deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11160
Published: 2017-08-18
Description: Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://www.synology.com/en-global/support/security/Synology_SA_17_44_Synology_Assistant; https://www.synology.com/en-global/support/security/Synology_SA_17_44_Synology_Assistant
CVE: CVE-2017-3756
Published: 2017-08-18
Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100305; https://support.lenovo.com/us/en/product_security/LEN-15765; http://www.securityfocus.com/bid/100305
CVE: CVE-2017-7364
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-9678
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100213; https://source.android.com/security/bulletin/2017-06-01; https://source.android.com/security/bulletin/2017-08-01
CVE: CVE-2017-9679
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100210; https://source.android.com/security/bulletin/2017-06-01; https://source.android.com/security/bulletin/2017-08-01
CVE: CVE-2017-9680
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100210; https://source.android.com/security/bulletin/2017-06-01; https://source.android.com/security/bulletin/2017-08-01
CVE: CVE-2017-9682
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200, CWE-362
References: http://www.securityfocus.com/bid/100213; https://source.android.com/security/bulletin/2017-06-01; https://source.android.com/security/bulletin/2017-08-01
CVE: CVE-2017-9684
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/100213; https://source.android.com/security/bulletin/2017-06-01; https://source.android.com/security/bulletin/2017-08-01
CVE: CVE-2017-9685
Published: 2017-08-18
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-416
References: http://www.securityfocus.com/bid/100477; https://source.android.com/security/bulletin/2017-06-01; http://www.securityfocus.com/bid/100477
CVE: CVE-2007-5199
Published: 2017-08-18
Description: A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://bugzilla.suse.com/show_bug.cgi?id=327854; https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=5bf703700ee4a5d6eae20da07cb7a29369667aef; https://bugzilla.suse.com/show_bug.cgi?id=327854
CVE: CVE-2007-5341
Published: 2017-08-18
Description: Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://bugzilla.mozilla.org/show_bug.cgi?id=325761; https://bugzilla.mozilla.org/show_bug.cgi?id=345305; https://bugzilla.suse.com/show_bug.cgi?id=332512
CVE: CVE-2017-8445
Published: 2017-08-18
Description: An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-8446
Published: 2017-08-18
Description: The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reporting user, possibly gaining access to sensitive data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522, CWE-269
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-12955
Published: 2017-08-18
Description: There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482295; https://bugzilla.redhat.com/show_bug.cgi?id=1482295
CVE: CVE-2017-12956
Published: 2017-08-18
Description: There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482296; https://bugzilla.redhat.com/show_bug.cgi?id=1482296
CVE: CVE-2017-12957
Published: 2017-08-18
Description: There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482423; https://bugzilla.redhat.com/show_bug.cgi?id=1482423
CVE: CVE-2017-12958
Published: 2017-08-18
Description: There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482429; https://savannah.gnu.org/forum/forum.php?forum_id=8936; https://bugzilla.redhat.com/show_bug.cgi?id=1482429
CVE: CVE-2017-12959
Published: 2017-08-18
Description: There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to a remote denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482432; https://savannah.gnu.org/forum/forum.php?forum_id=8936; https://bugzilla.redhat.com/show_bug.cgi?id=1482432
CVE: CVE-2017-12960
Published: 2017-08-18
Description: There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482433; https://savannah.gnu.org/forum/forum.php?forum_id=8936; https://bugzilla.redhat.com/show_bug.cgi?id=1482433
CVE: CVE-2017-12961
Published: 2017-08-18
Description: There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482436; https://savannah.gnu.org/forum/forum.php?forum_id=8936; https://bugzilla.redhat.com/show_bug.cgi?id=1482436
CVE: CVE-2017-12962
Published: 2017-08-18
Description: There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482331; https://bugzilla.redhat.com/show_bug.cgi?id=1482331
CVE: CVE-2017-12963
Published: 2017-08-18
Description: There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. NOTE: this is similar to CVE-2017-11555 but remains exploitable after the vendor's CVE-2017-11555 fix (available from GitHub after 2017-07-24).
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482335; https://bugzilla.redhat.com/show_bug.cgi?id=1482335
CVE: CVE-2017-12964
Published: 2017-08-18
Description: There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://bugzilla.redhat.com/show_bug.cgi?id=1482397; https://bugzilla.redhat.com/show_bug.cgi?id=1482397
CVE: CVE-2017-11323
Published: 2017-08-19
Description: Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html; http://www.altools.com/ALTools/ALZip/Version-History.aspx; http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html
CVE: CVE-2017-12967
Published: 2017-08-19
Description: The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100462; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21962
CVE: CVE-2017-10661
Published: 2017-08-19
Description: Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6; http://www.debian.org/security/2017/dsa-3981; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15
CVE: CVE-2017-10662
Published: 2017-08-19
Description: The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9dd46188edc2f0d1f[PII_REDACTED]0bb65a771124; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.1; http://www.securityfocus.com/bid/100215
CVE: CVE-2017-10663
Published: 2017-08-19
Description: The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15d3042a937c13f5d9244241c7a9c8416ff6e82a; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4; http://www.securityfocus.com/bid/100215
CVE: CVE-2017-12966
Published: 2017-08-20
Description: The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ; https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ
CVE: CVE-2017-12972
Published: 2017-08-20
Description: In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plaintext is obtained for the same HMAC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/0d2bd649ea386539220d4facfe1f65eb1dadb86c; https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/224/byte-to-bit-overflow-in-cbc; https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt
CVE: CVE-2017-12973
Published: 2017-08-20
Description: Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.
