deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5634
Published: 2017-02-09
Description: The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-668
References: http://www.securityfocus.com/bid/96230; https://bugemot.com/bug/190; https://www.youtube.com/watch?v=2j9gP5Qu2WA
CVE: CVE-2017-3807
Published: 2017-02-09
Description: A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated, remote attacker to cause a heap overflow. The vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by sending a crafted URL to the affected system. An exploit could allow the remote attacker to cause a reload of the affected system or potentially execute code. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 or IPv6 traffic. A valid TCP connection is needed to perform the attack. The attacker needs to have valid credentials to log in to the Clientless SSL VPN portal. Vulnerable Cisco ASA Software running on the following products may be affected by this vulnerability: Cisco ASA 5500 Series Adaptive Security Appliances, Cisco ASA 5500-X Series Next-Generation Firewalls, Cisco Adaptive Security Virtual Appliance (ASAv), Cisco ASA for Firepower 9300 Series, Cisco ASA for Firepower 4100 Series. Cisco Bug IDs: CSCvc23838.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/96161; http://www.securitytracker.com/id/1037797; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-asa
CVE: CVE-2017-3813
Published: 2017-02-09
Description: A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local attacker to open Internet Explorer with the privileges of the SYSTEM user. The vulnerability is due to insufficient implementation of the access controls. An attacker could exploit this vulnerability by opening the Internet Explorer browser. An exploit could allow the attacker to use Internet Explorer with the privileges of the SYSTEM user. This may allow the attacker to execute privileged commands on the targeted system. This vulnerability affects versions prior to released versions 4.4.00243 and later and 4.3.05017 and later. Cisco Bug IDs: CSCvc43976.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-862
References: http://www.securityfocus.com/bid/96145; http://www.securitytracker.com/id/1037796; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170208-anyconnect
CVE: CVE-2017-5180
Published: 2017-02-09
Description: Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://openwall.com/lists/oss-security/2017/01/04/2; http://www.securityfocus.com/bid/95298; https://firejail.wordpress.com/download-2/release-notes/
CVE: CVE-2017-5940
Published: 2017-02-09
Description: Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its attempt to prevent accessing user files with an euid of zero, which allows local users to conduct sandbox-escape attacks via vectors involving a symlink and the --private option. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-5180.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2017/01/31/16; http://www.securityfocus.com/bid/96221; https://firejail.wordpress.com/download-2/release-notes/
CVE: CVE-2017-5941
Published: 2017-02-09
Description: An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/161356/Node.JS-Remote-Code-Execution.html; http://packetstormsecurity.com/files/163222/Node.JS-Remote-Code-Execution.html; http://www.securityfocus.com/bid/96225
CVE: CVE-2017-5589
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno (0.8.6 - 0.8.8; Android).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96170; https://github.com/ge0rg/yaxim/commit/65a38dc77545d[PII_REDACTED]e86089390f0ceaf9f
CVE: CVE-2017-5590
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure (3.2.0 - 4.0.0; only iOS) and Zom (all versions up to 1.0.11; only iOS).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96165; https://github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856
CVE: CVE-2017-5591
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and Slixmpp all versions up to 1.2.3, as bundled in poezio (0.8 - 0.10) and other products.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96166; https://github.com/poezio/slixmpp/commit/22664ee7b86c8e010f312b66d12590fb47160ad8
CVE: CVE-2017-5592
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96173; https://github.com/boothj5/profanity/commit/8e75437a7e43d4c55e861691f74892e666e29b0b
CVE: CVE-2017-5593
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Psi+ (0.16.563.580 - 0.16.571.627).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96169; https://github.com/psi-im/iris/pull/47/commits/02e976d4426a1319a7af7d26d7aba9d8c6077570
CVE: CVE-2017-5602
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96176; https://github.com/jappix/jappix/commit/ea6de7c65b80880bdf85df47c1a8a5d3d68491af
CVE: CVE-2017-5603
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96174; https://github.com/jitsi/jitsi/commit/7d66da61b316c9480b63000f831b6de723b87315
CVE: CVE-2017-5604
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96184; https://mcabber.com/hg/rev/2a9569fd7644
CVE: CVE-2017-5605
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Movim 0.8 - 0.10.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96177; https://github.com/movim/moxl/commit/838b0a42efc3b67cc17d63e25ae1d0ea849cd89b
CVE: CVE-2017-5606
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber (only if manually enabled: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96186; https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/
CVE: CVE-2017-5858
Published: 2017-02-09
Description: An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-346
References: http://openwall.com/lists/oss-security/2017/02/09/29; http://www.securityfocus.com/bid/96183; https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f9536ea572
CVE: CVE-2016-10215
Published: 2017-02-10
Description: An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP POST parameters passed to a "site/index.php/../../extensions/com.fastspot.form-builder/ajax/redraw-field.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Fastspot/bigtree-form-builder/commit/06fde0cc67ff121b212715031e12574f50970fcd; https://github.com/Fastspot/bigtree-form-builder/commit/06fde0cc67ff121b212715031e12574f50970fcd
CVE: CVE-2016-10216
Published: 2017-02-10
