deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-1203
Published: 2017-10-24
Description: The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://seclists.org/fulldisclosure/2014/Jan/32; http://seclists.org/fulldisclosure/2014/Jan/32
CVE: CVE-2013-3734
Published: 2017-10-24
Description: The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1) man-in-the-middle attackers to obtain sensitive information by leveraging failure to use SSL or (2) attackers to obtain sensitive information by reading the HTML source code.  NOTE: the vendor says that this does not cross a trust boundary and that it is recommended best-practice that SSL is configured for the administrative console
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-255
References: http://www.securityfocus.com/bid/60429; https://bugzilla.redhat.com/show_bug.cgi?id=971637; https://www.halock.com/blog/cve-2013-3734-jboss-administration-console-password-returned-response/
CVE: CVE-2015-5170
Published: 2017-10-24
Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request forgery (CSRF) attacks on PWS and log a user into an arbitrary account by leveraging lack of CSRF checks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/101579; https://pivotal.io/security/cve-2015-5170-5173; http://www.securityfocus.com/bid/101579
CVE: CVE-2015-5171
Published: 2017-10-24
Description: The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://pivotal.io/security/cve-2015-5170-5173; https://pivotal.io/security/cve-2015-5170-5173
CVE: CVE-2015-5172
Published: 2017-10-24
Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-640
References: https://pivotal.io/security/cve-2015-5170-5173; https://pivotal.io/security/cve-2015-5170-5173
CVE: CVE-2015-5173
Published: 2017-10-24
Description: Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://pivotal.io/security/cve-2015-5170-5173; https://pivotal.io/security/cve-2015-5170-5173
CVE: CVE-2017-14695
Published: 2017-10-24
Description: Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html; http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html; https://bugzilla.redhat.com/show_bug.cgi?id=1500748
CVE: CVE-2017-14696
Published: 2017-10-24
Description: SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2017-10/msg00073.html; http://lists.opensuse.org/opensuse-updates/2017-10/msg00075.html; https://bugzilla.redhat.com/show_bug.cgi?id=1500742
CVE: CVE-2017-15186
Published: 2017-10-24
Description: Double free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial of service via a crafted AVI file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: http://www.openwall.com/lists/oss-security/2017/10/20/4; http://www.securityfocus.com/bid/101518; https://www.debian.org/security/2017/dsa-4049
CVE: CVE-2017-15222
Published: 2017-10-24
Description: Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://www.securityfocus.com/bid/101602; https://www.exploit-db.com/exploits/43025/; https://www.exploit-db.com/exploits/43448/
CVE: CVE-2017-15223
Published: 2017-10-24
Description: Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (memory consumption) via unspecified vectors, possibly triggering an infinite loop.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-835
References: https://www.exploit-db.com/exploits/43026/; https://www.exploit-db.com/exploits/43026/
CVE: CVE-2016-10517
Published: 2017-10-24
Description: networking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for POST and Host: strings, which are not valid in the Redis protocol (but commonly occur when an attack triggers an HTTP request to the Redis TCP port).