CVSS Score: 3.1 (LOW)
CWE: CWE-354
References: https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/6a29f10f723f406eb25555f55842c59a43a38912; https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/223/aescbc-return-immediately-on-invalid-hmac; https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt
CVE: CVE-2017-12974
Published: 2017-08-20
Description: Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable curve validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f3a7a801f0c6b078899fed9226368eb7b44e2b2f; https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/217/explicit-check-for-ec-public-key-on-curve; https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt
CVE: CVE-2017-12976
Published: 2017-08-20
Description: git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2[PII_REDACTED], and CVE-2[PII_REDACTED].
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://source.git-annex.branchable.com/?p=source.git%3Ba=blob%3Bf=doc/bugs/dashed_ssh_hostname_security_hole.mdwn; http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=c24d0f0e[PII_REDACTED]e2be149005bc884fe0403a; http://source.git-annex.branchable.com/?p=source.git%3Ba=commit%3Bh=df11e54788b254efebb4898b474de11ae8d3b471
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by the Primary CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11097. Reason: This candidate is a reservation duplicate of CVE-2017-11097. Notes: All CVE users should reference CVE-2017-11097 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11096. Reason: This candidate is a reservation duplicate of CVE-2017-11096. Notes: All CVE users should reference CVE-2017-11096 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11101. Reason: This candidate is a reservation duplicate of CVE-2017-11101. Notes: All CVE users should reference CVE-2017-11101 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11100. Reason: This candidate is a reservation duplicate of CVE-2017-11100. Notes: All CVE users should reference CVE-2017-11100 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-10976. Reason: This candidate is a reservation duplicate of CVE-2017-10976. Notes: All CVE users should reference CVE-2017-10976 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11099. Reason: This candidate is a reservation duplicate of CVE-2017-11099. Notes: All CVE users should reference CVE-2017-11099 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11098. Reason: This candidate is a reservation duplicate of CVE-2017-11098. Notes: All CVE users should reference CVE-2017-11098 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12425. Reason: This candidate is a reservation duplicate of CVE-2017-12425. Notes: All CVE users should reference CVE-2017-12425 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12474, CVE-2017-12475, CVE-2017-12476.  Reason: This candidate is a reservation duplicate of CVE-2017-12474, CVE-2017-12475, and CVE-2017-12476.  Notes: All CVE users should reference CVE-2017-12474, CVE-2017-12475, and/or CVE-2017-12476 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11366. Reason: This candidate is a reservation duplicate of CVE-2017-11366. Notes: All CVE users should reference CVE-2017-11366 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by the Primary CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-12933. Reason: This candidate is a reservation duplicate of CVE-2017-12933. Notes: All CVE users should reference CVE-2017-12933 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-9091.  Reason: This candidate is a reservation duplicate of CVE-2017-9091.  Notes: All CVE users should reference CVE-2017-9091 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2017-08-21
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-11104. Reason: This candidate is a reservation duplicate of CVE-2017-11104. Notes: All CVE users should reference CVE-2017-11104 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-11366
Published: 2017-08-21
Description: components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.jianshu.com/p/41ac7ac2a7af; https://github.com/Codiad/Codiad/issues/1011; https://github.com/Codiad/Codiad/pull/1013
CVE: CVE-2017-12977
Published: 2017-08-21
Description: The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/jgj212/Advisories/blob/master/photo-gallery.1.3.50-SQL; https://wordpress.org/plugins/photo-gallery/#developers; https://github.com/jgj212/Advisories/blob/master/photo-gallery.1.3.50-SQL
CVE: CVE-2017-12784
Published: 2017-08-21
Description: In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID for a NoviWare issue, but the correct ID for that issue is CVE-2017-12787.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://drive.google.com/file/d/0B9DojFnTUSNGcG1WN2Q1eVZMQTg/view; https://drive.google.com/file/d/0B9DojFnTUSNGcG1WN2Q1eVZMQTg/view
CVE: CVE-2017-12978
Published: 2017-08-21
Description: lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1039226; https://github.com/Cacti/cacti/blob/develop/docs/CHANGELOG; https://github.com/Cacti/cacti/commit/9c610a7a4e29595dcaf7d7082134e4b89619ea24
CVE: CVE-2017-12979
Published: 2017-08-21
Description: DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/splitbrain/dokuwiki/issues/2080; https://github.com/splitbrain/dokuwiki/issues/2080