deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9459
Published: 2017-03-28
Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment disposition forcing the browser to download the document. However, Firefox running on Microsoft Windows would offer the user to open the data in the browser as an HTML document. Thus any injected data in the log would be executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-209, CWE-79
References: http://www.securityfocus.com/bid/97284; https://github.com/nextcloud/server/commit/94975af6db1551c2d23136c2ea22866a5b416070; https://github.com/owncloud/core/commit/044ee072a647636b1a17c89265c7233b35371335
CVE: CVE-2016-9460
Published: 2017-03-28
Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-451, CWE-284
References: http://www.securityfocus.com/bid/97282; https://github.com/nextcloud/server/commit/2da43e3751576bbc838f238a09955c4dcdebee8e; https://github.com/nextcloud/server/commit/8aa0832bd449c44ec300da4189bd8ed4e036140c
CVE: CVE-2016-9461
Published: 2017-03-28
Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions. The WebDAV endpoint was not properly checking the permission on a WebDAV COPY action. This allowed an authenticated attacker with access to a read-only share to put new files in there. It was not possible to modify existing files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-275, CWE-284
References: http://www.securityfocus.com/bid/97276; https://github.com/nextcloud/server/commit/[PII_REDACTED]c1454a9a30d3ec[PII_REDACTED]0120cc; https://github.com/owncloud/core/commit/0622e635d97cb17c5e1363e370bb8268cc3d2547
CVE: CVE-2016-9462
Published: 2017-03-28
Description: Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file. The restore capability of Nextcloud/ownCloud was not verifying whether a user has only read-only access to a share. Thus a user with read-only access was able to restore old versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-275, CWE-284
References: http://www.securityfocus.com/bid/97285; https://github.com/nextcloud/server/commit/1208953ba1d4d55a18a639846bbcdd66a2d5bc5e; https://github.com/owncloud/core/commit/[PII_REDACTED]1d092e079986464a8c4c9ffcb79f4c
CVE: CVE-2016-9463
Published: 2017-03-28
Description: Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and not by default enabled SMB authentication component that allows authenticating users against an SMB server. This backend is implemented in a way that tries to connect to a SMB server and if that succeeded consider the user logged-in. The backend did not properly take into account SMB servers that have any kind of anonymous auth configured. This is the default on SMB servers nowadays and allows an unauthenticated attacker to gain access to an account without valid credentials. Note: The SMB backend is disabled by default and requires manual configuration in the Nextcloud/ownCloud config file. If you have not configured the SMB backend then you're not affected by this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-303, CWE-287
References: https://github.com/nextcloud/apps/commit/b85ace6840b8a[PII_REDACTED]bc3b8eb8e81cb2274; https://github.com/nextcloud/apps/commit/decb91fd31f4ffab191cbf09ce4e5c55c67a4087; https://github.com/owncloud/apps/commit/16cbccfc946c8711721fa684d78135ca1fb64791
CVE: CVE-2016-9464
Published: 2017-03-28
Description: Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselves but not to the whole group. The previous API implementation simply unshared the file to all users in the group.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-285
References: http://www.securityfocus.com/bid/97287; https://github.com/nextcloud/server/commit/3387e5d00fcf6b2ea6b285a091e5743f545e7202; https://github.com/nextcloud/server/commit/7289cb5ec0b812992ab0dfb889744b94bc0994f0
CVE: CVE-2016-9465
Published: 2017-03-28
Description: Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export. The CardDAV image export functionality as implemented in Nextcloud/ownCloud allows the download of images stored within a vCard. Due to not performing any kind of verification on the image content this is prone to a stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nextcloud/server/commit/68ab8325c799d20c1fb7e98d[PII_REDACTED]90e7d0; https://github.com/owncloud/core/commit/6bf3be3877d9d9fda9c66926fe273fe79cbaf58e; https://github.com/owncloud/core/commit/b5a5be24c418033cb2ef965a4f3f06b7b4213845
CVE: CVE-2016-9466
Published: 2017-03-28
Description: Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message, this led to a reflected Cross-Site-Scripting vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nextcloud/gallery/commit/f9ef505c1d60c9041e251682e0f6b3daad952d58; https://github.com/owncloud/gallery/commit/b3b3772fb9bec61ba10d357bef42b676fa474eee; https://github.com/owncloud/gallery/commit/dc4887f1afcc0cf304f4a0694075c9364298ad8a
CVE: CVE-2016-9467
Published: 2017-03-28
Description: Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-451, CWE-284