CVSS Score: 7.4 (HIGH)
CWE: CWE-254
References: http://www.securityfocus.com/bid/101572; https://github.com/antirez/redis/commit/874804da0c014a7d704b3d285aa500098a931f50; https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES
CVE: CVE-2017-15863
Published: 2017-10-24
Description: Cross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress via the date1 or date2 parameter to wp-admin/options-general.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.openwall.net/full-disclosure/2017/06/02/3; https://wordpress.org/plugins/wp-noexternallinks/#developers; http://lists.openwall.net/full-disclosure/2017/06/02/3
CVE: CVE-2017-15867
Published: 2017-10-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, (3) user_id, (4) username, (5) country_name, (6) browser, (7) operating_system, or (8) ip_address parameter to admin/partials/listing/listing.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741; https://wpvulndb.com/vulnerabilities/8939; https://github.com/faiyazalam/WordPress-plugin-user-login-history/commit/519341a7dece59e2c589b908a636e6cf12a61741
CVE: CVE-2017-15871
Published: 2017-10-24
Description: The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression "function()" substring, as demonstrated by a "function(){console.log(" call or a simple infinite loop. NOTE: the vendor agrees that denial of service can occur but notes that deserialize is explicitly listed as "harmful" within the README.md file
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/commenthol/serialize-to-js/issues/3; https://kay-malwarebenchmark.github.io/blog/cve-2017-15871-dos-through-iife/; https://github.com/commenthol/serialize-to-js/issues/3
CVE: CVE-2017-15872
Published: 2017-10-24
Description: phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11d; https://github.com/slackero/phpwcms/commit/90ee94a474b37919161f8112f9e36c53ad70492f; https://github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11d
CVE: CVE-2017-15873
Published: 2017-10-24
Description: The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://bugs.busybox.net/show_bug.cgi?id=10431; https://git.busybox.net/busybox/commit/?id=0402cb32df015d9372578e3db27db47b33d5c7b0; https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html
CVE: CVE-2017-15874
Published: 2017-10-24
Description: archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://bugs.busybox.net/show_bug.cgi?id=10436; https://bugs.busybox.net/show_bug.cgi?id=10436
CVE: CVE-2016-3049
Published: 2017-10-24
Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 114712.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21997686; http://www.securityfocus.com/bid/101568; https://exchange.xforce.ibmcloud.com/vulnerabilities/114712
CVE: CVE-2017-1209
Published: 2017-10-24
Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123849.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22008010; https://exchange.xforce.ibmcloud.com/vulnerabilities/123849; http://www.ibm.com/support/docview.wss?uid=swg22008010
CVE: CVE-2017-1210
Published: 2017-10-24
Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files made to look legitimate. IBM X-Force ID: 123850.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22008009; https://exchange.xforce.ibmcloud.com/vulnerabilities/123850; http://www.ibm.com/support/docview.wss?uid=swg22008009
CVE: CVE-2017-1211
Published: 2017-10-24
Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.
CVSS Score: 2.5 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22008011; http://www.securityfocus.com/bid/101526; https://exchange.xforce.ibmcloud.com/vulnerabilities/123851
CVE: CVE-2017-1212
Published: 2017-10-24
Description: IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of service when viewing or opening a large file. IBM X-Force ID: 123852.
CVSS Score: 6.5 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22007466; https://exchange.xforce.ibmcloud.com/vulnerabilities/123852; http://www.ibm.com/support/docview.wss?uid=swg22007466
CVE: CVE-2017-1375
Published: 2017-10-24
Description: IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1010657; http://www.securityfocus.com/bid/101561; https://exchange.xforce.ibmcloud.com/vulnerabilities/126868
CVE: CVE-2017-1523
Published: 2017-10-24
Description: IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/101566; https://exchange.xforce.ibmcloud.com/vulnerabilities/129892; https://www.ibm.com/support/docview.wss?uid=swg22009633
CVE: CVE-2017-1583
Published: 2017-10-24
Description: IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009704; http://www.securityfocus.com/bid/101522; http://www.securitytracker.com/id/1039695
CVE: CVE-2017-15878
Published: 2017-10-24
Description: A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/; http://www.securityfocus.com/bid/101541; https://github.com/keystonejs/keystone/pull/4478
CVE: CVE-2017-15879
Published: 2017-10-24
Description: CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/keystonejs/keystone/pull/4478; https://packetstormsecurity.com/files/144755/KeystoneJS-4.0.0-beta.5-Unauthenticated-CSV-Injection.html; https://www.exploit-db.com/exploits/43053/
CVE: CVE-2017-15880
Published: 2017-10-24
Description: SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_group/add_modify_group.php (for insert_group and update_group).
