deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-12630
Published: 2017-12-18
Description: In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may obtain this information from Profile page afterwards.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://lists.apache.org/thread.html/608658a55d09e16542db41121a0a972c97448214cdc04071fd4db923%40%3Cdev.drill.apache.org%3E; https://lists.apache.org/thread.html/608658a55d09e16542db41121a0a972c97448214cdc04071fd4db923%40%3Cdev.drill.apache.org%3E
CVE: CVE-2017-14583
Published: 2017-12-18
Description: NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in SMB environments.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2017-17721
Published: 2017-12-18
Description: CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://0day.today/exploit/29277; https://becomepentester.blogspot.com/2017/12/ZUUSE-BEIMS-ContractorWeb-SQLInjection-CVE-2017-17721.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2017-15103
Published: 2017-12-18
Description: A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-20
References: https://access.redhat.com/errata/RHSA-2017:3481; https://access.redhat.com/security/cve/CVE-2017-15103; https://bugzilla.redhat.com/show_bug.cgi?id=1510147
CVE: CVE-2017-15104
Published: 2017-12-18
Description: An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-552, CWE-200
References: https://access.redhat.com/errata/RHSA-2017:3481; https://access.redhat.com/security/cve/CVE-2017-15104; https://bugzilla.redhat.com/show_bug.cgi?id=1510149
CVE: CVE-2017-15700
Published: 2017-12-18
Description: A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621%40%3Cdev.sling.apache.org%3E; https://lists.apache.org/thread.html/182bed1dd6933824a81cc5f07639eeb813fbd8f2cc49d51b452ab621%40%3Cdev.sling.apache.org%3E
CVE: CVE-2017-11562
Published: 2017-12-19
Description: A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384
References: https://pastebin.com/ajKErVTP; https://pastebin.com/ajKErVTP
CVE: CVE-2017-15524
Published: 2017-12-19
Description: The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.
CVSS Score: 9.1 (CRITICAL)
References: http://www.securityfocus.com/archive/1/541602/100/0/threaded; https://kemptechnologies.com/files/assets/documentation/7.2/release-notes/Release_Notes-LoadMaster.pdf?pdf-file-view=1; https://www.pallas.com/advisories/cve_2017_15524_kemp_afp_waf_bug_on_post_data
CVE: CVE-2017-15875
Published: 2017-12-19
Description: SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel; https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel
CVE: CVE-2017-15876
Published: 2017-12-19
Description: Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel; https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel
CVE: CVE-2017-15877
Published: 2017-12-19
Description: Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel; https://www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel
CVE: CVE-2017-16949
Published: 2017-12-19
Description: An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html; https://wpvulndb.com/vulnerabilities/8977; https://www.exploit-db.com/exploits/43324/
CVE: CVE-2017-17105
Published: 2017-12-19
Description: Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-bin/iptest.cgi?cmd=iptest.cgi&-time="[PII_REDACTED]37"&-url=$(reboot) request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html; http://packetstormsecurity.com/files/158120/Zivif-Camera-2.3.4.2103-iptest.cgi-Blind-Remote-Command-Execution.html; http://seclists.org/fulldisclosure/2017/Dec/42
CVE: CVE-2017-17106
Published: 2017-12-19
Description: Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin/hi3510/param.cgi?cmd=getuser HTTP request. This vulnerability exists because of a lack of authentication checks in requests to CGI pages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html; http://seclists.org/fulldisclosure/2017/Dec/42; https://twitter.com/silascutler/status/[PII_REDACTED]28968192
CVE: CVE-2017-17107
Published: 2017-12-19
Description: Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/145386/Zivif-PR115-204-P-RS-2.3.4.2103-Bypass-Command-Injection-Hardcoded-Password.html; http://seclists.org/fulldisclosure/2017/Dec/42; https://twitter.com/silascutler/status/[PII_REDACTED]28968192
CVE: CVE-2017-17757
Published: 2017-12-19
Description: TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt; https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt
CVE: CVE-2017-17758
Published: 2017-12-19
Description: TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt; https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt
CVE: CVE-2017-17759
Published: 2017-12-19
Description: Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).