References: https://github.com/nextcloud/server/commit/1352365e8bf5ea49da3dc82b1ccf7ddb659ae960; https://github.com/nextcloud/server/commit/5dd211cc8845fd4533966bf8d7a7f2a6359ea013; https://github.com/nextcloud/server/commit/778ae8abd54c378fc4781394bbedc7a2ee3095e1
CVE: CVE-2016-9468
Published: 2017-03-28
Description: Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoints contained partially user-controllable input leading to a potential misrepresentation of information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-451, CWE-284
References: https://github.com/nextcloud/server/commit/7350e13113c8ed484727a5c25331ec11d4d59f5f; https://github.com/nextcloud/server/commit/a4cfb3ddc1f4cdb585e05c0e9b2f8e52a0e2ee3e; https://github.com/owncloud/core/commit/96b8afe48570bc70088ccd8f897e9d71997d336e
CVE: CVE-2016-9469
Published: 2017-03-28
Description: Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix was included in versions 8.14.3, 8.13.8, and 8.12.11, which were released on December 5th 2016 at 3:59 PST. The GitLab versions vulnerable to this are 8.13.0, 8.13.0-ee, 8.13.1, 8.13.1-ee, 8.13.2, 8.13.2-ee, 8.13.3, 8.13.3-ee, 8.13.4, 8.13.4-ee, 8.13.5, 8.13.5-ee, 8.13.6, 8.13.6-ee, 8.13.7, 8.14.0, 8.14.0-ee, 8.14.1, 8.14.2, and 8.14.2-ee.
CVSS Score: 8.2 (HIGH)
CWE: CWE-749, CWE-264
References: https://about.gitlab.com/2016/12/05/cve-2016-9469/; https://gitlab.com/gitlab-org/gitlab-ce/commit/29ceb98b[PII_REDACTED]702704e89d[PII_REDACTED]78; https://gitlab.com/gitlab-org/gitlab-ce/commit/[PII_REDACTED]1eea429913f9c4b1b37c42c2e358ce
CVE: CVE-2016-9470
Published: 2017-03-28
Description: Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-254
References: https://github.com/revive-adserver/revive-adserver/commit/69aacbd2; https://hackerone.com/reports/148745; https://www.revive-adserver.com/security/revive-sa-2016-002/
CVE: CVE-2016-9471
Published: 2017-03-28
Description: Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.
CVSS Score: 3.1 (LOW)
CWE: CWE-75
References: https://github.com/revive-adserver/revive-adserver/commit/05b1eceb; https://hackerone.com/reports/128181; https://www.revive-adserver.com/security/revive-sa-2016-002/
CVE: CVE-2016-9472
Published: 2017-03-28
Description: Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narrow and it is very unlikely that such an attack could be actually effective.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/revive-adserver/revive-adserver/commit/14ff73f0; https://github.com/revive-adserver/revive-adserver/commit/fcf72c8a; https://hackerone.com/reports/170156
CVE: CVE-2016-9473
Published: 2017-03-28
Description: Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-451, CWE-79
References: http://www.securityfocus.com/bid/97155; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/brave/browser-ios/pull/504
CVE: CVE-2017-0881
Published: 2017-03-28
Description: An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-863
References: http://www.securityfocus.com/bid/97159; https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f; https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ
CVE: CVE-2017-0882
Published: 2017-03-28
Description: Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-639, CWE-200
References: http://www.securityfocus.com/bid/97157; https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/; https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1
CVE: CVE-2017-7277
Published: 2017-03-28
Description: The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information from the kernel's internal socket data structures or cause a denial of service (out-of-bounds read) via crafted system calls, related to net/core/skbuff.c and net/socket.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4ef1b[PII_REDACTED]ad3ef91ad7d4891a83c1a509a; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8605330aac5a5785630aec8f64378a54891937cc; http://www.securityfocus.com/bid/97141
CVE: CVE-2016-10152
Published: 2017-03-28
Description: The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/21/1; http://www.securityfocus.com/bid/90952; https://bugzilla.redhat.com/show_bug.cgi?id=1332493
CVE: CVE-2016-8884
Published: 2017-03-28
Description: The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/10/23/1; http://www.openwall.com/lists/oss-security/2016/10/23/9; http://www.securityfocus.com/bid/93834
CVE: CVE-2014-6440
Published: 2017-03-28
Description: VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://billblough.net/blog/2015/03/04/cve-2014-6440-heap-overflow-in-vlc-transcode-module/; http://seclists.org/oss-sec/2015/q1/751; http://www.securityfocus.com/bid/72950
CVE: CVE-2016-8031
Published: 2017-03-28
Description: Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local security protection via a crafted input file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97142; http://www.securitytracker.com/id/1038159; https://kc.mcafee.com/corporate/index?page=content&id=SB10191
CVE: CVE-2016-8749
Published: 2017-03-28
