deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-14652
Published: 2017-09-21
Description: SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://adrianhayter.com/exploits.php; https://www.tapatalk.com/groups/tapatalksupport/tapatalk-for-mybb-plugin-release-announcement-and--t5877-s50.html#p187116; http://adrianhayter.com/exploits.php
CVE: CVE-2017-12170
Published: 2017-09-21
Description: Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.
CVSS Score: 9.8 (CRITICAL)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1493114; https://bugzilla.redhat.com/show_bug.cgi?id=1493114
CVE: CVE-2017-7544
Published: 2017-09-21
Description: libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html; https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html; https://sourceforge.net/p/libexif/bugs/130/
CVE: CVE-2017-7549
Published: 2017-09-21
Description: A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-377, CWE-59
References: http://www.securityfocus.com/bid/100407; https://access.redhat.com/errata/RHSA-2017:2557; https://access.redhat.com/errata/RHSA-2017:2649
CVE: CVE-2017-9281
Published: 2017-09-21
Description: An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes; https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE: CVE-2017-9282
Published: 2017-09-21
Description: An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes; https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE: CVE-2017-9283
Published: 2017-09-21
Description: An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes; https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes
CVE: CVE-2017-14680
Published: 2017-09-21
Description: ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://seclists.org/bugtraq/2017/Sep/20; http://seclists.org/fulldisclosure/2017/Sep/39; http://seclists.org/bugtraq/2017/Sep/20
CVE: CVE-2017-14681
Published: 2017-09-21
Description: The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a "kill `cat /pathname/p3scan.pid`" command, as demonstrated by etc/init.d/p3scan.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://sourceforge.net/p/p3scan/bugs/33/; https://sourceforge.net/p/p3scan/bugs/33/
CVE: CVE-2017-14682
Published: 2017-09-21
Description: GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://usn.ubuntu.com/3681-1/; https://www.debian.org/security/2017/dsa-4032; https://www.debian.org/security/2017/dsa-4040
CVE: CVE-2017-14684
Published: 2017-09-22
Description: In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/770; https://usn.ubuntu.com/3681-1/; https://github.com/ImageMagick/ImageMagick/issues/770
CVE: CVE-2017-8007
Published: 2017-09-22
Description: In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, and modify or delete data, by supplying specially crafted strings in input parameters of the web service call.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2017/Sep/51; http://www.securityfocus.com/bid/100957; http://www.securitytracker.com/id/1039417
CVE: CVE-2017-8012
Published: 2017-09-22
Description: In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service (DoS) condition. Attackers with knowledge of JMX agent user credentials could potentially exploit this vulnerability to create arbitrary files on the affected system and create a DoS condition by leveraging inherent JMX protocol capabilities.
CVSS Score: 7.4 (HIGH)
References: http://seclists.org/fulldisclosure/2017/Sep/51; http://www.securityfocus.com/bid/100982; http://www.securitytracker.com/id/1039417
CVE: CVE-2017-14685
Published: 2017-09-22
Description: Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x[PII_REDACTED]16aa61" on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=ab1a420613dec93c686acbee2c165274e922f82a; http://www.debian.org/security/2017/dsa-4006; https://bugs.ghostscript.com/show_bug.cgi?id=698539
CVE: CVE-2017-14686
Published: 2017-09-22
Description: Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x[PII_REDACTED]00001d" on Windows. This occurs because read_zip_dir_imp in fitz/unzip.c does not check whether size fields in a ZIP entry are negative numbers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=0f0fbc07d9be31f5e83ec5328d7311fdfd8328b1; http://www.debian.org/security/2017/dsa-4006; https://bugs.ghostscript.com/show_bug.cgi?id=698540
CVE: CVE-2017-14687
Published: 2017-09-22
Description: Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x[PII_REDACTED]16cb4f" on Windows. This occurs because of mishandling of XML tag name comparisons.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=2b16dbd8f73269cb15ca61ece75cf8d2d196ed28; http://www.debian.org/security/2017/dsa-4006; https://bugs.ghostscript.com/show_bug.cgi?id=698558
CVE: CVE-2017-14636
Published: 2017-09-22
Description: Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/pts/sam2p/issues/14; https://github.com/pts/sam2p/issues/14
CVE: CVE-2017-14637
Published: 2017-09-22
Description: In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/pts/sam2p/issues/14; https://github.com/pts/sam2p/issues/14
CVE: CVE-2017-14653
Published: 2017-09-22
Description: member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://asdedc.bid/aspcms.html; http://asdedc.bid/aspcms.html
CVE: CVE-2017-14688
Published: 2017-09-22
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00d917."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14688; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14688
CVE: CVE-2017-14689
Published: 2017-09-22
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x[PII_REDACTED]00328e."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14689; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14689
CVE: CVE-2017-14690
Published: 2017-09-22
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]0064e7."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14690; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14690
CVE: CVE-2017-14691
Published: 2017-09-22
Description: STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x[PII_REDACTED]00027a."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14691; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14691
CVE: CVE-2017-14692
Published: 2017-09-22
Description: STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x[PII_REDACTED]00653b."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14692; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14692
CVE: CVE-2017-14693
Published: 2017-09-22
Description: IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x[PII_REDACTED]01c613."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.irfanview.net/main_history.htm; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14693; http://www.irfanview.net/main_history.htm
CVE: CVE-2017-3763
Published: 2017-09-22
Description: An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accounts in LXCA versions earlier than 1.3.2.