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLi; https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php-update_group-SQL%20injection%20vulnerability; https://github.com/jsj730sos/cve/blob/master/Eonweb_module_admin_group_add_modify_group.php%20SQLi
CVE: CVE-2017-15881
Published: 2017-10-24
Description: Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vulnerability than CVE-2017-15878.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report/; http://www.securityfocus.com/bid/101541; https://github.com/keystonejs/keystone/issues/4437
CVE: CVE-2017-15885
Published: 2017-10-25
Description: Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/; https://distributedcompute.com/2017/10/24/axis-2100-network-camera-2-03-xss-vulnerability/
CVE: CVE-2017-12705
Published: 2017-10-25
Description: A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99476; https://ics-cert.us-cert.gov/advisories/ICSA-17-227-01; http://www.securityfocus.com/bid/99476
CVE: CVE-2017-1164
Published: 2017-10-25
Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22009296; http://www.securityfocus.com/bid/101586; https://exchange.xforce.ibmcloud.com/vulnerabilities/123036
CVE: CVE-2017-1169
Published: 2017-10-25
Description: IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22009296; http://www.securityfocus.com/bid/101593; https://exchange.xforce.ibmcloud.com/vulnerabilities/123188
CVE: CVE-2017-1241
Published: 2017-10-25
Description: An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009296; http://www.securityfocus.com/bid/101599; https://exchange.xforce.ibmcloud.com/vulnerabilities/124523
CVE: CVE-2017-1295
Published: 2017-10-25
Description: IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22009296; http://www.securityfocus.com/bid/101616; https://exchange.xforce.ibmcloud.com/vulnerabilities/125157
CVE: CVE-2017-1363
Published: 2017-10-25
Description: IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22009296; http://www.securityfocus.com/bid/101587; https://exchange.xforce.ibmcloud.com/vulnerabilities/126856
CVE: CVE-2017-15906
Published: 2017-10-26
Description: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: http://www.securityfocus.com/bid/101552; https://access.redhat.com/errata/RHSA-2018:0980; https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE: CVE-2017-15909
Published: 2017-10-26
Description: D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-20/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf; ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf; ftp://ftp2.dlink.com/PRODUCTS/DGS-1500-28P/REVA/DGS-1500_REVA_FIRMWARE_PATCH_NOTES_2.51.021_EN.pdf
CVE: CVE-2017-15882
Published: 2017-10-26
Description: The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote attackers to cause a denial of service (application crash) via a large VPN server-list file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://wwws.nightwatchcybersecurity.com/2017/10/25/advisory-pia-android-app-cve-2017-15882/; https://wwws.nightwatchcybersecurity.com/2017/10/25/advisory-pia-android-app-cve-2017-15882/
CVE: CVE-2017-15907
Published: 2017-10-26
Description: SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.sstrunk.com/cve/phpCollab_newsdesk.html; http://www.sstrunk.com/cve/phpCollab_newsdesk.html
CVE: CVE-2017-7335
Published: 2017-10-26
Description: A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101287; https://fortiguard.com/psirt/FG-IR-17-106; http://www.securityfocus.com/bid/101287
CVE: CVE-2017-7341
Published: 2017-10-26
Description: An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file management AP script download webUI page allows an authenticated admin user to execute arbitrary system console commands via crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/101273; https://fortiguard.com/psirt/FG-IR-17-119; http://www.securityfocus.com/bid/101273
CVE: CVE-2017-7732
Published: 2017-10-26
Description: A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized pre-authentication webmail login page allows attacker to inject arbitrary web script or HTML via crafted HTTP requests.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101278; http://www.securitytracker.com/id/1039584; https://fortiguard.com/psirt/FG-IR-17-099
CVE: CVE-2017-15908
Published: 2017-10-26
Description: In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/101600; http://www.securitytracker.com/id/1039662; https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1725351
CVE: CVE-2017-12158
Published: 2017-10-26
Description: It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-444, CWE-79
References: http://www.securityfocus.com/bid/101618; https://access.redhat.com/errata/RHSA-2017:2904; https://access.redhat.com/errata/RHSA-2017:2905
CVE: CVE-2017-12159
Published: 2017-10-26
Description: It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-613, CWE-613
References: http://www.securityfocus.com/bid/101601; https://access.redhat.com/errata/RHSA-2017:2904; https://access.redhat.com/errata/RHSA-2017:2905
CVE: CVE-2017-12160
Published: 2017-10-26
Description: It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself continued permissions and possibly conduct further attacks.
CVSS Score: 7.2 (HIGH)
CWE: CWE-285, CWE-287
References: https://access.redhat.com/errata/RHSA-2017:2904; https://access.redhat.com/errata/RHSA-2017:2905; https://access.redhat.com/errata/RHSA-2017:2906
CVE: CVE-2017-15096
Published: 2017-10-26
Description: A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1504255; https://bugzilla.redhat.com/show_bug.cgi?id=1504255