deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-6693
Published: 2015-08-04
Description: GE Healthcare Centricity PACS 4.0 Server has a default password of (1) nasro for the nasro (ReadOnly) user and (2) nasrw for the nasrw (Read/Write) user, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_[PII_REDACTED]r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_[PII_REDACTED]r1.pdf&FILEREV=1&DOCREV_ORG=1; http://apps.gehealthcare.com/servlet/ClientServlet/C4x_SRV_SVC_2063464-001r2.pdf?REQ=RAA&DIRECTION=2063464-001&FILENAME=C4x_SRV_SVC_2063464-001r2.pdf&FILEREV=2&DOCREV_ORG=2; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE: CVE-2012-6694
Published: 2015-08-04
Description: GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1, and Server 4.0, has a password of 2charGE for the geservice account, which has unspecified impact and attack vectors related to TimbuktuPro.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_[PII_REDACTED]r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_[PII_REDACTED]r1.pdf&FILEREV=1&DOCREV_ORG=1; http://apps.gehealthcare.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE: CVE-2012-6695
Published: 2015-08-04
Description: GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of ddpadmin for the ddpadmin user, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_[PII_REDACTED]r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_[PII_REDACTED]r1.pdf&FILEREV=1&DOCREV_ORG=1; http://apps.gehealthcare.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE: CVE-2013-7404
Published: 2015-08-04
Description: GE Healthcare Discovery NM 750b has a password of 2getin for the insite account for (1) Telnet and (2) FTP, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/5411136-1EN_r3.pdf?REQ=RAA&DIRECTION=5411136-1EN&FILENAME=5411136-1EN_r3.pdf&FILEREV=3&DOCREV_ORG=3; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/; https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE: CVE-2013-7405
Published: 2015-08-04
Description: The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/0908141_DMS+4.2+MTG.pdf?REQ=RAA&DIRECTION=0908141&FILENAME=0908141_DMS%2B4.2%2BMTG.pdf&FILEREV=D&DOCREV_ORG=D; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/; https://twitter.com/digitalbond/status/[PII_REDACTED]51222277
CVE: CVE-2013-7442
Published: 2015-08-04
Description: GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) iis for the IIS user, which has unspecified impact and attack vectors related to TimbuktuPro.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires it.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/C401_WS_INST_SV_[PII_REDACTED]r1.pdf?REQ=RAA&DIRECTION=2069560-001&FILENAME=C401_WS_INST_SV_[PII_REDACTED]r1.pdf&FILEREV=1&DOCREV_ORG=1; http://apps.gehealthcare.com/servlet/ClientServlet/C40_WS_INST_SV_2063534-001r2.pdf?REQ=RAA&DIRECTION=2063534-001&FILENAME=C40_WS_INST_SV_2063534-001r2.pdf&FILEREV=1&DOCREV_ORG=1; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE: CVE-2014-7232
Published: 2015-08-04
Description: GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser user, and (3) #superxr for the root user, which has unspecified impact and attack vectors.  NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/5643835-1EN_r1.pdf?REQ=RAA&DIRECTION=5643835-1EN&FILENAME=5643835-1EN_r1.pdf&FILEREV=1&DOCREV_ORG=1; http://apps.gehealthcare.com/servlet/ClientServlet/IM-5343950-1EN.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=5343950-1EN&FILENAME=IM-5343950-1EN.pdf&FILEREV=7&DOCREV_ORG=7&SUBMIT=+ACCEPT+; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/
CVE: CVE-2014-7233
Published: 2015-08-04
Description: GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilities menu, (2) TH8740 for installation using TH8740_122_Setup.exe, (3) hrml for "Setup and Activation" using DSASetup, and (4) an empty string for Shutter Configuration, which has unspecified impact and attack vectors.  NOTE: since these passwords appear to be used to access functionality during installation, this issue might not cross privilege boundaries and might not be a vulnerability.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/5458232-1EN+r4.pdf?REQ=RAA&DIRECTION=5458232-1EN&FILENAME=5458232-1EN%2Br4.pdf&FILEREV=4&DOCREV_ORG=4; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/; https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE: CVE-2014-7234
Published: 2015-08-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7233. Reason: This issue was MERGED into CVE-2014-7233 in accordance with CVE content decisions, because it is the same type of vulnerability and affects the same versions. Notes: All CVE users should reference CVE-2014-7233 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2014-9736
Published: 2015-08-04
Description: GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1) SSL key manager and (2) server keystore; (3) keystore_password for the server truststore; and atna for the (4) primary storage database and (5) archive storage database, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/DOC1474072_ATR_InstSvcMan.pdf?REQ=RAA&DIRECTION=DOC1474072&FILENAME=DOC1474072_ATR_InstSvcMan.pdf&FILEREV=--&DOCREV_ORG=--; http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/; https://twitter.com/digitalbond/status/[PII_REDACTED]51222277