Description: An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtration of user-supplied data in the "value" HTTP POST parameter passed to the "itdb-1.23/js/DataTables-1.8.2/examples/examples_support/editable_ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/sivann/itdb/issues/56; https://github.com/sivann/itdb/issues/56
CVE: CVE-2017-5942
Published: 2017-02-10
Description: An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allows for a reflected XSS. This would allow you to execute JavaScript in the context of the user receiving the mail.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96211; https://cjc.im/advisories/0006/; http://www.securityfocus.com/bid/96211
CVE: CVE-2017-5945
Published: 2017-02-10
Description: An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the "poodll_audio_url" HTTP GET parameter passed to the "filter_poodll_moodle32_[PII_REDACTED]/poodll/mp3recorderskins/brazil/index.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96212; https://github.com/justinhunt/moodle-filter_poodll/issues/23; http://www.securityfocus.com/bid/96212
CVE: CVE-2017-5953
Published: 2017-02-10
Description: vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3786; http://www.securityfocus.com/bid/96217; https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d
CVE: CVE-2017-5954
Published: 2017-02-10
Description: An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.securityfocus.com/bid/96223; https://github.com/commenthol/serialize-to-js/issues/1; https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/
CVE: CVE-2016-8709
Published: 2017-02-10
Description: A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96155; http://www.talosintelligence.com/reports/TALOS-2016-0218/; http://www.securityfocus.com/bid/96155
CVE: CVE-2016-8711
Published: 2017-02-10
Description: A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific PDF file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96155; http://www.talosintelligence.com/reports/TALOS-2016-0224/; http://www.securityfocus.com/bid/96155
CVE: CVE-2016-8713
Published: 2017-02-10
Description: A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/96155; http://www.talosintelligence.com/reports/TALOS-2016-0226/; http://www.securityfocus.com/bid/96155
CVE: CVE-2017-3302
Published: 2017-02-12
Description: Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.debian.org/security/2017/dsa-3809; http://www.debian.org/security/2017/dsa-3834; http://www.openwall.com/lists/oss-security/2017/02/11/11
CVE: CVE-2017-5960
Published: 2017-02-12
Description: An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96201; https://github.com/PhalconEye/phalconeye/issues/133; http://www.securityfocus.com/bid/96201
CVE: CVE-2017-5961
Published: 2017-02-12
Description: An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplied data in the "path" HTTP GET parameter passed to the "ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96196; https://github.com/ionize/ionize/issues/393; http://www.securityfocus.com/bid/96196
CVE: CVE-2017-5962
Published: 2017-02-12
Description: An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due to insufficient filtration of user-supplied data in the "force_ua" HTTP GET parameter passed to the "/contexts_wurfl/Library/wurfl-dbapi-1.4.4.0/check_wurfl.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96158; https://forge.typo3.org/issues/79326; http://www.securityfocus.com/bid/96158
CVE: CVE-2017-5963
Published: 2017-02-12
Description: An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96198; https://forge.typo3.org/issues/79325; http://www.securityfocus.com/bid/96198
CVE: CVE-2017-5964
Published: 2017-02-12
Description: An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "emoncms-master/Modules/vis/visualisations/compare.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96202; https://github.com/emoncms/emoncms/issues/636; http://www.securityfocus.com/bid/96202
CVE: CVE-2016-8495
Published: 2017-02-13
Description: An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
CVSS Score: 7.4 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96157; http://www.securitytracker.com/id/1037805; https://fortiguard.com/advisory/FG-IR-16-055
CVE: CVE-2017-3896
Published: 2017-02-13
Description: Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95903; http://www.securitytracker.com/id/1037629; https://kc.mcafee.com/corporate/index?page=content&id=SB10183
CVE: CVE-2017-3902
Published: 2017-02-13
Description: Cross-site scripting (XSS) vulnerability in the Web user interface (UI) in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96465; http://www.securitytracker.com/id/1037628; https://kc.mcafee.com/corporate/index?page=content&id=SB10184
CVE: CVE-2016-6210
Published: 2017-02-13
Description: sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2016/Jul/51; http://www.debian.org/security/2016/dsa-3626; http://www.securityfocus.com/bid/91812
CVE: CVE-2014-9760
Published: 2017-02-13
Description: Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/01/15/11; http://www.securityfocus.com/bid/97104; https://github.com/gosa-project/gosa-core/commit/e35b990464a2c2cf64d6833a217ed944876e7732
CVE: CVE-2015-8750
Published: 2017-02-13
Description: libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/01/07/11; https://bugzilla.redhat.com/show_bug.cgi?id=1294264; https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697
CVE: CVE-2015-8768
Published: 2017-02-13
Description: click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://bazaar.launchpad.net/~click-hackers/click/devel/revision/587; http://ubuntu.com/usn/usn-2771-1; http://www.openwall.com/lists/oss-security/2016/01/12/8
CVE: CVE-2015-8771
Published: 2017-02-13
Description: The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2016/01/15/11; http://www.securityfocus.com/bid/96388; https://github.com/gosa-project/gosa-core/commit/a67a047cba2cdae8bccb0f0e2bc6d3eb45cfcbc8
CVE: CVE-2016-10026
Published: 2017-02-13
Description: ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revision was made.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://ikiwiki.info/bugs/rcs_revert_can_bypass_authorization_if_affected_files_were_renamed/; http://www.debian.org/security/2017/dsa-3760; http://www.openwall.com/lists/oss-security/2016/12/21/3