CVSS Score: 9.8 (CRITICAL)
References: http://www.information-paradox.net/2017/12/conarc-ichannel-unauthenticated.html; https://www.exploit-db.com/exploits/43377/; http://www.information-paradox.net/2017/12/conarc-ichannel-unauthenticated.html
CVE: CVE-2017-15048
Published: 2017-12-19
Description: Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0[PII_REDACTED] allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/145452/Zoom-Linux-Client-2.0[PII_REDACTED]-Buffer-Overflow.html; http://seclists.org/fulldisclosure/2017/Dec/46; https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-002.txt
CVE: CVE-2017-15049
Published: 2017-12-19
Description: The ZoomLauncher binary in the Zoom client for Linux before 2.0[PII_REDACTED] does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/145453/Zoom-Linux-Client-2.0[PII_REDACTED]-Command-Injection.html; http://seclists.org/fulldisclosure/2017/Dec/47; https://github.com/convisoappsec/advisories/blob/master/2017/CONVISO-17-003.txt
CVE: CVE-2017-16786
Published: 2017-12-19
Description: The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privileges to read arbitrary files via (1) the ntpclientcounterlogfile parameter to cgi-bin/mainv2 or (2) vectors involving curl support of the "file" schema in the firmware update functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html; http://seclists.org/fulldisclosure/2017/Dec/50; http://packetstormsecurity.com/files/145388/Meinberg-LANTIME-Web-Configuration-Utility-6.16.008-Arbitrary-File-Read.html
CVE: CVE-2017-17088
Published: 2017-12-19
Description: The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/145435/Sync-Breeze-10.2.12-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Dec/45; https://www.exploit-db.com/exploits/43344/
CVE: CVE-2013-6465
Published: 2017-12-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1048380; https://github.com/kiegroup/jbpm-wb/commit/[PII_REDACTED]e8e94645b52adb9426bedfa9ffdd04; https://github.com/kiegroup/jbpm-wb/compare/6.0.x
CVE: CVE-2017-17719
Published: 2017-12-19
Description: A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the result_message parameter to includes/concours_page.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Dec/71; https://wpvulndb.com/vulnerabilities/8981; http://seclists.org/fulldisclosure/2017/Dec/71
CVE: CVE-2017-17744
Published: 2017-12-19
Description: A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter to view/advancedsettings.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Dec/72; https://wpvulndb.com/vulnerabilities/8982; http://seclists.org/fulldisclosure/2017/Dec/72
CVE: CVE-2017-17753
Published: 2017-12-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in the esb-csv-import-export plugin through 1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cie_type, (2) cie_import, (3) cie_update, or (4) cie_ignore parameter to includes/admin/views/esb-cie-import-export-page.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Dec/73; http://seclists.org/fulldisclosure/2017/Dec/73
CVE: CVE-2017-17761
Published: 2017-12-19
Description: An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML element for specifying the command. For example, a <system>id</system> command results in a <system_ack>ok</system_ack> response.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/102974; https://blogs.securiteam.com/index.php/archives/3576; http://www.securityfocus.com/bid/102974
CVE: CVE-2017-17763
Published: 2017-12-19
Description: SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file transfer, which makes it easier for remote attackers to send crafted files, as demonstrated by APK injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://thinktanksec.github.io/; https://thinktanksec.github.io/
CVE: CVE-2017-17774
Published: 2017-12-20
Description: admin/configuration.php in Piwigo 2.9.2 has CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Piwigo/Piwigo/issues/822; https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md; https://github.com/Piwigo/Piwigo/issues/822
CVE: CVE-2017-17775
Published: 2017-12-20
Description: Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/piwigo.md
CVE: CVE-2017-17776
Published: 2017-12-20
Description: Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE: CVE-2017-17777
Published: 2017-12-20
Description: Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the admin/viewvisitcamp.php fn parameter and the admin/userview.php uid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE: CVE-2017-17778
Published: 2017-12-20
Description: Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE: CVE-2017-17779
Published: 2017-12-20
Description: Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md; https://github.com/d4wner/Vulnerabilities-Report/blob/master/paid-to-read-script.md
CVE: CVE-2017-17780
Published: 2017-12-20
Description: The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Clockwork SMS 2.0.5.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/145469/Clockwork-SMS-Cross-Site-Scripting.html; https://plugins.trac.wordpress.org/changeset/1781424/clockwork-two-factor-authentication/trunk/templates/clockwork-test-message.php?old=706348&old_path=clockwork-two-factor-authentication%2Ftrunk%2Ftemplates%2Fclockwork-test-message.php; https://packetstormsecurity.com/files/145469/Clockwork-SMS-Cross-Site-Scripting.html
CVE: CVE-2017-17781
Published: 2017-12-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-17782
Published: 2017-12-20
Description: In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs chunk allocation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=8e3d2264109c; https://lists.debian.org/debian-lts-announce/2018/01/msg00005.html; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-17783
Published: 2017-12-20
Description: In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=[PII_REDACTED]9a; https://sourceforge.net/p/graphicsmagick/bugs/529/; https://usn.ubuntu.com/4248-1/
CVE: CVE-2017-17784
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; http://www.securityfocus.com/bid/102899; https://bugzilla.gnome.org/show_bug.cgi?id=790784
CVE: CVE-2017-17785
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; https://bugzilla.gnome.org/show_bug.cgi?id=739133; https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html
CVE: CVE-2017-17786
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; http://www.securityfocus.com/bid/102765; https://bugzilla.gnome.org/show_bug.cgi?id=739134
CVE: CVE-2017-17787
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; https://bugzilla.gnome.org/show_bug.cgi?id=790853; https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html
CVE: CVE-2017-17788
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; https://bugzilla.gnome.org/show_bug.cgi?id=790783; https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html
CVE: CVE-2017-17789
Published: 2017-12-20
Description: In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2017/12/19/5; http://www.securityfocus.com/bid/102898; https://bugzilla.gnome.org/show_bug.cgi?id=790849
CVE: CVE-2017-17790
Published: 2017-12-20
Description: The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://access.redhat.com/errata/RHSA-2018:0378; https://access.redhat.com/errata/RHSA-2018:0583; https://access.redhat.com/errata/RHSA-2018:0584
CVE: CVE-2017-17792
Published: 2017-12-20
Description: Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/BlogoText/blogotext/commit/7c6f74e43008b[PII_REDACTED]696c67acbab87911d; https://github.com/BlogoText/blogotext/issues/345; https://github.com/BlogoText/blogotext/commit/7c6f74e43008b[PII_REDACTED]696c67acbab87911d
CVE: CVE-2017-17793
Published: 2017-12-20
Description: Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on Windows servers, by providing the archiv~1.zip name (aka an 8.3 filename).
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91; https://github.com/BlogoText/blogotext/issues/345; https://github.com/BlogoText/blogotext/commit/101dc1d37010a1d877d6961ed2f32d089c708e91