CVE: CVE-2015-3438
Published: 2015-08-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://codex.wordpress.org/Version_4.1.2; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157391.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158271.html
CVE: CVE-2015-3439
Published: 2015-08-05
Description: Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target parameter, as demonstrated by executing a certain click function, related to _init.as and _fireEvent.as.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://codex.wordpress.org/Version_4.1.2; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157391.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158271.html
CVE: CVE-2015-4167
Published: 2015-08-05
Description: The udf_read_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local users to cause a denial of service (incorrect data representation or integer overflow, and OOPS) via a crafted UDF filesystem.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23b133bdc452aa441fcb9b82cbf6dd05cfd342d0; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
CVE: CVE-2015-3636
Published: 2015-08-06
Description: The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
CVSS Score: 4.9 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a134f083e79fb4c3d0a925691e732c56911b4326; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157788.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157897.html
CVE: CVE-2015-4674
Published: 2015-08-07
Description: The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-345
References: http://seclists.org/fulldisclosure/2015/Jun/105; http://www.securityfocus.com/archive/1/535881/100/700/threaded; http://www.securityfocus.com/bid/75572
CVE: CVE-2015-2744
Published: 2015-08-08
Description: Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.mozilla.org/security/announce/2015/mfsa2015-72.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1102204; http://www.mozilla.org/security/announce/2015/mfsa2015-72.html
CVE: CVE-2015-2745
Published: 2015-08-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the (1) name or (2) title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows action, as demonstrated by embedding an arbitrary application or spoofing the account-creation page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.mozilla.org/security/announce/2015/mfsa2015-73.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1101158; https://github.com/mozilla-b2g/gaia/commit/0f72a8c31df9f3d8f609a7c58ca91139051d44eb
CVE: CVE-2015-4494
Published: 2015-08-08
Description: Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtain potentially sensitive information via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.mozilla.org/security/announce/2015/mfsa2015-76.html; https://bugzilla.mozilla.org/show_bug.cgi?id=1138808; http://www.mozilla.org/security/announce/2015/mfsa2015-76.html
CVE: CVE-2015-4495
Published: 2015-08-08
Description: The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
CVSS Score: 8.8 (HIGH)
CWE: CWE-346
References: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html
CVE: CVE-2015-5960
Published: 2015-08-08
Description: Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount operation.
CVSS Score: 1.9 (LOW)
CWE: CWE-284
References: http://www.mozilla.org/security/announce/2015/mfsa2015-74.html; http://www.securityfocus.com/bid/76254; https://bugzilla.mozilla.org/show_bug.cgi?id=1111725
CVE: CVE-2015-5961
Published: 2015-08-08
Description: The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to bypass intended access restrictions by spoofing that server.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://www.mozilla.org/security/announce/2015/mfsa2015-75.html; http://www.securityfocus.com/bid/76255; https://bugzilla.mozilla.org/show_bug.cgi?id=1123433
CVE: CVE-2015-5962
Published: 2015-08-08
Description: Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allow attackers to cause a denial of service (memory corruption) via a negative value of a size parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://www.mozilla.org/security/announce/2015/mfsa2015-77.html; http://www.securityfocus.com/bid/76253; https://bugzilla.mozilla.org/show_bug.cgi?id=1145389
CVE: CVE-2015-2897
Published: 2015-08-08
Description: Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers to obtain administrative access via a (1) SSH or (2) TELNET session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/628568; http://www.kb.cert.org/vuls/id/628568
CVE: CVE-2015-2980
Published: 2015-08-08
Description: The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-200
References: http://jvn.jp/en/jp/JVN70465405/995407/index.html; http://jvn.jp/en/jp/JVN70465405/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000110
CVE: CVE-2015-1805
Published: 2015-08-08
Description: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."