Description: Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://camel.apache.org/security-advisories.data/CVE-2016-8749.txt.asc?version=2&modificationDate=[PII_REDACTED]00&api=v2; http://www.openwall.com/lists/oss-security/2017/05/22/2; http://www.securityfocus.com/bid/97179
CVE: CVE-2016-6807
Published: 2017-03-28
Description: Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agent process.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.securityfocus.com/bid/97184; https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.2; http://www.securityfocus.com/bid/97184
CVE: CVE-2017-7297
Published: 2017-03-29
Description: Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/97180; https://github.com/rancher/rancher/issues/8296; http://www.securityfocus.com/bid/97180
CVE: CVE-2017-2686
Published: 2017-03-29
Description: Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285, CWE-200
References: http://www.securityfocus.com/bid/97170; http://www.securitytracker.com/id/1038160; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE: CVE-2017-2687
Published: 2017-03-29
Description: Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/97170; http://www.securitytracker.com/id/1038160; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE: CVE-2017-2688
Published: 2017-03-29
Description: The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/97170; http://www.securitytracker.com/id/1038160; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE: CVE-2017-2689
Published: 2017-03-29
Description: Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-287
References: http://www.securityfocus.com/bid/97170; http://www.securitytracker.com/id/1038160; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE: CVE-2017-6864
Published: 2017-03-29
Description: The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/97170; http://www.securitytracker.com/id/1038160; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-01
CVE: CVE-2017-7294
Published: 2017-03-29
Description: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://www.securityfocus.com/bid/97177; https://access.redhat.com/errata/RHSA-2018:0676; https://access.redhat.com/errata/RHSA-2018:1062
CVE: CVE-2017-2655
Published: 2017-03-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-7298
Published: 2017-03-29
Description: In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.daimacn.com/index.php/post/12.html; http://www.daimacn.com/post/12.html; http://www.securityfocus.com/bid/97182
CVE: CVE-2009-5147
Published: 2017-03-29
Description: DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: http://seclists.org/oss-sec/2015/q3/222; http://www.securityfocus.com/bid/76060; https://access.redhat.com/errata/RHSA-2018:0583
CVE: CVE-2015-4556
Published: 2017-03-29
Description: The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.nongnu.org/archive/html/chicken-announce/2015-06/msg00010.html; http://lists.nongnu.org/archive/html/chicken-hackers/2015-06/msg00037.html; http://seclists.org/oss-sec/2015/q2/712
CVE: CVE-2015-8234
Published: 2017-03-29
Description: The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted image, which triggers an MD5 collision.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-310
References: http://seclists.org/oss-sec/2015/q4/303; https://bugs.launchpad.net/glance/+bug/1516031; https://wiki.openstack.org/wiki/OSSN/OSSN-0061
CVE: CVE-2016-6846
Published: 2017-03-29
Description: Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8; AppSuite frontend before 7.6.2-rev47, 7.8.0 before 7.8.0-rev30, and 7.8.2 before 7.8.2-rev8; Office Web before 7.6.2-rev16, 7.8.0 before 7.8.0-rev10, and 7.8.2 before 7.8.2-rev5; and Documentconverter-API before 7.8.2-rev5 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://software.open-xchange.com/OX6/doc/Release_Notes_for_Patch_Release_3520_7.8.0_2016-08-29.pdf; http://www.securityfocus.com/bid/93457; https://software.open-xchange.com/OX6/6.22/doc/Release_Notes_for_Patch_Release_3518_7.6.2_2016-08-29.pdf
CVE: CVE-2016-9924
Published: 2017-03-29
Description: Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.securityfocus.com/bid/97121; https://wiki.zimbra.com/wiki/Security_Center; http://www.securityfocus.com/bid/97121
CVE: CVE-2017-5671
Published: 2017-03-29
Description: Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriting the /etc/shadow file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://apps.intermec.com/downloads/eps_download/Firmware%20Release%20Notes%20x10_11_013310.pdf; http://www.securityfocus.com/bid/97236; https://akerva.com/blog/intermec-industrial-printers-local-root-with-busybox-jailbreak/
CVE: CVE-2017-5900
Published: 2017-03-29
Description: Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Mar/75; http://www.securityfocus.com/bid/97161; http://www.securitytracker.com/id/1038171
CVE: CVE-2017-7285
Published: 2017-03-29
Description: A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/97266; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.exploit-db.com/exploits/41752/