5a940c6ddcf31212cbfebd14
CVE: CVE-2017-17856
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a5ec6ae161d72f01411169a938fa5f8baea16e8f; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/a5ec6ae161d72f01411169a938fa5f8baea16e8f
CVE: CVE-2017-17857
Published: 2017-12-27
Description: The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea25f914dc164c8d56b36147ecc86bc65f83c469; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/ea25f914dc164c8d56b36147ecc86bc65f83c469
CVE: CVE-2017-17859
Published: 2017-12-27
Description: Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside XSLT data in one part of an MHTML file. Specifically, JavaScript code in another part of this MHTML file does not have a document.domain value corresponding to the domain that is hosting the MHTML file, but instead has a document.domain value corresponding to an arbitrary URL within the content of the MHTML file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxss.html; https://poctestblog.blogspot.com/2017/12/samsung-internet-browser-sop-bypassuxss.html
CVE: CVE-2017-17862
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c131187db2d3fa2f8bf32fdf4e9a4ef805168467; http://www.securityfocus.com/bid/102325; http://www.securitytracker.com/id/1040057
CVE: CVE-2017-17863
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer overflow or invalid memory access) or possibly have unspecified other impact.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/102321; http://www.securitytracker.com/id/1040058; https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch?h=stretch-security
CVE: CVE-2017-17864
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102320; http://www.securitytracker.com/id/1040059; https://anonscm.debian.org/cgit/kernel/linux.git/commit/?h=stretch-security&id=ad775f6ff7eebb93eedc2f592bc974260e7757b0
CVE: CVE-2017-17866
Published: 2017-12-27
Description: pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.ghostscript.com/cgi-bin/findgit.cgi?520cc26d18c9ee245b56e9e91f9d4fcae02be5f0; https://bugs.ghostscript.com/show_bug.cgi?id=698699; https://www.debian.org/security/2018/dsa-4334
CVE: CVE-2017-17868
Published: 2017-12-27
Description: In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2017-17869
Published: 2017-12-27
Description: The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2017-17870
Published: 2017-12-27
Description: The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection; https://www.exploit-db.com/exploits/43323/; https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection
CVE: CVE-2017-17871
Published: 2017-12-27
Description: The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43329/; https://www.exploit-db.com/exploits/43329/
CVE: CVE-2017-17872
Published: 2017-12-27
Description: The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43330/; https://www.exploit-db.com/exploits/43330/
CVE: CVE-2017-17873
Published: 2017-12-27
Description: Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43316/; https://www.exploit-db.com/exploits/43316/
CVE: CVE-2017-17874
Published: 2017-12-27
Description: Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/43315/; https://www.exploit-db.com/exploits/43315/
CVE: CVE-2017-17875
Published: 2017-12-27
Description: The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/43393/; https://www.exploit-db.com/exploits/43393/
CVE: CVE-2017-17876
Published: 2017-12-27
Description: Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-275
References: https://www.exploit-db.com/exploits/43394/; https://www.exploit-db.com/exploits/43394/
CVE: CVE-2017-17877
Published: 2017-12-27
Description: An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port 22 over the internet (with stateless address autoconfiguration) by default, which makes it easier for remote attackers to obtain access by guessing 24 bits of the MAC address and attempting a root login. This can be exploited in conjunction with CVE-2017-17878.