CVSS Score: 6.7 (MEDIUM)
References: https://support.lenovo.com/us/en/product_security/LEN-16333; https://support.lenovo.com/us/en/product_security/LEN-16333
CVE: CVE-2017-3770
Published: 2017-09-22
Description: Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.
CVSS Score: 8.8 (HIGH)
References: https://support.lenovo.com/us/en/product_security/LEN-16333; https://support.lenovo.com/us/en/product_security/LEN-16333
CVE: CVE-2017-9393
Published: 2017-09-22
Description: CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100956; https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20170921-01--security-notice-for-ca-identity-manager.html; http://www.securityfocus.com/bid/100956
CVE: CVE-2017-11395
Published: 2017-09-22
Description: Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection; http://www.securityfocus.com/bid/100461; https://success.trendmicro.com/solution/1117933
CVE: CVE-2017-11396
Published: 2017-09-22
Description: Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.
CVSS Score: 7.2 (HIGH)
References: https://success.trendmicro.com/solution/1117412; https://success.trendmicro.com/solution/1117412
CVE: CVE-2017-14078
Published: 2017-09-22
Description: SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/100966; http://www.zerodayinitiative.com/advisories/ZDI-17-739; http://www.zerodayinitiative.com/advisories/ZDI-17-740
CVE: CVE-2017-14079
Published: 2017-09-22
Description: Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/100970; http://www.zerodayinitiative.com/advisories/ZDI-17-785; http://www.zerodayinitiative.com/advisories/ZDI-17-789
CVE: CVE-2017-14080
Published: 2017-09-22
Description: Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.zerodayinitiative.com/advisories/ZDI-17-767; https://success.trendmicro.com/solution/1118224; http://www.zerodayinitiative.com/advisories/ZDI-17-767
CVE: CVE-2017-14081
Published: 2017-09-22
Description: Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/100969; http://www.zerodayinitiative.com/advisories/ZDI-17-752; http://www.zerodayinitiative.com/advisories/ZDI-17-774
CVE: CVE-2017-6266
Published: 2017-09-22
Description: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101028; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6267
Published: 2017-09-22
Description: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665, CWE-835
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101025; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6268
Published: 2017-09-22
Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101007; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6269
Published: 2017-09-22
Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is used without validation which may lead to denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101020; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6270
Published: 2017-09-22
Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a calculation which may lead to a potential divide by zero and denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101002; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6271
Published: 2017-09-22
Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while processing block linear information which may lead to a potential divide by zero and denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101001; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6272
Published: 2017-09-22
Description: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/100997; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-6277
Published: 2017-09-22
Description: NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4544; http://www.securityfocus.com/bid/101004; http://nvidia.custhelp.com/app/answers/detail/a_id/4544
CVE: CVE-2017-14705
Published: 2017-09-22
Description: DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php. An iToken authentication parameter is required but can be obtained by exploiting CVE-2017-14706. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://github.com/rapid7/metasploit-framework/pull/8980; https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/; https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/
CVE: CVE-2017-14706
Published: 2017-09-22
Description: DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll i-Suite LTS 5.5.0 through 5.5.12, i-Suite 5.6, Web Application Firewall 5.7, and Web Application Firewall 6.x before 6.4.1, with On Premises or AWS/Azure cloud deployments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/rapid7/metasploit-framework/pull/8980; https://pentest.blog/advisory-denyall-web-application-firewall-unauthenticated-remote-code-execution/; https://www.denyall.com/blog/advisories/advisory-unauthenticated-remote-code-execution-denyall-web-application-firewall/
CVE: CVE-2017-14694
Published: 2017-09-22
Description: Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x[PII_REDACTED]00002f.".
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101009; http://www.securitytracker.com/id/1040038; https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-14694