CVSS Score: 7.2 (HIGH)
CWE: CWE-17
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=637b58c2887e5e[PII_REDACTED]9cc75f59184b23d1; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f0d1bec9d58d4c038d0ac958c9af82be6eb18045; http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
CVE: CVE-2015-1818
Published: 2015-08-11
Description: XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2015-1539.html; http://rhn.redhat.com/errata/RHSA-2015-1704.html; http://rhn.redhat.com/errata/RHSA-2015-1539.html
CVE: CVE-2015-2323
Published: 2015-08-11
Description: FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to FortiGuard servers, which allows man-in-the-middle attackers to spoof TLS content by modifying packets.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-310
References: http://fortiguard.com/advisory/2015-07-24-weak-ciphers-suites-are-presented-towards-fortiguard-servers; http://www.fortiguard.com/advisory/FG-IR-15-021/; http://www.securitytracker.com/id/1033092
CVE: CVE-2015-3228
Published: 2015-08-11
Description: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://bugs.ghostscript.com/show_bug.cgi?id=696041; http://bugs.ghostscript.com/show_bug.cgi?id=696070; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=0c0b0859
CVE: CVE-2015-3245
Published: 2015-08-11
Description: Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, allows local users to cause a denial of service (/etc/passwd corruption) via a newline character in the GECOS field.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html; http://rhn.redhat.com/errata/RHSA-2015-1482.html
CVE: CVE-2015-3246
Published: 2015-08-11
Description: libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163044.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162947.html; http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00000.html
CVE: CVE-2015-3267
Published: 2015-08-11
Description: Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2015-1525.html; http://www.securityfocus.com/bid/76335; http://www.securitytracker.com/id/1033136
CVE: CVE-2015-3626
Published: 2015-08-11
Description: Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers to inject arbitrary web script or HTML via a crafted hostname.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://fortiguard.com/advisory/dhcp-hostname-html-injection; http://www.fortiguard.com/advisory/FG-IR-15-018/; http://www.fortiguard.com/advisory/dhcp-hostname-html-injection
CVE: CVE-2015-4634
Published: 2015-08-11
Description: SQL injection vulnerability in graphs.php in Cacti before 0.8.8e allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://bugs.cacti.net/view.php?id=2577; http://lists.opensuse.org/opensuse-updates/2015-07/msg00052.html; http://www.cacti.net/release_notes_0_8_8e.php
CVE: CVE-2015-5176
Published: 2015-08-11
Description: The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-17
References: http://rhn.redhat.com/errata/RHSA-2015-1543.html; http://rhn.redhat.com/errata/RHSA-2015-1543.html
CVE: CVE-2015-5369
Published: 2015-08-11
Description: Pulse Connect Secure (aka PCS and formerly Juniper PCS) PSC6000, PCS6500, and MAG PSC360 8.1 before 8.1r5, 8.0 before 8.0r13, 7.4 before 7.4r13.5, and 7.1 before 7.1r22.2 and PPS 5.1 before 5.1R5 and 5.0 before 5.0R13, when Hardware Acceleration is enabled, does not properly validate the Finished TLS handshake message, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted Finished message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-17, CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=TSB16756; http://www.securitytracker.com/id/1033166; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40004
CVE: CVE-2015-5522
Published: 2015-08-11
Description: Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
CVE: CVE-2015-5523
Published: 2015-08-11
Description: The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html; http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
CVE: CVE-2015-5965
Published: 2015-08-11
Description: The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.fortiguard.com/advisory/FG-IR-15-016/; http://www.securityfocus.com/bid/76065; http://www.securitytracker.com/id/1033256
CVE: CVE-2013-7443
Published: 2015-08-12
Description: Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://ubuntu.com/usn/usn-2698-1; http://www.openwall.com/lists/oss-security/2015/07/14/5; http://www.openwall.com/lists/oss-security/2015/07/15/4
CVE: CVE-2015-0851
Published: 2015-08-12
Description: XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service (crash) via schema-invalid XML data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://shibboleth.net/community/advisories/secadv_20150721.txt; http://www.debian.org/security/2015/dsa-3321; http://www.securityfocus.com/bid/76134