CVSS Score: 9.8 (CRITICAL)
References: https://blogger.davidmanouchehri.com/2017/12/steam-link-security-remotely-insecure.html; https://github.com/ValveSoftware/steamlink-sdk#ssh-access; https://github.com/ValveSoftware/steamlink-sdk/issues/119
CVE: CVE-2017-17878
Published: 2017-12-27
Description: An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="des" setting).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: https://blogger.davidmanouchehri.com/2017/12/steam-link-security-truncated-password.html; https://github.com/ValveSoftware/steamlink-sdk/issues/101; https://github.com/ValveSoftware/steamlink-sdk/issues/110
CVE: CVE-2017-17879
Published: 2017-12-27
Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102305; https://github.com/ImageMagick/ImageMagick/issues/906; https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html
CVE: CVE-2017-17880
Published: 2017-12-27
Description: In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102317; https://github.com/ImageMagick/ImageMagick/issues/907; http://www.securityfocus.com/bid/102317
CVE: CVE-2017-17881
Published: 2017-12-27
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/878; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/878
CVE: CVE-2017-17882
Published: 2017-12-27
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/880; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/880
CVE: CVE-2017-17883
Published: 2017-12-27
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/877; https://github.com/ImageMagick/ImageMagick/issues/877
CVE: CVE-2017-17884
Published: 2017-12-27
Description: In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/902; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/902
CVE: CVE-2017-17885
Published: 2017-12-27
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/879; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/879
CVE: CVE-2017-17886
Published: 2017-12-27
Description: In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/874; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/874
CVE: CVE-2017-17887
Published: 2017-12-27
Description: In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/903; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/903
CVE: CVE-2017-17888
Published: 2017-12-27
Description: cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary OS commands via crafted multipart/form-data content, a different vulnerability than CVE-2017-9097.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/ezelf/AntiWeb_testing-Suite/tree/master/RCE; https://www.seebug.org/vuldb/ssvid-96555; https://www.youtube.com/watch?v=HdkZA1DO08Y
CVE: CVE-2017-17891
Published: 2017-12-27
Description: Readymade Video Sharing Script has CSRF via user-profile-edit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE: CVE-2017-17892
Published: 2017-12-27
Description: Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE: CVE-2017-17893
Published: 2017-12-27
Description: Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade-Video-Sharing-Script.md
CVE: CVE-2017-17894
Published: 2017-12-27
Description: Readymade Job Site Script has CSRF via the /job URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE: CVE-2017-17895
Published: 2017-12-27
Description: Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE: CVE-2017-17896
Published: 2017-12-27
Description: Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/ready-made-job-site-script.md
CVE: CVE-2017-17897
Published: 2017-12-27
Description: SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c; https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c
CVE: CVE-2017-17898
Published: 2017-12-27
Description: Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c; https://github.com/Dolibarr/dolibarr/commit/6a62e139604dbbd5729e57df2433b37a5950c35c; https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c
CVE: CVE-2017-17899
Published: 2017-12-27
Description: SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c; https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c
CVE: CVE-2017-17900
Published: 2017-12-27
Description: SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c; https://github.com/Dolibarr/dolibarr/commit/4a5988accbb770b74105baacd5a[PII_REDACTED]28c
CVE: CVE-2017-17903
Published: 2017-12-27
Description: FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md
CVE: CVE-2017-17904
Published: 2017-12-27
Description: FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md
CVE: CVE-2017-17905
Published: 2017-12-27
Description: PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE: CVE-2017-17906
Published: 2017-12-27
Description: PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE: CVE-2017-17907
Published: 2017-12-27
Description: PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Car-Rental-Script.md
CVE: CVE-2017-17908
Published: 2017-12-27
Description: PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md
CVE: CVE-2017-17909
Published: 2017-12-27
Description: PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Responsive%20Realestate%20Script.md
CVE: CVE-2017-17911
Published: 2017-12-27
Description: packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.openbugbounty.org/reports/278503/; https://www.openbugbounty.org/reports/278503/
CVE: CVE-2017-17912
Published: 2017-12-27
Description: In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/0d871e813a4f; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-17913
Published: 2017-12-27
Description: In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/6dda3c33f35f; https://sourceforge.net/p/graphicsmagick/bugs/536/; https://usn.ubuntu.com/4266-1/
CVE: CVE-2017-17914
Published: 2017-12-27
Description: In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: https://github.com/ImageMagick/ImageMagick/issues/908; https://lists.debian.org/debian-lts-announce/2018/01/msg00000.html; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-17915
Published: 2017-12-27
Description: In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/1721f1b7e67a; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-17924
Published: 2017-12-27
Description: PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/Professional-Service-Script.md